Change in permissions enforcement about warpgate HOT 2 CLOSED

There's no good reason for group readability in this context - but you can just set defaultMode: 0600 on your configmap volume mount, e.g.: https://stackoverflow.com/questions/73365727/mounting-a-configmap-as-a-volume-in-kubernetes-how-do-i-calculate-the-value-of

from warpgate.

Thank's for your fast reply @Eugeny.

Yes, i can set defaultMode to 0600 but Warpgate will no longer be able to read the config file because ConfigMap are always mounted as root and there is no good reason to run warpgate as root.

0640 mode is generaly used exactly to do that, config files editable only by root and only readeable by the application/daemon group.

I fully understand you don't want to change the default mode of 0600 but making this configurable or deactivable could be acceptable to you ?

from warpgate.