Expect directory permissions to be 0700 or less

ping035627 · ping035627 · commit e3dcd3c0a9e4 · 2019-04-18T17:31:31.000+08:00
Signed-off-by: PingWang &lt;wang.ping5@zte.com.cn&gt;

update the permissions to 0660

Signed-off-by: PingWang &lt;wang.ping5@zte.com.cn&gt;

revert to 0750

Signed-off-by: PingWang &lt;wang.ping5@zte.com.cn&gt;

update 0750 to 0700

Signed-off-by: PingWang &lt;wang.ping5@zte.com.cn&gt;
diff --git a/cmd/kubeadm/app/phases/upgrade/postupgrade.go b/cmd/kubeadm/app/phases/upgrade/postupgrade.go
@@ -231,7 +231,7 @@ func GetKubeletDir(dryRun bool) (string, error) {
 // backupAPIServerCertAndKey backups the old cert and key of kube-apiserver to a specified directory.
 func backupAPIServerCertAndKey(certAndKeyDir string) error {
 	subDir := filepath.Join(certAndKeyDir, "expired")
-	if err := os.Mkdir(subDir, 0766); err != nil {
+	if err := os.Mkdir(subDir, 0700); err != nil {
 		return errors.Wrapf(err, "failed to created backup directory %s", subDir)
 	}
 

Original file line number	Diff line number	Diff line change
`@@ -231,7 +231,7 @@ func GetKubeletDir(dryRun bool) (string, error) {`
`231`	`231`	`// backupAPIServerCertAndKey backups the old cert and key of kube-apiserver to a specified directory.`
`232`	`232`	`func backupAPIServerCertAndKey(certAndKeyDir string) error {`
`233`	`233`	`subDir := filepath.Join(certAndKeyDir, "expired")`
`234`		`- if err := os.Mkdir(subDir, 0766); err != nil {`
	`234`	`+ if err := os.Mkdir(subDir, 0700); err != nil {`
`235`	`235`	`return errors.Wrapf(err, "failed to created backup directory %s", subDir)`
`236`	`236`	`}`
`237`	`237`