Truncate the credential file to avoid the change of secret content me…

…ssing it up Truncate the credential file to avoid the change of secret content messing it up Signed-off-by: Wenkai Yin(尹文开) <yinw@vmware.com>
vmware-tanzu · Nov 6, 2023 · f410af2 · f410af2
1 parent 1264c43
commit f410af2
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 1 deletion.
diff --git a/changelogs/unreleased/7058-ywk253100 b/changelogs/unreleased/7058-ywk253100
@@ -0,0 +1 @@
+Truncate the credential file to avoid the change of secret content messing it up
diff --git a/internal/credentials/file_store.go b/internal/credentials/file_store.go
@@ -71,7 +71,7 @@ func (n *namespacedFileStore) Path(selector *corev1api.SecretKeySelector) (strin
 
 	keyFilePath := filepath.Join(n.fsRoot, fmt.Sprintf("%s-%s", selector.Name, selector.Key))
 
-	file, err := n.fs.OpenFile(keyFilePath, os.O_RDWR|os.O_CREATE, 0644)
+	file, err := n.fs.OpenFile(keyFilePath, os.O_RDWR|os.O_CREATE|os.O_TRUNC, 0644)
 	if err != nil {
 		return "", errors.Wrap(err, "unable to open credentials file for writing")
 	}