kubernetes-sigs
/
kubespray
mirror of https://github.com/kubernetes-sigs/kubespray.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #2772 from cruwe/cjr-correct-perms-on-kubeconfig 

make admin.conf -> .kube/config non-executable
pull/1897/merge
Andreas Krüger 2018-05-15 13:26:33 +02:00 committed by GitHub
parent 76fc786c07 73800ef111
commit 1be399ab7b
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
2 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
roles/kubernetes/client/tasks/main.yml
View File

@ -40,7 +40,7 @@
src: "{{ kube_config_dir }}/admin.conf" src: "{{ kube_config_dir }}/admin.conf"
dest: "/root/.kube/config" dest: "/root/.kube/config"
remote_src: yes remote_src: yes
mode: "0700" mode: "0600"
backup: yes backup: yes
- name: Copy admin kubeconfig to ansible host - name: Copy admin kubeconfig to ansible host

2
roles/kubernetes/master/tasks/kubeadm-setup.yml
View File

@ -128,7 +128,7 @@
content: "{{ item.content | b64decode }}" content: "{{ item.content | b64decode }}"
owner: root owner: root
group: root group: root
mode: 0700 mode: 0600
no_log: true no_log: true
register: copy_kubeadm_certs register: copy_kubeadm_certs
with_items: "{{ kubeadm_certs.results }}" with_items: "{{ kubeadm_certs.results }}"