Skip to content

Certificates: loosen permissions to 0440 on volumes

Jason Plum requested to merge 2333-loosen-ca-certs-projected-mode into master

What does this MR do?

Loosen the custom CA's projected volume mount defaultMode permissions setting to 0440 from 0400, allowing the unset of fsGroup.

See #2333 (comment 433033004)

Relates to #2333 (closed)

Related issues

Checklist

See Definition of done.

For anything in this list which will not be completed, please provide a reason in the MR discussion.

Required

  • Merge Request Title and Description are up to date, accurate, and descriptive
  • MR targeting the appropriate branch
  • MR has a green pipeline on GitLab.com

Expected (please provide an explanation if not completing)

  • Test plan indicating conditions for success has been posted and passes
  • Documentation created/updated
  • Tests added
  • N/A [ ] Integration tests added to GitLab QA
  • N/A [ ] Equivalent MR/issue for omnibus-gitlab opened

Does not close #2333 (closed)

Edited by Jason Plum

Merge request reports