Bug link: https://issues.redhat.com/browse/CNV-59243

Steps to reproduce the bug on upstream:

• Deploy cluster with `KUBEVIRT_DEPLOY_ISTIO=true` so you have a cluster with istio
• Create a VM with passt nw binding
• Monitor the annotation of the VMI.

Result:

The annotation changes from

k8s.v1.cni.cncf.io/networks: '[\{"name":"netbindingpasst","namespace":"kubevirt-test-default1","cni-args":{"logicNetworkName":"default"}}, {"name": "istio-cni", "namespace": "default"}]'

to

k8s.v1.cni.cncf.io/networks: '{"name":"netbindingpasst","namespace":"kubevirt-test-default1","cni-args":{"logicNetworkName":"default"}}'

Easier way to reproduce:

• Run this test with a long sleep here
• Run

  watch -n 1 kubectl get pod -n kubevirt-test-default1 -o yaml
  

  in parallel.

• You will see the annotation change