From 3a453a9370399832453a373af8bc1d0ab1d5158c Mon Sep 17 00:00:00 2001
From: Diego Rodriguez <diego.rodriguez@cern.ch>
Date: Mon, 27 Jan 2020 12:54:09 +0100
Subject: [PATCH] volumes: CVMFS readOnly to true on job pod spec

* Closes reanahub/reana#260.
---
 reana_job_controller/kubernetes_job_manager.py | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/reana_job_controller/kubernetes_job_manager.py b/reana_job_controller/kubernetes_job_manager.py
index e23b0dc9..53a1b0e6 100644
--- a/reana_job_controller/kubernetes_job_manager.py
+++ b/reana_job_controller/kubernetes_job_manager.py
@@ -159,7 +159,8 @@ def execute(self):
                 (self.job['spec']['template']['spec']['containers'][0]
                     ['volumeMounts'].append(
                         {'name': volume['name'],
-                         'mountPath': '/cvmfs/{}'.format(mount_path)}
+                         'mountPath': '/cvmfs/{}'.format(mount_path),
+                         'readOnly': volume['readOnly']}
                 ))
                 self.job['spec']['template']['spec']['volumes'].append(volume)