Mount kubevirt-network/uid directory as read only
Launcher doesn't need to write into the directory. It is only used to
pass network runtime details collected and written by virt-handler.
@@ -353,6 +353,7 @@ func (t *templateService) RenderLaunchManifest(vmi *v1.VirtualMachineInstance) (
Name: "virt-network-dir",
MountPath: path.Join(t.virtNetworkDir, string(vmi.UID)),
MountPropagation: &prop,
+ ReadOnly: true,
})
volumeMounts = append(volumeMounts, k8sv1.VolumeMount{
