pub const BINDCAR_TMP_PATH: &str = "/tmp";Expand description
Writable temporary directory mounted into the bindcar sidecar.
Under Pod Security Admission restricted the sidecar runs with
readOnlyRootFilesystem: true, but bindcar writes a 0600 TSIG key file for
nsupdate -k. A memory-backed emptyDir is mounted here and TMPDIR points
at it.