feat: make kubernetes owner parametrized (#8952)

* feat: make kubernetes owner parametrized

* docs: update hardening guide with configuration for CIS 1.1.19

* fix: set etcd data directory permissions to be compliant to CIS 1.1.12
This commit is contained in:
Alessio Greggi
2022-06-17 10:34:32 +02:00
committed by GitHub
parent 890fad389d
commit 97b4d79ed5
17 changed files with 40 additions and 14 deletions

View File

@@ -16,3 +16,10 @@
import_role:
name: etcdctl
when: etcd_deployment_type == "kubeadm"
- name: Set ownership for etcd data directory
file:
path: "{{ etcd_data_dir }}"
owner: "{{ etcd_owner }}"
group: "{{ etcd_owner }}"
mode: 0700