Skip to content

aws eks update-kubeconfig writes an insecure file #5617

@Sarah-E-Greene

Description

@Sarah-E-Greene

Confirm by changing [ ] to [x] below to ensure that it's a bug:

Describe the bug
aws eks update-kubeconfig writes a world readable, group readable file, which the latest version of helm warns over:

WARNING: Kubernetes configuration file is group-readable. This is insecure. Location: config/kube/main-cluster
WARNING: Kubernetes configuration file is world-readable. This is insecure. Location: config/kube/main-cluster

-rw-r--r-- 1 sarah staff 2.1K 10 Aug 15:05 config/kube/main-cluster

SDK version number
aws-cli/1.18.154 Python/3.5.3 Linux/4.19.76-linuxkit botocore/1.18.13

Platform/OS/Hardware/Device
Debian Linux (inside docker)

To Reproduce (observed behavior)

  1. Run aws eks update-kubeconfig
  2. Run a helm operation that uses the generated kubeconfig
  3. Observe warinng

Expected behavior
A file generated that doesn't create a warning in helm.

Metadata

Metadata

Assignees

No one assigned

    Labels

    customizationIssues related to CLI customizations (located in /awscli/customizations)eks-kubeconfigenhancementfeature-requestA feature should be added or improved.

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions