From f2df774ec9650f0b11fe0920351150365b7d7d42 Mon Sep 17 00:00:00 2001
From: Eric Tune <etune@google.com>
Date: Mon, 25 Jan 2016 15:14:17 -0800
Subject: [PATCH] Chmod password and token files.

Fixes #7808.
---
 cluster/saltbase/salt/kube-apiserver/init.sls | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/cluster/saltbase/salt/kube-apiserver/init.sls b/cluster/saltbase/salt/kube-apiserver/init.sls
index 85b40c3c48b..84583bccc85 100644
--- a/cluster/saltbase/salt/kube-apiserver/init.sls
+++ b/cluster/saltbase/salt/kube-apiserver/init.sls
@@ -4,6 +4,9 @@
 /srv/kubernetes/known_tokens.csv:
   file.managed:
     - source: salt://kube-apiserver/known_tokens.csv
+    - user: root
+    - group: root
+    - mode: 600
 #    - watch_in:
 #      - service: kube-apiserver
 {% endif %}
@@ -13,6 +16,9 @@
 /srv/kubernetes/basic_auth.csv:
   file.managed:
     - source: salt://kube-apiserver/basic_auth.csv
+    - user: root
+    - group: root
+    - mode: 600
 {% endif %}
 
 /var/log/kube-apiserver.log: