Merge pull request #18766 from joelsmith/nested

Automatic merge from submit-queue.

UPSTREAM: 60342: Fix nested volume mounts for read-only API data volumes

**What this PR does / why we need it**:
Since the runtime may try to create mount points within the sandbox, it will fail if the mount point is within a read-only API data volume, like a secret or configMap volume.

Create any needed mount points during volume setup.

xref kubernetes/kubernetes#60342

**Which issue(s) this PR fixes**:
None

**Special notes for your reviewer**:

**Release note**:
No release notes because we haven't released anything (yet) that has this bug.
```release-note
NONE

```

Author: openshift-merge-robot