From 7eaaedf9f6db84589913c2974fdb7225b933ba3d Mon Sep 17 00:00:00 2001 From: Jonathan Wong Date: Tue, 26 Nov 2019 13:29:50 -0800 Subject: [PATCH] Make LocalVolume read only --- kyaml/kio/filters/container.go | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/kyaml/kio/filters/container.go b/kyaml/kio/filters/container.go index 53fc8178b..797dc2cad 100644 --- a/kyaml/kio/filters/container.go +++ b/kyaml/kio/filters/container.go @@ -114,7 +114,7 @@ func (c *ContainerFilter) getArgs() []string { } if c.LocalVolume != "" { - args = append(args, "--mount", fmt.Sprintf("'type=volume,src=%s,dst=/local/'", c.LocalVolume)) + args = append(args, "--mount", fmt.Sprintf("'type=volume,src=%s,dst=/local/:ro'", c.LocalVolume)) } // export the local environment vars to the container