From: Kienan Stewart <kstewart@efficios.com>
Date: Fri, 9 Aug 2024 14:08:39 +0000 (-0400)
Subject: ansible: Remove group read access to netplan configuration files
X-Git-Url: http://git.lttng.org./?a=commitdiff_plain;h=0d8f931b9641ceb28d1965c987d71a949294b491;p=lttng-ci.git

ansible: Remove group read access to netplan configuration files

Netplan warns that the configuration files shouldn't be group readable
when running `netplan apply`. This change will silence that warning.

Change-Id: I3d390f5626f92760e2a4ab7690f9c63b64ef639b
Signed-off-by: Kienan Stewart <kstewart@efficios.com>
---

diff --git a/automation/ansible/roles/netplan/tasks/main.yml b/automation/ansible/roles/netplan/tasks/main.yml
index 2bef5d8..902a1e1 100644
--- a/automation/ansible/roles/netplan/tasks/main.yml
+++ b/automation/ansible/roles/netplan/tasks/main.yml
@@ -10,7 +10,7 @@
         dest: /etc/netplan/default.yaml
         owner: root
         group: root
-        mode: '0640'
+        mode: '0600'
       register: netplan_default_yaml
     - name: Disable ifupdown on Debian
       when: ansible_distribution == "Debian"