Merge pull request kubernetes#129214 from tallclair/kubelet-state-perms

Change default filestore permissions to 0700

Author: k8s-ci-robot

pkg/kubelet/util/store/filestore.go

@@ -28,6 +28,9 @@ import (
 const (
 	// Name prefix for the temporary files.
 	tmpPrefix = "."
+
+	// The default permission bits to set on the filestore directory.
+	directoryPerm = 0700
 )
 
 // FileStore is an implementation of the Store interface which stores data in files.
@@ -41,7 +44,7 @@ type FileStore struct {
 
 // NewFileStore returns an instance of FileStore.
 func NewFileStore(path string, fs utilfs.Filesystem) (Store, error) {
-	if err := fs.MkdirAll(path, 0755); err != nil {
+	if err := fs.MkdirAll(path, directoryPerm); err != nil {
 		return nil, err
 	}
 	return &FileStore{directoryPath: path, filesystem: fs}, nil
@@ -52,7 +55,7 @@ func (f *FileStore) Write(key string, data []byte) error {
 	if err := ValidateKey(key); err != nil {
 		return err
 	}
-	if err := f.filesystem.MkdirAll(f.directoryPath, 0755); err != nil {
+	if err := f.filesystem.MkdirAll(f.directoryPath, directoryPerm); err != nil {
 		return err
 	}