Browse Source

Lock down generated certs dir

Scott Dodson 9 years ago
parent
commit
f59c8931c3
1 changed files with 1 additions and 0 deletions
  1. 1 0
      roles/openshift_node_certificates/tasks/main.yml

+ 1 - 0
roles/openshift_node_certificates/tasks/main.yml

@@ -3,6 +3,7 @@
   file:
     path: "{{ openshift_generated_configs_dir }}"
     state: directory
+    mode: 0700
   when: nodes_needing_certs | length > 0
 
 - name: Generate the node client config