Skip to content

Commit

Permalink
enchance security with CIS Kubernetes V1.23 (#10304)
Browse files Browse the repository at this point in the history
Benchmark item number 4.1.9
  • Loading branch information
satandyh authored Jul 24, 2023
1 parent fe32de9 commit 050bd05
Showing 1 changed file with 2 additions and 2 deletions.
4 changes: 2 additions & 2 deletions roles/kubernetes/node/tasks/kubelet.yml
Original file line number Diff line number Diff line change
Expand Up @@ -12,7 +12,7 @@
dest: "{{ kube_config_dir }}/kubelet.env"
setype: "{{ (preinstall_selinux_state != 'disabled') | ternary('etc_t', omit) }}"
backup: yes
mode: 0640
mode: 0600
notify: Node | restart kubelet
tags:
- kubelet
Expand All @@ -22,7 +22,7 @@
template:
src: "kubelet-config.{{ kubeletConfig_api_version }}.yaml.j2"
dest: "{{ kube_config_dir }}/kubelet-config.yaml"
mode: 0640
mode: 0600
notify: Kubelet | restart kubelet
tags:
- kubelet
Expand Down

0 comments on commit 050bd05

Please sign in to comment.