Fix permissions in generate_terraform_self

ComputeCanada · Dec 20, 2023 · cd20232 · cd20232
1 parent 178bbd4
commit cd20232
Showing 1 changed file with 6 additions and 1 deletion.
diff --git a/generate_terraform_self.rb b/generate_terraform_self.rb
@@ -9,7 +9,12 @@
     FileUtils.mkdir '/etc/puppetlabs/data/nodes'
 rescue Errno::EEXIST
 end
+FileUtils.chown 'root', 'puppet', '/etc/puppetlabs/data/nodes'
+FileUtils.chmod 0644, '/etc/puppetlabs/data/nodes'
 instances.each do | name, values |
+    filename = '/etc/puppetlabs/data/nodes/%s.yaml' % name
     self_hash = { 'terraform' => { 'instances' => { 'self' => values } } }
-    File.write('/etc/puppetlabs/data/nodes/%s.yaml' % name, self_hash.to_yaml)
+    File.write(filename, self_hash.to_yaml)
+    FileUtils.chown 'root', 'puppet', filename
+    FileUtils.chmod 0640, filename
 end