Fix missing file mode (risky-file-permissions) (kubernetes-sigs#7959)

* Fix missing file mode (risky-file-permissions) Found this using ansible-lint. Signed-off-by: Bryan Hundven <[email protected]> * Fix another missing file mode (risky-file-permissions) This one fixes `/etc/crio/config.json` Signed-off-by: Bryan Hundven <[email protected]>
southbridgeio · Oct 23, 2021 · 8687c14 · 8687c14
1 parent b6e10e4
commit 8687c14
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 0 deletions.
diff --git a/roles/bootstrap-os/tasks/bootstrap-centos.yml b/roles/bootstrap-os/tasks/bootstrap-centos.yml
@@ -74,6 +74,7 @@
     section: "extras"
     option: "{{ item.option }}"
     value: "{{ item.value }}"
+    mode: 0644
   with_items:
     - { option: "name", value: "CentOS-{{ ansible_distribution_major_version }} - Extras" }
     - { option: "enabled", value: "1" }

diff --git a/roles/container-engine/cri-o/tasks/main.yaml b/roles/container-engine/cri-o/tasks/main.yaml
@@ -84,6 +84,7 @@
   template:
     src: config.json.j2
     dest: /etc/crio/config.json
+    mode: 0644
   register: reg_auth_install
 
 - name: Add skopeo pkg to install