Merge pull request kubernetes#76534 from ping035627/k8s-190413

k8s-ci-robot · web-flow · commit cee320a809e1 · 2019-04-18T06:22:09.000-07:00
Expect directory permissions to be 0700
diff --git a/cmd/kubeadm/app/phases/upgrade/postupgrade.go b/cmd/kubeadm/app/phases/upgrade/postupgrade.go
@@ -231,7 +231,7 @@ func GetKubeletDir(dryRun bool) (string, error) {
 // backupAPIServerCertAndKey backups the old cert and key of kube-apiserver to a specified directory.
 func backupAPIServerCertAndKey(certAndKeyDir string) error {
 	subDir := filepath.Join(certAndKeyDir, "expired")
-	if err := os.Mkdir(subDir, 0766); err != nil {
+	if err := os.Mkdir(subDir, 0700); err != nil {
 		return errors.Wrapf(err, "failed to created backup directory %s", subDir)
 	}
 

Original file line number	Diff line number	Diff line change
`@@ -231,7 +231,7 @@ func GetKubeletDir(dryRun bool) (string, error) {`
`231`	`231`	`// backupAPIServerCertAndKey backups the old cert and key of kube-apiserver to a specified directory.`
`232`	`232`	`func backupAPIServerCertAndKey(certAndKeyDir string) error {`
`233`	`233`	`subDir := filepath.Join(certAndKeyDir, "expired")`
`234`		`- if err := os.Mkdir(subDir, 0766); err != nil {`
	`234`	`+ if err := os.Mkdir(subDir, 0700); err != nil {`
`235`	`235`	`return errors.Wrapf(err, "failed to created backup directory %s", subDir)`
`236`	`236`	`}`
`237`	`237`