diff options
| author | Brenton Leanhardt <bleanhar@redhat.com> | 2016-02-18 14:29:09 -0500 |
|---|---|---|
| committer | Brenton Leanhardt <bleanhar@redhat.com> | 2016-02-18 14:29:09 -0500 |
| commit | 23902c7271dd39dc9d374f1c503e4eef621d3b2c (patch) | |
| tree | a4db92d9c02a82070db08dbf0934451e1522c4b9 /roles/openshift_master/tasks | |
| parent | 630bfbd5a1b7d8045fdaf1082d82eaa5b95bd316 (diff) | |
| parent | c9a2b9bf93d89916950938643bedbce841668cc2 (diff) | |
| download | openshift-23902c7271dd39dc9d374f1c503e4eef621d3b2c.tar.gz openshift-23902c7271dd39dc9d374f1c503e4eef621d3b2c.tar.bz2 openshift-23902c7271dd39dc9d374f1c503e4eef621d3b2c.tar.xz openshift-23902c7271dd39dc9d374f1c503e4eef621d3b2c.zip | |
Merge pull request #1432 from sdodson/bz1302513
Don't make config files world readable
Diffstat (limited to 'roles/openshift_master/tasks')
| -rw-r--r-- | roles/openshift_master/tasks/main.yml | 6 |
1 files changed, 6 insertions, 0 deletions
diff --git a/roles/openshift_master/tasks/main.yml b/roles/openshift_master/tasks/main.yml index 23dfacf79..dd66eeebb 100644 --- a/roles/openshift_master/tasks/main.yml +++ b/roles/openshift_master/tasks/main.yml @@ -221,6 +221,9 @@ template: dest: "{{ openshift.master.session_secrets_file }}" src: sessionSecretsFile.yaml.v1.j2 + owner: root + group: root + mode: 0600 when: openshift.master.session_auth_secrets is defined and openshift.master.session_encryption_secrets is defined notify: - restart master @@ -235,6 +238,9 @@ dest: "{{ openshift_master_config_file }}" src: master.yaml.v1.j2 backup: true + owner: root + group: root + mode: 0600 notify: - restart master - restart master api |