From be442433538a39c0a568516fd39a06e364d5d075 Mon Sep 17 00:00:00 2001 From: Derek Nola Date: Fri, 14 Jul 2023 15:00:27 -0700 Subject: [PATCH] Adjust default kubeconfig file permissions (#7978) * Adjust default kubeconfig permissions Signed-off-by: Derek Nola --- pkg/daemons/control/deps/deps.go | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/pkg/daemons/control/deps/deps.go b/pkg/daemons/control/deps/deps.go index 385812a24c..60ed40241d 100644 --- a/pkg/daemons/control/deps/deps.go +++ b/pkg/daemons/control/deps/deps.go @@ -88,7 +88,8 @@ func KubeConfig(dest, url, caCert, clientCert, clientKey string) error { ClientKey: clientKey, } - output, err := os.Create(dest) + // cis-1.24 and newer require kubeconfigs to be 0600 + output, err := os.OpenFile(dest, os.O_RDWR|os.O_CREATE|os.O_TRUNC, 0600) if err != nil { return err }