From e3dcd3c0a9e4720e5426d9102b3eccf601165ca0 Mon Sep 17 00:00:00 2001 From: PingWang Date: Sat, 13 Apr 2019 11:45:06 +0800 Subject: [PATCH] Expect directory permissions to be 0700 or less Signed-off-by: PingWang update the permissions to 0660 Signed-off-by: PingWang revert to 0750 Signed-off-by: PingWang update 0750 to 0700 Signed-off-by: PingWang --- cmd/kubeadm/app/phases/upgrade/postupgrade.go | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/cmd/kubeadm/app/phases/upgrade/postupgrade.go b/cmd/kubeadm/app/phases/upgrade/postupgrade.go index ca1e51ad593..e49e37bfe57 100644 --- a/cmd/kubeadm/app/phases/upgrade/postupgrade.go +++ b/cmd/kubeadm/app/phases/upgrade/postupgrade.go @@ -231,7 +231,7 @@ func GetKubeletDir(dryRun bool) (string, error) { // backupAPIServerCertAndKey backups the old cert and key of kube-apiserver to a specified directory. func backupAPIServerCertAndKey(certAndKeyDir string) error { subDir := filepath.Join(certAndKeyDir, "expired") - if err := os.Mkdir(subDir, 0766); err != nil { + if err := os.Mkdir(subDir, 0700); err != nil { return errors.Wrapf(err, "failed to created backup directory %s", subDir) }