Skip to content

K
k3s
Commit af3dff7c authored by Filipe Brandenburger's avatar Filipe Brandenburger
Browse files
Options

Fix umask to actually intended behavior.

Fixes #52999.
parent a5c3c8d1
Hide whitespace changes
Inline Side-by-side
Showing with 2 additions and 2 deletions
cluster/gce/gci/configure.sh
View file @ af3dff7c
...@@ -54,7 +54,7 @@ EOF ...@@ -54,7 +54,7 @@ EOF
function download-kube-env { function download-kube-env {
# Fetch kube-env from GCE metadata server. # Fetch kube-env from GCE metadata server.
(umask 700; (umask 077;
local -r tmp_kube_env="/tmp/kube-env.yaml" local -r tmp_kube_env="/tmp/kube-env.yaml"
curl --fail --retry 5 --retry-delay 3 ${CURL_RETRY_CONNREFUSED} --silent --show-error \ curl --fail --retry 5 --retry-delay 3 ${CURL_RETRY_CONNREFUSED} --silent --show-error \
-H "X-Google-Metadata-Request: True" \ -H "X-Google-Metadata-Request: True" \
...@@ -72,7 +72,7 @@ for k,v in yaml.load(sys.stdin).iteritems(): ...@@ -72,7 +72,7 @@ for k,v in yaml.load(sys.stdin).iteritems():
function download-kube-master-certs { function download-kube-master-certs {
# Fetch kube-env from GCE metadata server. # Fetch kube-env from GCE metadata server.
(umask 700; (umask 077;
local -r tmp_kube_master_certs="/tmp/kube-master-certs.yaml" local -r tmp_kube_master_certs="/tmp/kube-master-certs.yaml"
curl --fail --retry 5 --retry-delay 3 ${CURL_RETRY_CONNREFUSED} --silent --show-error \ curl --fail --retry 5 --retry-delay 3 ${CURL_RETRY_CONNREFUSED} --silent --show-error \
-H "X-Google-Metadata-Request: True" \ -H "X-Google-Metadata-Request: True" \
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment