Adjust default kubeconfig file permissions (k3s-io#7978)

* Adjust default kubeconfig permissions Signed-off-by: Derek Nola <derek.nola@suse.com>
dereknola · Jul 14, 2023 · be44243 · be44243
1 parent 0b18a65
commit be44243
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/pkg/daemons/control/deps/deps.go b/pkg/daemons/control/deps/deps.go
@@ -88,7 +88,8 @@ func KubeConfig(dest, url, caCert, clientCert, clientKey string) error {
 		ClientKey:  clientKey,
 	}
 
-	output, err := os.Create(dest)
+	// cis-1.24 and newer require kubeconfigs to be 0600
+	output, err := os.OpenFile(dest, os.O_RDWR|os.O_CREATE|os.O_TRUNC, 0600)
 	if err != nil {
 		return err
 	}