Repository navigation
Is it possible to update file permissions in /var/lib/kubelet/pods? #10731
Replies: 1 comment
|
This is a Kubernetes question, not RKE2. Our Kubelet is the vanilla Kubernetes kubelet. |
0 replies
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Uh oh!
There was an error while loading. Please reload this page.
The files are created with 666+ permissions
eg
-rw-rw-rw- root root /var/lib/kubelet/pods/19530219-2c1b-4a87-8355-92c66c75fd49/containers/prometheus-server-configmap-reload/39cb132e
or
drwxrwsrwx root abc /var/lib/kubelet/pods/e85daa92-92bd-4f01-8f8b-be812d628774/volumes/kubernetes.io~empty-dir/tmp
Is there a way to restrict file permission to avoid world read/write? Looked at k8s upstream an kubelet config options but did not find anything so far. Similar to kubernetes/kubernetes#80872
All reactions