Update pki_helpers.go

[DeeptanshuDas]

revoke world-accessible permissions that are unnecessary

What type of PR is this?

/kind documentation

What this PR does / why we need it:

revoke world-accessible permissions that are unnecessary to make the file give the written permission to the owner of a file.

Which issue(s) this PR fixes:

Fixes #81116

[k8s-ci-robot]

Adding the "do-not-merge/release-note-label-needed" label because no release-note block was detected, please follow our release note process to remove it.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

[k8s-ci-robot]

Please note that we're already in Test Freeze for the release-1.29 branch. This means every merged PR will be automatically fast-forwarded via the periodic ci-fast-forward job to the release branch of the upcoming v1.29.0 release.

Fast forwards are scheduled to happen every 6 hours, whereas the most recent run was: Sat Nov 25 10:00:10 UTC 2023.

[k8s-ci-robot]

This issue is currently awaiting triage.

If a SIG or subproject determines this is a relevant issue, they will accept it by applying the triage/accepted label and provide further guidance.

The triage/accepted label can be added by org members by writing /triage accepted in a comment.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

[k8s-ci-robot]

Hi @DeeptanshuDas. Thanks for your PR.

I'm waiting for a kubernetes member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work. Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

[k8s-ci-robot]

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: DeeptanshuDas
Once this PR has been reviewed and has the lgtm label, please assign sataqiu for approval. For more information see the Kubernetes Code Review Process.

The full list of commands accepted by this bot can be found here.

Needs approval from an approver in each of these files:

• cmd/kubeadm/OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[neolit123]

revoke world-accessible permissions that are unnecessary to make the file give the written permission to the owner of a file.

the permission used to be 644, but now it's 600.
#81116

600 already means RW only for the owner, which in kubeadm's case is root.

[DeeptanshuDas]

it make less error than 600

[neolit123]

that's not how IWUSR works.

see this:

package main

import (
	"fmt"
	"os"
	"syscall"
)

func main() {
	fmt.Printf("%v\n", os.FileMode(0600))
	fmt.Printf("%v\n", os.FileMode(syscall.S_IWUSR)|os.FileMode(syscall.S_IRUSR))
	fmt.Printf("%v\n", os.FileMode(0600)|os.FileMode(syscall.S_IWUSR))
}

-rw-------
-rw-------
-rw-------

closing as 600 already fixed the problem.

/close

[k8s-ci-robot]

@neolit123: Closed this PR.

In response to this:

that's not how IWUSR wokrs.

see this:

package main

import (
  "fmt"
  "os"
  "syscall"
)

func main() {
  fmt.Printf("%v\n", os.FileMode(0600))
  fmt.Printf("%v\n", os.FileMode(syscall.S_IWUSR)|os.FileMode(syscall.S_IRUSR))
  fmt.Printf("%v\n", os.FileMode(0600)|os.FileMode(syscall.S_IWUSR))
}

-rw-------
-rw-------
-rw-------

closing as 600 already fixed the problem.

/close

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.