Unverified Commit 76d14d16 authored by kirillrdy's avatar kirillrdy Committed by GitHub
Browse files

Merge pull request #287708 from JorisBolsens/patch-1 

 nixos/kubernetes: use correct -o option with bash install when copying certs in cfssl prestart script
parents 36631d81 1856e7e4

nixos/modules/services/cluster/kubernetes/pki.nix

+1 −1
Original line number Diff line number Diff line
@@ -174,7 +174,7 @@ in 
      '')

      (optionalString cfg.genCfsslAPIToken ''

        if [ ! -f "${cfsslAPITokenPath}" ]; then

          install -u cfssl -m 400 <(head -c ${toString (cfsslAPITokenLength / 2)} /dev/urandom | od -An -t x | tr -d ' ') "${cfsslAPITokenPath}"

          install -o cfssl -m 400 <(head -c ${toString (cfsslAPITokenLength / 2)} /dev/urandom | od -An -t x | tr -d ' ') "${cfsslAPITokenPath}"

        fi

      '')]);