Kubeconfig file should not be world or group readable

terraform-aws-modules · Nov 21, 2020 · 8d6143b · 8d6143b
1 parent e4520d2
commit 8d6143b
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/kubectl.tf b/kubectl.tf
@@ -2,6 +2,6 @@ resource "local_file" "kubeconfig" {
   count                = var.write_kubeconfig && var.create_eks ? 1 : 0
   content              = local.kubeconfig
   filename             = substr(var.config_output_path, -1, 1) == "/" ? "${var.config_output_path}kubeconfig_${var.cluster_name}" : var.config_output_path
-  file_permission      = "0644"
+  file_permission      = "0600"
   directory_permission = "0755"
 }