d84ff06f73
* Set filemode to 0640 weave-net.yml file is readable by all users on the host. It however contains the weave_password to encrypt all pod communication. It should only be readable by root. * Set mode 0640 on users_file with basic auth
16 lines
365 B
YAML
16 lines
365 B
YAML
---
|
|
- name: Make sure the users directory exits
|
|
file:
|
|
path: "{{ kube_users_dir }}"
|
|
state: directory
|
|
mode: o-rwx
|
|
group: "{{ kube_cert_group }}"
|
|
|
|
- name: Populate users for basic auth in API
|
|
template:
|
|
src: known_users.csv.j2
|
|
dest: "{{ kube_users_dir }}/known_users.csv"
|
|
mode: 0640
|
|
backup: yes
|
|
notify: Master | set secret_changed
|