From deb532ce2744f40020ee9817d83d5d6df755c116 Mon Sep 17 00:00:00 2001
From: Kay Yan <yankay@users.noreply.github.com>
Date: Tue, 28 Mar 2023 12:48:22 +0800
Subject: [PATCH] fix-kube-bench-4.1.1 (#9934)

---
 roles/kubernetes/node/tasks/kubelet.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/roles/kubernetes/node/tasks/kubelet.yml b/roles/kubernetes/node/tasks/kubelet.yml
index c551f772d..c08ef5fb8 100644
--- a/roles/kubernetes/node/tasks/kubelet.yml
+++ b/roles/kubernetes/node/tasks/kubelet.yml
@@ -33,7 +33,7 @@
     src: "kubelet.service.j2"
     dest: "/etc/systemd/system/kubelet.service"
     backup: "yes"
-    mode: 0644
+    mode: 0600
   notify: Node | restart kubelet
   tags:
     - kubelet