Kubeconfig generated with wrong permissions

[aimbot31]

Community Note

• Please vote on this issue by adding a 👍 reaction to the original issue to help the community and maintainers prioritize this request
• Please do not leave "+1" or other comments that do not add relevant new information or questions, they generate extra noise for issue followers and do not help prioritize the request
• If you are interested in working on this issue or have submitted a pull request, please leave a comment

Command attempted

scw k8s kubeconfig install <cluster-id>

Expected Behavior

The command should creates a new kubeconfig file if none exist.
The generated kubeconfig should be only writable and readable by the owner (600 rw--) in order to avoid security issues.

Actual Behavior

The command creates a new kubeconfig file if none exists with these permissions 644 (rw-r-r).

More info

N/A

[remyleone]

It is strange because in the code it is the right permission that seems to appear:

scaleway-cli/internal/namespaces/k8s/v1/custom_kubeconfig_helpers.go

Line 62 in c7a3d57

return ioutil.WriteFile(kubeconfigPath, newKubeconfig, 0600)

But it seems that this place creates it with the wrong permissions:

scaleway-cli/internal/namespaces/k8s/v1/custom_kubeconfig_install.go

Line 104 in c7a3d57

f, err := os.OpenFile(kubeconfigPath, os.O_CREATE, 0644)

[remyleone]

Thanks a lot for the feedback :) It is now fixed.