Skip to content
Snippets Groups Projects
Unverified Commit 19d07a4f authored by Kenichi Omichi's avatar Kenichi Omichi Committed by GitHub
Browse files

Fix ownership related to Calico (#8072)

kube-bench scan outputs warning related to Calico like:

* text: "Ensure that the Container Network Interface file
  permissions are set to 644 or more restrictive (Manual)"
* text: "Ensure that the Container Network Interface file
  ownership is set to root:root (Manual)"

This fixes these warnings.
parent 6a5b87dd
No related branches found
No related tags found
No related merge requests found
...@@ -36,7 +36,7 @@ ...@@ -36,7 +36,7 @@
file: file:
path: /etc/cni/net.d path: /etc/cni/net.d
state: directory state: directory
owner: kube owner: root
mode: 0755 mode: 0755
- name: Setup CNI - name: Setup CNI
copy: copy:
......
...@@ -20,7 +20,7 @@ ...@@ -20,7 +20,7 @@
template: template:
src: "cni-calico.conflist.j2" src: "cni-calico.conflist.j2"
dest: "/etc/cni/net.d/calico.conflist.template" dest: "/etc/cni/net.d/calico.conflist.template"
owner: kube owner: root
register: calico_conflist register: calico_conflist
notify: reset_calico_cni notify: reset_calico_cni
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment