C12s/c12s-kubespray
3
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Merge pull request #2772 from cruwe/cjr-correct-perms-on-kubeconfig

Browse source 
make admin.conf -> .kube/config non-executable
This commit is contained in:
Andreas Krüger 2018-05-15 13:26:33 +02:00 committed by GitHub
commit 1be399ab7b
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
2 changed files with 2 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
roles/kubernetes/client/tasks/main.yml
View file

@ -40,7 +40,7 @@
src: "{{ kube_config_dir }}/admin.conf" src: "{{ kube_config_dir }}/admin.conf"
dest: "/root/.kube/config" dest: "/root/.kube/config"
remote_src: yes remote_src: yes
mode: "0700" mode: "0600"
backup: yes backup: yes
- name: Copy admin kubeconfig to ansible host - name: Copy admin kubeconfig to ansible host

2
roles/kubernetes/master/tasks/kubeadm-setup.yml
View file

@ -128,7 +128,7 @@
content: "{{ item.content | b64decode }}" content: "{{ item.content | b64decode }}"
owner: root owner: root
group: root group: root
mode: 0700 mode: 0600
no_log: true no_log: true
register: copy_kubeadm_certs register: copy_kubeadm_certs
with_items: "{{ kubeadm_certs.results }}" with_items: "{{ kubeadm_certs.results }}"