Merge pull request #2772 from cruwe/cjr-correct-perms-on-kubeconfig

make admin.conf -> .kube/config non-executable
2018-05-15 13:26:33 +02:00 · 2018-05-15 13:26:33 +02:00 · 1be399ab7b
parent 76fc786c07 73800ef111
commit 1be399ab7b
2 changed files with 2 additions and 2 deletions
--- a/roles/kubernetes/client/tasks/main.yml
+++ b/roles/kubernetes/client/tasks/main.yml
@ -40,7 +40,7 @@
    src: "{{ kube_config_dir }}/admin.conf"
    dest: "/root/.kube/config"
    remote_src: yes
-    mode: "0700"
+    mode: "0600"
    backup: yes

 - name: Copy admin kubeconfig to ansible host
--- a/roles/kubernetes/master/tasks/kubeadm-setup.yml
+++ b/roles/kubernetes/master/tasks/kubeadm-setup.yml
@ -128,7 +128,7 @@
    content: "{{ item.content | b64decode }}"
    owner: root
    group: root
-    mode: 0700
+    mode: 0600
  no_log: true
  register: copy_kubeadm_certs
  with_items: "{{ kubeadm_certs.results }}"