Ensure vault file permissions are correct

2018-09-07 11:27:25 +03:00 · 2018-09-07 11:27:25 +03:00 · aaa9a4efac
parent baf1aba239
commit aaa9a4efac
1 changed files with 6 additions and 0 deletions
--- a/roles/etcd/tasks/gen_certs_vault.yml
+++ b/roles/etcd/tasks/gen_certs_vault.yml
@ -65,3 +65,9 @@
  with_items: "{{ etcd_node_certs_needed|d([]) }}"
  when: inventory_hostname in etcd_node_cert_hosts
  notify: set etcd_secret_changed
+
+- name: gen_certs_vault | ensure file permissions
+  shell: >-
+    find {{etcd_cert_dir }} -type d -exec chmod 0755 {} \; &&
+    find {{etcd_cert_dir }} -type f -exec chmod 0640 {} \;
+  changed_when: false