summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorJoris Bolsens <joris@jojolabs.com>2024-02-14 14:42:02 -0800
committergithub-actions[bot] <github-actions[bot]@users.noreply.github.com>2024-02-16 18:34:42 +0000
commit3d0534d4df98db92ab5bc171dee3545fff0a4495 (patch)
tree808240f0515732c43cde8e87edeceff5434deaac
parentMerge pull request #289301 from NixOS/backport-289137-to-release-23.11 (diff)
downloadnixpkgs-origin/backport-289227-to-release-23.11.tar.gz
nixos/kubernetes: set k8 home permissions correctlyorigin/backport-289227-to-release-23.11
(cherry picked from commit 81391bd22fe9c33c556563bab062da95ecdc15c0)
-rw-r--r--nixos/modules/services/cluster/kubernetes/default.nix3
1 files changed, 2 insertions, 1 deletions
diff --git a/nixos/modules/services/cluster/kubernetes/default.nix b/nixos/modules/services/cluster/kubernetes/default.nix
index f5374fc71942..432a2aed77f1 100644
--- a/nixos/modules/services/cluster/kubernetes/default.nix
+++ b/nixos/modules/services/cluster/kubernetes/default.nix
@@ -290,7 +290,7 @@ in {
systemd.tmpfiles.rules = [
"d /opt/cni/bin 0755 root root -"
"d /run/kubernetes 0755 kubernetes kubernetes -"
- "d /var/lib/kubernetes 0755 kubernetes kubernetes -"
+ "d ${cfg.dataDir} 0755 kubernetes kubernetes -"
];
users.users.kubernetes = {
@@ -299,6 +299,7 @@ in {
group = "kubernetes";
home = cfg.dataDir;
createHome = true;
+ homeMode = "755";
};
users.groups.kubernetes.gid = config.ids.gids.kubernetes;