Ensure existing CNI config file has correct permissions

Signed-off-by: Kashif Khan <[email protected]>
projectcalico · Dec 31, 2024 · 3bebbba · 3bebbba
1 parent 39b473a
commit 3bebbba
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/cni-plugin/pkg/install/install.go b/cni-plugin/pkg/install/install.go
@@ -401,6 +401,12 @@ func writeCNIConfig(c config) {
 		logrus.Fatal(err)
 	}
 
+	// Safeguarding since WriteFile does not change existing file's permissions.
+	err = os.Chmod(path, perm)
+	if err != nil {
+		logrus.Fatal(err)
+	}
+
 	content, err := os.ReadFile(path)
 	if err != nil {
 		logrus.Fatal(err)