From 35c928798d642b48314a5a3b13c478587236c30e Mon Sep 17 00:00:00 2001 From: Bryan Hundven Date: Thu, 9 Sep 2021 23:35:59 -0700 Subject: [PATCH] Fix missing file mode (risky-file-permissions) (#7959) * Fix missing file mode (risky-file-permissions) Found this using ansible-lint. Signed-off-by: Bryan Hundven * Fix another missing file mode (risky-file-permissions) This one fixes `/etc/crio/config.json` Signed-off-by: Bryan Hundven --- roles/bootstrap-os/tasks/bootstrap-centos.yml | 1 + roles/container-engine/cri-o/tasks/main.yaml | 1 + 2 files changed, 2 insertions(+) diff --git a/roles/bootstrap-os/tasks/bootstrap-centos.yml b/roles/bootstrap-os/tasks/bootstrap-centos.yml index c8a395af6..79d66eebf 100644 --- a/roles/bootstrap-os/tasks/bootstrap-centos.yml +++ b/roles/bootstrap-os/tasks/bootstrap-centos.yml @@ -74,6 +74,7 @@ section: "extras" option: "{{ item.option }}" value: "{{ item.value }}" + mode: 0644 with_items: - { option: "name", value: "CentOS-{{ ansible_distribution_major_version }} - Extras" } - { option: "enabled", value: "1" } diff --git a/roles/container-engine/cri-o/tasks/main.yaml b/roles/container-engine/cri-o/tasks/main.yaml index 55db2690f..25b338ed5 100644 --- a/roles/container-engine/cri-o/tasks/main.yaml +++ b/roles/container-engine/cri-o/tasks/main.yaml @@ -84,6 +84,7 @@ template: src: config.json.j2 dest: /etc/crio/config.json + mode: 0644 register: reg_auth_install - name: Add skopeo pkg to install