From: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
Date: Wed, 10 Feb 2021 12:25:59 +0000 (+0100)
Subject: Fix kubeconfig file permissions
X-Git-Url: https://gerrit.onap.org/r/gitweb?a=commitdiff_plain;h=refs%2Fchanges%2F77%2F117677%2F1;p=oom%2Foffline-installer.git

Fix kubeconfig file permissions

Kubeconfig file should not be world readable. Helm v3 prints relevant
warning to stderr if it's (kubeconfig) mode is incorrect.

Change-Id: I9d2b8618cd3e43a49345e96f6ed5169438a29cef
Issue-ID: OOM-2665
Signed-off-by: Bartek Grzybowski <b.grzybowski@partner.samsung.com>
---

diff --git a/ansible/roles/rke/tasks/rke_deploy.yml b/ansible/roles/rke/tasks/rke_deploy.yml
index 7b36f55d..17861ad2 100644
--- a/ansible/roles/rke/tasks/rke_deploy.yml
+++ b/ansible/roles/rke/tasks/rke_deploy.yml
@@ -23,4 +23,4 @@
     src: "{{ cluster_config_dir }}/kube_config_cluster.yml"
     dest: "{{ kube_config_dir }}/config"
     remote_src: true
-    mode: 0755
+    mode: 0600