starlingx/stx-puppet
Code Issues Proposed changes

Merge "Set permissions to 600 for certificates"

Browse Source
This commit is contained in:
Zuul 2025-03-04 15:43:11 +00:00 committed by Gerrit Code Review
commit 889ec6a5cb
1 changed files with 10 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
puppet-manifests/src/modules/platform/manifests/kubernetes.pp
View File

@ -413,6 +413,14 @@ class platform::kubernetes::kubeadm {
}
}
class platform::kubernetes::set_crt_permissions {
exec { 'set_permissions_on_crt_files':
command => 'find /etc/kubernetes/pki -type f -name "*.crt" -exec chmod 600 {} +',
onlyif => 'find /etc/kubernetes/pki -type f -name "*.crt" ! -perm 600 | grep .',
path => ['/bin', '/usr/bin'],
}
}
class platform::kubernetes::master::init
inherits ::platform::kubernetes::params {
@ -605,6 +613,8 @@ class platform::kubernetes::master::init
hour => '*/24',
user => 'root',
}
-> class { 'platform::kubernetes::set_crt_permissions': }
}
class platform::kubernetes::master