From 76c8765bda5176a725d24dad2cd45a5f7970c234 Mon Sep 17 00:00:00 2001
From: luozhiwenn <luozhiwen6@huawei.com>
Date: Thu, 20 Oct 2022 20:57:39 +0800
Subject: [PATCH] ensure etc-host file permission is 644 whatever umask is

---
 pkg/kubelet/kubelet_pods.go | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/pkg/kubelet/kubelet_pods.go b/pkg/kubelet/kubelet_pods.go
index 27861e13382..9b7a87fa475 100644
--- a/pkg/kubelet/kubelet_pods.go
+++ b/pkg/kubelet/kubelet_pods.go
@@ -343,7 +343,11 @@ func ensureHostsFile(fileName string, hostIPs []string, hostName, hostDomainName
 		hostsFileContent = managedHostsFileContent(hostIPs, hostName, hostDomainName, hostAliases)
 	}
 
-	return os.WriteFile(fileName, hostsFileContent, 0644)
+	hostsFilePerm := os.FileMode(0644)
+	if err := os.WriteFile(fileName, hostsFileContent, hostsFilePerm); err != nil {
+		return err
+	}
+	return os.Chmod(fileName, hostsFilePerm)
 }
 
 // nodeHostsFileContent reads the content of node's hosts file.