Expect directory permissions to be 0700 or less

Signed-off-by: PingWang <wang.ping5@zte.com.cn>

update the permissions to 0660

Signed-off-by: PingWang <wang.ping5@zte.com.cn>

revert to 0750

Signed-off-by: PingWang <wang.ping5@zte.com.cn>

update 0750 to 0700

Signed-off-by: PingWang <wang.ping5@zte.com.cn>
This commit is contained in:
PingWang 2019-04-13 11:45:06 +08:00
parent e68888384b
commit e3dcd3c0a9

View File

@ -231,7 +231,7 @@ func GetKubeletDir(dryRun bool) (string, error) {
// backupAPIServerCertAndKey backups the old cert and key of kube-apiserver to a specified directory.
func backupAPIServerCertAndKey(certAndKeyDir string) error {
subDir := filepath.Join(certAndKeyDir, "expired")
if err := os.Mkdir(subDir, 0766); err != nil {
if err := os.Mkdir(subDir, 0700); err != nil {
return errors.Wrapf(err, "failed to created backup directory %s", subDir)
}