From cd153a1fb38d8ab66c9651438685f37e0642959d Mon Sep 17 00:00:00 2001 From: chadswen Date: Fri, 9 Mar 2018 00:11:10 -0600 Subject: [PATCH] Fix kubernetes cert permission sync Add `state: directory` to `file` task so that `recurse: yes` will actually take effect and ensure certs/keys have the right file mode and owner --- roles/kubernetes/secrets/tasks/gen_certs_script.yml | 1 + 1 file changed, 1 insertion(+) diff --git a/roles/kubernetes/secrets/tasks/gen_certs_script.yml b/roles/kubernetes/secrets/tasks/gen_certs_script.yml index c1dfeb394..011575358 100644 --- a/roles/kubernetes/secrets/tasks/gen_certs_script.yml +++ b/roles/kubernetes/secrets/tasks/gen_certs_script.yml @@ -179,6 +179,7 @@ file: path: "{{ kube_cert_dir }}" group: "{{ kube_cert_group }}" + state: directory owner: kube mode: "u=rwX,g-rwx,o-rwx" recurse: yes