Skip to content
Snippets Groups Projects
Unverified Commit 19d07a4f authored by Kenichi Omichi's avatar Kenichi Omichi Committed by GitHub
Browse files

Fix ownership related to Calico (#8072)

kube-bench scan outputs warning related to Calico like:

* text: "Ensure that the Container Network Interface file
  permissions are set to 644 or more restrictive (Manual)"
* text: "Ensure that the Container Network Interface file
  ownership is set to root:root (Manual)"

This fixes these warnings.
parent 6a5b87dd
No related branches found
No related tags found
No related merge requests found
......@@ -36,7 +36,7 @@
file:
path: /etc/cni/net.d
state: directory
owner: kube
owner: root
mode: 0755
- name: Setup CNI
copy:
......
......@@ -20,7 +20,7 @@
template:
src: "cni-calico.conflist.j2"
dest: "/etc/cni/net.d/calico.conflist.template"
owner: kube
owner: root
register: calico_conflist
notify: reset_calico_cni
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment