summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorScott Dodson <sdodson@redhat.com>2016-03-04 11:46:19 -0500
committerScott Dodson <sdodson@redhat.com>2016-03-04 11:46:19 -0500
commitf59c8931c3dd13f143570dee54bca6b5d63023fd (patch)
tree424bb3fddf23f72607cdac7ab55b81d493afb792
parentb3c4104205b34ed2e182c34b6611cad0f14c3b59 (diff)
downloadopenshift-f59c8931c3dd13f143570dee54bca6b5d63023fd.tar.gz
openshift-f59c8931c3dd13f143570dee54bca6b5d63023fd.tar.bz2
openshift-f59c8931c3dd13f143570dee54bca6b5d63023fd.tar.xz
openshift-f59c8931c3dd13f143570dee54bca6b5d63023fd.zip
Lock down generated certs dir
-rw-r--r--roles/openshift_node_certificates/tasks/main.yml1
1 files changed, 1 insertions, 0 deletions
diff --git a/roles/openshift_node_certificates/tasks/main.yml b/roles/openshift_node_certificates/tasks/main.yml
index b54811414..c9a7a40c8 100644
--- a/roles/openshift_node_certificates/tasks/main.yml
+++ b/roles/openshift_node_certificates/tasks/main.yml
@@ -3,6 +3,7 @@
file:
path: "{{ openshift_generated_configs_dir }}"
state: directory
+ mode: 0700
when: nodes_needing_certs | length > 0
- name: Generate the node client config