Merge pull request openstack-k8s-operators#712 from jpodivin/explicit…

…special Explicitly setting special permissions bits
vakwetu · Jul 29, 2024 · 685decf · 685decf
2 parents c6ad1d0 + bd40de4
commit 685decf
Show file tree

Hide file tree

Showing 4 changed files with 5 additions and 5 deletions.
diff --git a/roles/edpm_ceph_client_files/tasks/main.yml b/roles/edpm_ceph_client_files/tasks/main.yml
@@ -34,5 +34,5 @@
   ansible.builtin.copy:
     src: "{{ item }}"
     dest: "{{ edpm_ceph_client_files_config_home }}/{{ item | basename }}"
-    mode: "{{ '600' if item | regex_search('.*.keyring$') else '644' }}"
+    mode: "{{ '0600' if item | regex_search('.*.keyring$') else '0644' }}"
   loop: "{{ edpm_ceph_client_dist }}"
diff --git a/roles/edpm_frr/tasks/configure.yml b/roles/edpm_frr/tasks/configure.yml
@@ -42,7 +42,7 @@
   ansible.builtin.template:
     src: frr.conf.j2
     dest: "{{ edpm_frr_config_basedir }}/etc/frr/frr.conf"
-    mode: '644'
+    mode: '0644'
     selevel: s0
     setype: container_file_t
   register: _frr_config_result
@@ -51,7 +51,7 @@
   ansible.builtin.template:
     src: daemons.j2
     dest: "{{ edpm_frr_config_basedir }}/etc/frr/daemons"
-    mode: '644'
+    mode: '0644'
     selevel: s0
     setype: container_file_t
   register: _frr_daemons_result
diff --git a/roles/edpm_ovn_bgp_agent/tasks/configure.yml b/roles/edpm_ovn_bgp_agent/tasks/configure.yml
@@ -25,7 +25,7 @@
       ansible.builtin.template:
         src: ovn-bgp-agent.conf.j2
         dest: "{{ edpm_ovn_bgp_agent_config_basedir }}/etc/ovn-bgp-agent/bgp-agent.conf"
-        mode: "644"
+        mode: "0644"
         selevel: s0
         setype: container_file_t
       register: _ovn_bgp_agent_config_result

diff --git a/roles/edpm_telemetry/tasks/configure.yml b/roles/edpm_telemetry/tasks/configure.yml
@@ -70,7 +70,7 @@
   ansible.builtin.copy:
     src: "{{ item.src }}"
     dest: "{{ item.dest }}"
-    mode: "{{ item.mode | default('640') }}"
+    mode: "{{ item.mode | default('0640') }}"
     remote_src: "{{ telemetry_test | default('false') }}"
   loop: "{{ configs }}"