amimof / amimof/kubernetes-the-right-way

Permissions on config directories

オープン
#70 コメント 1 件 リアクション 0 件 担当者 0 名 GitHub で見る
主要言語
Jinja
スター
28
フォーク
7
PR マージ指標
30日以内にマージされた PR はありません

説明

The playbook sets a bunch of permissions to 755, see [here](https://github.com/amimof/kubernetes-the-right-way/blob/cd642161e57eea7c697612dbfca145ed4c742718/roles/certificates/tasks/main.yml#L27).

We had an idea of using a controller host (a very simple VM), where we execute the playbook for different clusters. This way, we make sure we always have the correct `~/.ktrw` directory, we can easily back it up and we avoid risks of re-creating certificates, etc. It also seems a bit quicker to run it like that compared to over from localhost over VPN (which we do a lot these days).

The fact that KTRW wants 755 makes it a bit difficult to work with these with different users. It would be nice if they could be 775 instead, so we could have group permissions. But maybe that's not optimal for when they actually reach the destination servers... There, we'd want 755 I guess?

Do you have any ideas or suggestions, @amimof?

コントリビューションガイド

このリポジトリのコントリビューションガイドは索引されていません

評価

この issue はまだ評価されていません。

新しい issue をメールで受け取る

初心者向けの GitHub issue を短くまとめたダイジェスト。