From 49d106f61509f01fb7c8c7411006c9d500f72bc7 Mon Sep 17 00:00:00 2001
From: "Christopher J. Ruwe" <cjr@cruwe.de>
Date: Mon, 14 May 2018 09:29:48 +0000
Subject: [PATCH] make admin.conf -> .kube/config non-executable
Almost certainly, the .kube/config file (YAML) should not be executable.
---
roles/kubernetes/client/tasks/main.yml | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/roles/kubernetes/client/tasks/main.yml b/roles/kubernetes/client/tasks/main.yml
index d34131a3a..67b2da325 100644
--- a/roles/kubernetes/client/tasks/main.yml
+++ b/roles/kubernetes/client/tasks/main.yml
@@ -40,7 +40,7 @@
src: "{{ kube_config_dir }}/admin.conf"
dest: "/root/.kube/config"
remote_src: yes
- mode: "0700"
+ mode: "0600"
backup: yes
- name: Copy admin kubeconfig to ansible host
--
GitLab