epostnikof/kubespray
1
0
Fork 0
mirror of https://github.com/kubernetes-sigs/kubespray.git synced 2026-03-04 09:58:20 +03:00
Code Issues Packages Projects Releases Wiki Activity

Fix kubernetes cert permission sync

Browse Source 
Add `state: directory` to `file` task so that `recurse: yes` will actually take effect and ensure
certs/keys have the right file mode and owner
This commit is contained in:
chadswen
2018-03-09 00:11:10 -06:00
parent f4476f25bd
commit cd153a1fb3
1 changed files with 1 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
roles/kubernetes/secrets/tasks/gen_certs_script.yml
View File

@@ -179,6 +179,7 @@
file: file:
path: "{{ kube_cert_dir }}" path: "{{ kube_cert_dir }}"
group: "{{ kube_cert_group }}" group: "{{ kube_cert_group }}"
state: directory
owner: kube owner: kube
mode: "u=rwX,g-rwx,o-rwx" mode: "u=rwX,g-rwx,o-rwx"
recurse: yes recurse: yes