amimof / amimof/kubernetes-the-right-way
Permissions on config directories
- 主要言語
- Jinja
- スター
- 28
- フォーク
- 7
- PR マージ指標
- 30日以内にマージされた PR はありません
説明
The playbook sets a bunch of permissions to 755, see [here](https://github.com/amimof/kubernetes-the-right-way/blob/cd642161e57eea7c697612dbfca145ed4c742718/roles/certificates/tasks/main.yml#L27).
We had an idea of using a controller host (a very simple VM), where we execute the playbook for different clusters. This way, we make sure we always have the correct `~/.ktrw` directory, we can easily back it up and we avoid risks of re-creating certificates, etc. It also seems a bit quicker to run it like that compared to over from localhost over VPN (which we do a lot these days).
The fact that KTRW wants 755 makes it a bit difficult to work with these with different users. It would be nice if they could be 775 instead, so we could have group permissions. But maybe that's not optimal for when they actually reach the destination servers... There, we'd want 755 I guess?
Do you have any ideas or suggestions, @amimof?
コントリビューションガイド
このリポジトリのコントリビューションガイドは索引されていません
評価
この issue はまだ評価されていません。