From 9a9b1ca19811b888f1e76ab516ce741ab054ea81 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?J=C3=A9r=C3=B4me=20Petazzoni?= <jerome.petazzoni@gmail.com>
Date: Wed, 19 Oct 2022 16:52:51 +0200
Subject: [PATCH] =?UTF-8?q?=F0=9F=94=92=EF=B8=8F=20Fix=20kubeconfig=20perm?=
 =?UTF-8?q?issions?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 bash_profile | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/bash_profile b/bash_profile
index 68c95e6..90af726 100644
--- a/bash_profile
+++ b/bash_profile
@@ -6,6 +6,9 @@ if ! [ -f ~/.kube/config ]; then
   # We need to access the Kubernetes API, so we'll do it
   # using the well-known endpoint.
   (
+    # Make sure that the file will have locked-down permissions.
+    # (Some tools like Helm will complain about it otherwise.)
+    umask 077
     export KUBERNETES_SERVICE_HOST=kubernetes.default.svc
     export KUBERNETES_SERVICE_PORT=443
     if kubectl get configmap kubeconfig >&/dev/null; then