Chmod password and token files.

Fixes #7808.
2025-08-31 16:46:54 +00:00 · 2016-01-25 15:14:17 -08:00
parent 0e889a1afd
commit f2df774ec9
1 changed files with 6 additions and 0 deletions
--- a/cluster/saltbase/salt/kube-apiserver/init.sls
+++ b/cluster/saltbase/salt/kube-apiserver/init.sls
@@ -4,6 +4,9 @@
 /srv/kubernetes/known_tokens.csv:
  file.managed:
    - source: salt://kube-apiserver/known_tokens.csv
+    - user: root
+    - group: root
+    - mode: 600
 #    - watch_in:
 #      - service: kube-apiserver
 {% endif %}
@@ -13,6 +16,9 @@
 /srv/kubernetes/basic_auth.csv:
  file.managed:
    - source: salt://kube-apiserver/basic_auth.csv
+    - user: root
+    - group: root
+    - mode: 600
 {% endif %}

 /var/log/kube-apiserver.log: