aws: restrict kubeconfig permissions
@@ -59,7 +59,7 @@ resource "null_resource" "copy-controller-secrets" {
inline = [
"sudo mv $HOME/kubeconfig /etc/kubernetes/kubeconfig",
"sudo chown root:root /etc/kubernetes/kubeconfig",
- "sudo chmod 644 /etc/kubernetes/kubeconfig",
+ "sudo chmod 600 /etc/kubernetes/kubeconfig",
"sudo mkdir -p /etc/ssl/etcd/etcd",
"sudo mv etcd-client* /etc/ssl/etcd/",
"sudo cp /etc/ssl/etcd/etcd-client-ca.crt /etc/ssl/etcd/etcd/server-ca.crt",
