Is it possible to update file permissions in /var/lib/kubelet/pods? #10731
Replies: 1 comment
-
This is a Kubernetes question, not RKE2. Our Kubelet is the vanilla Kubernetes kubelet. |
Beta Was this translation helpful? Give feedback.
0 replies
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
-
The files are created with 666+ permissions
eg
-rw-rw-rw- root root /var/lib/kubelet/pods/19530219-2c1b-4a87-8355-92c66c75fd49/containers/prometheus-server-configmap-reload/39cb132e
or
drwxrwsrwx root abc /var/lib/kubelet/pods/e85daa92-92bd-4f01-8f8b-be812d628774/volumes/kubernetes.io~empty-dir/tmp
Is there a way to restrict file permission to avoid world read/write? Looked at k8s upstream an kubelet config options but did not find anything so far. Similar to kubernetes/kubernetes#80872
Beta Was this translation helpful? Give feedback.
All reactions