Node pull credential overwrite via writable hostPath

Improper access control in Red Hat OpenShift Container Platform allows remote authenticated users to overwrite node pull credentials via a writable hostPath mount. In the docker-build path, a build pod mounts the worker node's /var/lib/kubelet/config.json into the container without read-only protection, exposing a credential file for direct modification and read access from the pod context. Reachability requires developer-level access to run a docker-build pod, and successful abuse can block later image pulls on the node and expose credentials for private image repositories.