Fix missing file mode (risky-file-permissions) (#7959)

* Fix missing file mode (risky-file-permissions)

Found this using ansible-lint.

Signed-off-by: Bryan Hundven <bryanhundven@gmail.com>

* Fix another missing file mode (risky-file-permissions)

This one fixes `/etc/crio/config.json`

Signed-off-by: Bryan Hundven <bryanhundven@gmail.com>

roles/bootstrap-os/tasks/bootstrap-centos.yml

@@ -74,6 +74,7 @@
     section: "extras"
     option: "{{ item.option }}"
     value: "{{ item.value }}"
+    mode: 0644
   with_items:
     - { option: "name", value: "CentOS-{{ ansible_distribution_major_version }} - Extras" }
     - { option: "enabled", value: "1" }

roles/container-engine/cri-o/tasks/main.yaml

@@ -84,6 +84,7 @@
   template:
     src: config.json.j2
     dest: /etc/crio/config.json
+    mode: 0644
   register: reg_auth_install
 
 - name: Add skopeo pkg to install