Adjust default kubeconfig file permissions (#7978)

* Adjust default kubeconfig permissions

Signed-off-by: Derek Nola <derek.nola@suse.com>
This commit is contained in:
Derek Nola
2023-07-14 15:00:27 -07:00
committed by GitHub
parent 0b18a65d4f
commit be44243353

View File

@@ -88,7 +88,8 @@ func KubeConfig(dest, url, caCert, clientCert, clientKey string) error {
ClientKey: clientKey,
}
output, err := os.Create(dest)
// cis-1.24 and newer require kubeconfigs to be 0600
output, err := os.OpenFile(dest, os.O_RDWR|os.O_CREATE|os.O_TRUNC, 0600)
if err != nil {
return err
}