Failed to validate Wallet: read-only file system

[gotsysdba]

Fresh installation of OKE (v1.32.1) using the OraOperator add-on.

Syncing with existing ADB:

apiVersion: database.oracle.com/v1alpha1
kind: AutonomousDatabase
metadata:
  name: my-release-adb-s
  namespace: my-release
spec:
  action: "Sync"
  details:
    id: ocid1.autonomousdatabase.oc1....
  wallet:
    name: my-release-adb-tns-admin-1
    password:
      k8sSecret:
        name: my-release-adb-wallet-pass-1
  ociConfig:
    configMapName: my-release-oci-config

ADB resource in AVAILABLE state, with no details and secret my-release-adb-tns-admin-1 not created.

Logs on controller pod:

ERROR   controllers.database.AutonomousDatabase.validateWallet.manageError
Error occured   {"Namespace/Name": {"name":"my-release-adb-s","namespace":"my-release"}, 

---> "error": "Failed to validate Wallet: open /tmp/wallet1208873634.zip: read-only file system"}

github.com/oracle/oracle-database-operator/controllers/database.(*AutonomousDatabaseReconciler).manageError
        /workspace/controllers/database/autonomousdatabase_controller.go:392
github.com/oracle/oracle-database-operator/controllers/database.(*AutonomousDatabaseReconciler).Reconcile
        /workspace/controllers/database/autonomousdatabase_controller.go:320
sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).Reconcile
        /workspace/vendor/sigs.k8s.io/controller-runtime/pkg/internal/controller/controller.go:116
sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).reconcileHandler
        /workspace/vendor/sigs.k8s.io/controller-runtime/pkg/internal/controller/controller.go:303
sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).processNextWorkItem
        /workspace/vendor/sigs.k8s.io/controller-runtime/pkg/internal/controller/controller.go:263
sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).Start.func2.2
        /workspace/vendor/sigs.k8s.io/controller-runtime/pkg/internal/controller/controller.go:224

Manual Workaround
Edited the deployments/oracle-database-operator-controller-manager and added:

  volumeMounts:
    - mountPath: /tmp
      name: tmp
...
volumes:
  - emptyDir: {}
    name: tmp

[gotsysdba]

Root cause; when deployed via the add-on, this is included in the deployment container spec:

        securityContext:
          allowPrivilegeEscalation: false
          capabilities:
            drop:
            - ALL
          privileged: false
          readOnlyRootFilesystem: true
          runAsUser: 1002

When deployed via standalone, the securityContext is not included.