epostnikof/kubespray
1
0
Fork 0
mirror of https://github.com/kubernetes-sigs/kubespray.git synced 2026-03-08 11:07:43 +03:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #911 from bogdando/DROP_CAPS

Browse Source 
Drop linux capabilities and rework users/groups
This commit is contained in:
Bogdan Dobrelya
2017-02-06 12:05:51 +01:00
committed by GitHub
parent 9bc51bd0e2 cb2e5ac776
commit cae2982d81
48 changed files with 413 additions and 81 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
roles/kubernetes/secrets/tasks/gen_certs.yml
View File

@@ -140,11 +140,11 @@
file:
path={{ kube_cert_dir }}
group={{ kube_cert_group }}
owner=kube
owner={{ kubelet_user }}
recurse=yes
- name: Gen_certs | set permissions on keys
shell: chmod 0600 {{ kube_cert_dir}}/*key.pem
- name: Gen_certs | set shared group permissions on keys
shell: chmod 0640 {{ kube_cert_dir}}/*.pem
when: inventory_hostname in groups['kube-master']
changed_when: false