fix(kubeconfig): Set sensible file and directory permissions on kubec…

…onfig file
devopsmakers · Mar 9, 2020 · 2838035 · 2838035
1 parent 72ef65a
commit 2838035
Showing 1 changed file with 5 additions and 3 deletions.
diff --git a/modules/control_plane/kubectl.tf b/modules/control_plane/kubectl.tf
@@ -1,6 +1,8 @@
 
 resource "local_file" "kubeconfig" {
-  count    = var.write_kubeconfig && var.create_eks ? 1 : 0
-  content  = data.template_file.kubeconfig[0].rendered
-  filename = substr(var.config_output_path, -1, 1) == "/" ? "${var.config_output_path}kubeconfig_${var.cluster_name}" : var.config_output_path
+  count                = var.write_kubeconfig && var.create_eks ? 1 : 0
+  content              = data.template_file.kubeconfig[0].rendered
+  filename             = substr(var.config_output_path, -1, 1) == "/" ? "${var.config_output_path}kubeconfig_${var.cluster_name}" : var.config_output_path
+  directory_permission = "0750"
+  file_permission      = "0600"
 }