github/kubernetes
1
0
Fork 0
mirror of https://github.com/k3s-io/kubernetes.git synced 2025-07-20 18:31:15 +00:00
Code Issues Projects Releases Wiki Activity

Merge pull request #115472 from lanycrost/client-go-110992-GenerateSelfSignedCertKeyWithFixtures-permissions

Browse Source 
client-go: make generating certificate/key permissions more restrictive (600)
This commit is contained in:
Kubernetes Prow Robot 2023-02-17 09:00:03 -08:00 committed by GitHub
commit 8014155cb5
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
staging/src/k8s.io/client-go/util/cert/cert.go
View File

@ -191,7 +191,7 @@ func GenerateSelfSignedCertKeyWithFixtures(host string, alternateIPs []net.IP, a
if err := os.WriteFile(certFixturePath, certBuffer.Bytes(), 0644); err != nil { if err := os.WriteFile(certFixturePath, certBuffer.Bytes(), 0644); err != nil {
return nil, nil, fmt.Errorf("failed to write cert fixture to %s: %v", certFixturePath, err) return nil, nil, fmt.Errorf("failed to write cert fixture to %s: %v", certFixturePath, err)
} }
if err := os.WriteFile(keyFixturePath, keyBuffer.Bytes(), 0644); err != nil { if err := os.WriteFile(keyFixturePath, keyBuffer.Bytes(), 0600); err != nil {
return nil, nil, fmt.Errorf("failed to write key fixture to %s: %v", certFixturePath, err) return nil, nil, fmt.Errorf("failed to write key fixture to %s: %v", certFixturePath, err)
} }
} }