diff --git a/global/overlay/etc/puppet/modules/cdn/templates/l4lb/docker-compose.yml.erb b/global/overlay/etc/puppet/modules/cdn/templates/l4lb/docker-compose.yml.erb
index 3d876e8..6481474 100644
--- a/global/overlay/etc/puppet/modules/cdn/templates/l4lb/docker-compose.yml.erb
+++ b/global/overlay/etc/puppet/modules/cdn/templates/l4lb/docker-compose.yml.erb
@@ -2,9 +2,9 @@ services:
   l4lb:
     image: "quay.io/cilium/cilium:<%= @cilium_version %>"
     volumes:
-      - /sys/fs/bpf
-      - /lib/modules
-      - /var/run/netns
+      - /sys/fs/bpf:/sys/fs/bpf
+      - /lib/modules:/lib/modules:ro
+      - /var/run/netns:/var/run/netns:ro
     network_mode: "host"
     privileged: true
     command: