fix: set permissions on files to 0644

Signed-off-by: Devin Buhl <devin@buhl.casa>

bootstrap/tasks/addons/csi_driver_nfs.yaml

@@ -17,7 +17,7 @@
   ansible.builtin.template:
     src: "{{ item.src }}"
     dest: "{{ repository_path }}/kubernetes/apps/{{ addon_namespace }}/{{ addon_name }}/{{ item.path | replace('.j2', '') }}"
-    mode: "0755"
+    mode: "0644"
   with_community.general.filetree: ["../templates/addons/{{ addon_name }}/"]
 
 # https://github.com/ansible-collections/community.sops/issues/153
@@ -27,7 +27,7 @@
       ansible.builtin.copy:
         src: "{{ repository_path }}/.sops.yaml"
         dest: "{{ repository_path }}/.sops.yaml.orig"
-        mode: "0755"
+        mode: "0644"
     - name: Remove Sops configuration file
       ansible.builtin.file:
         path: "{{ repository_path }}/.sops.yaml"
@@ -39,14 +39,14 @@
         encrypted_regex: ^(data|stringData)$
         age: ["{{ bootstrap_age_public_key }}"]
         content_yaml: "{{ lookup('ansible.builtin.template', item.src) | from_yaml }}"
-        mode: "0755"
+        mode: "0644"
         force: true
       with_community.general.filetree: ["../templates/addons/{{ addon_name }}/"]
     - name: Restore Sops configuration file
       ansible.builtin.copy:
         src: "{{ repository_path }}/.sops.yaml.orig"
         dest: "{{ repository_path }}/.sops.yaml"
-        mode: "0755"
+        mode: "0644"
     - name: Remove backed up Sops configuration file
       ansible.builtin.file:
         path: "{{ repository_path }}/.sops.yaml.orig"
@@ -56,7 +56,7 @@
       ansible.builtin.copy:
         src: "{{ repository_path }}/.sops.yaml.orig"
         dest: "{{ repository_path }}/.sops.yaml"
-        mode: "0755"
+        mode: "0644"
     - name: Remove backed up Sops configuration file
       ansible.builtin.file:
         path: "{{ repository_path }}/.sops.yaml.orig"

bootstrap/tasks/addons/grafana.yaml

@@ -17,7 +17,7 @@
   ansible.builtin.template:
     src: "{{ item.src }}"
     dest: "{{ repository_path }}/kubernetes/apps/{{ addon_namespace }}/{{ addon_name }}/{{ item.path | replace('.j2', '') }}"
-    mode: "0755"
+    mode: "0644"
   with_community.general.filetree: ["../templates/addons/{{ addon_name }}/"]
 
 # https://github.com/ansible-collections/community.sops/issues/153
@@ -27,7 +27,7 @@
       ansible.builtin.copy:
         src: "{{ repository_path }}/.sops.yaml"
         dest: "{{ repository_path }}/.sops.yaml.orig"
-        mode: "0755"
+        mode: "0644"
     - name: Remove Sops configuration file
       ansible.builtin.file:
         path: "{{ repository_path }}/.sops.yaml"
@@ -39,14 +39,14 @@
         encrypted_regex: ^(data|stringData)$
         age: ["{{ bootstrap_age_public_key }}"]
         content_yaml: "{{ lookup('ansible.builtin.template', item.src) | from_yaml }}"
-        mode: "0755"
+        mode: "0644"
         force: true
       with_community.general.filetree: ["../templates/addons/{{ addon_name }}/"]
     - name: Restore Sops configuration file
       ansible.builtin.copy:
         src: "{{ repository_path }}/.sops.yaml.orig"
         dest: "{{ repository_path }}/.sops.yaml"
-        mode: "0755"
+        mode: "0644"
     - name: Remove backed up Sops configuration file
       ansible.builtin.file:
         path: "{{ repository_path }}/.sops.yaml.orig"
@@ -56,7 +56,7 @@
       ansible.builtin.copy:
         src: "{{ repository_path }}/.sops.yaml.orig"
         dest: "{{ repository_path }}/.sops.yaml"
-        mode: "0755"
+        mode: "0644"
     - name: Remove backed up Sops configuration file
       ansible.builtin.file:
         path: "{{ repository_path }}/.sops.yaml.orig"

bootstrap/tasks/addons/hajimari.yaml

@@ -17,7 +17,7 @@
   ansible.builtin.template:
     src: "{{ item.src }}"
     dest: "{{ repository_path }}/kubernetes/apps/{{ addon_namespace }}/{{ addon_name }}/{{ item.path | replace('.j2', '') }}"
-    mode: "0755"
+    mode: "0644"
   with_community.general.filetree: ["../templates/addons/{{ addon_name }}/"]
 
 # https://github.com/ansible-collections/community.sops/issues/153
@@ -27,7 +27,7 @@
       ansible.builtin.copy:
         src: "{{ repository_path }}/.sops.yaml"
         dest: "{{ repository_path }}/.sops.yaml.orig"
-        mode: "0755"
+        mode: "0644"
     - name: Remove Sops configuration file
       ansible.builtin.file:
         path: "{{ repository_path }}/.sops.yaml"
@@ -39,14 +39,14 @@
         encrypted_regex: ^(data|stringData)$
         age: ["{{ bootstrap_age_public_key }}"]
         content_yaml: "{{ lookup('ansible.builtin.template', item.src) | from_yaml }}"
-        mode: "0755"
+        mode: "0644"
         force: true
       with_community.general.filetree: ["../templates/addons/{{ addon_name }}/"]
     - name: Restore Sops configuration file
       ansible.builtin.copy:
         src: "{{ repository_path }}/.sops.yaml.orig"
         dest: "{{ repository_path }}/.sops.yaml"
-        mode: "0755"
+        mode: "0644"
     - name: Remove backed up Sops configuration file
       ansible.builtin.file:
         path: "{{ repository_path }}/.sops.yaml.orig"
@@ -56,7 +56,7 @@
       ansible.builtin.copy:
         src: "{{ repository_path }}/.sops.yaml.orig"
         dest: "{{ repository_path }}/.sops.yaml"
-        mode: "0755"
+        mode: "0644"
     - name: Remove backed up Sops configuration file
       ansible.builtin.file:
         path: "{{ repository_path }}/.sops.yaml.orig"

bootstrap/tasks/addons/kube_prometheus_stack.yaml

@@ -17,7 +17,7 @@
   ansible.builtin.template:
     src: "{{ item.src }}"
     dest: "{{ repository_path }}/kubernetes/apps/{{ addon_namespace }}/{{ addon_name }}/{{ item.path | replace('.j2', '') }}"
-    mode: "0755"
+    mode: "0644"
   with_community.general.filetree: ["../templates/addons/{{ addon_name }}/"]
 
 # https://github.com/ansible-collections/community.sops/issues/153
@@ -27,7 +27,7 @@
       ansible.builtin.copy:
         src: "{{ repository_path }}/.sops.yaml"
         dest: "{{ repository_path }}/.sops.yaml.orig"
-        mode: "0755"
+        mode: "0644"
     - name: Remove Sops configuration file
       ansible.builtin.file:
         path: "{{ repository_path }}/.sops.yaml"
@@ -39,14 +39,14 @@
         encrypted_regex: ^(data|stringData)$
         age: ["{{ bootstrap_age_public_key }}"]
         content_yaml: "{{ lookup('ansible.builtin.template', item.src) | from_yaml }}"
-        mode: "0755"
+        mode: "0644"
         force: true
       with_community.general.filetree: ["../templates/addons/{{ addon_name }}/"]
     - name: Restore Sops configuration file
       ansible.builtin.copy:
         src: "{{ repository_path }}/.sops.yaml.orig"
         dest: "{{ repository_path }}/.sops.yaml"
-        mode: "0755"
+        mode: "0644"
     - name: Remove backed up Sops configuration file
       ansible.builtin.file:
         path: "{{ repository_path }}/.sops.yaml.orig"
@@ -56,7 +56,7 @@
       ansible.builtin.copy:
         src: "{{ repository_path }}/.sops.yaml.orig"
         dest: "{{ repository_path }}/.sops.yaml"
-        mode: "0755"
+        mode: "0644"
     - name: Remove backed up Sops configuration file
       ansible.builtin.file:
         path: "{{ repository_path }}/.sops.yaml.orig"

bootstrap/tasks/addons/kubernetes_dashboard.yaml

@@ -17,7 +17,7 @@
   ansible.builtin.template:
     src: "{{ item.src }}"
     dest: "{{ repository_path }}/kubernetes/apps/{{ addon_namespace }}/{{ addon_name }}/{{ item.path | replace('.j2', '') }}"
-    mode: "0755"
+    mode: "0644"
   with_community.general.filetree: ["../templates/addons/{{ addon_name }}/"]
 
 # https://github.com/ansible-collections/community.sops/issues/153
@@ -27,7 +27,7 @@
       ansible.builtin.copy:
         src: "{{ repository_path }}/.sops.yaml"
         dest: "{{ repository_path }}/.sops.yaml.orig"
-        mode: "0755"
+        mode: "0644"
     - name: Remove Sops configuration file
       ansible.builtin.file:
         path: "{{ repository_path }}/.sops.yaml"
@@ -39,14 +39,14 @@
         encrypted_regex: ^(data|stringData)$
         age: ["{{ bootstrap_age_public_key }}"]
         content_yaml: "{{ lookup('ansible.builtin.template', item.src) | from_yaml }}"
-        mode: "0755"
+        mode: "0644"
         force: true
       with_community.general.filetree: ["../templates/addons/{{ addon_name }}/"]
     - name: Restore Sops configuration file
       ansible.builtin.copy:
         src: "{{ repository_path }}/.sops.yaml.orig"
         dest: "{{ repository_path }}/.sops.yaml"
-        mode: "0755"
+        mode: "0644"
     - name: Remove backed up Sops configuration file
       ansible.builtin.file:
         path: "{{ repository_path }}/.sops.yaml.orig"
@@ -56,7 +56,7 @@
       ansible.builtin.copy:
         src: "{{ repository_path }}/.sops.yaml.orig"
         dest: "{{ repository_path }}/.sops.yaml"
-        mode: "0755"
+        mode: "0644"
     - name: Remove backed up Sops configuration file
       ansible.builtin.file:
         path: "{{ repository_path }}/.sops.yaml.orig"

bootstrap/tasks/addons/weave_gitops.yaml

@@ -17,7 +17,7 @@
   ansible.builtin.template:
     src: "{{ item.src }}"
     dest: "{{ repository_path }}/kubernetes/apps/{{ addon_namespace }}/{{ addon_name }}/{{ item.path | replace('.j2', '') }}"
-    mode: "0755"
+    mode: "0644"
   with_community.general.filetree: ["../templates/addons/{{ addon_name }}/"]
 
 # https://github.com/ansible-collections/community.sops/issues/153
@@ -27,7 +27,7 @@
       ansible.builtin.copy:
         src: "{{ repository_path }}/.sops.yaml"
         dest: "{{ repository_path }}/.sops.yaml.orig"
-        mode: "0755"
+        mode: "0644"
     - name: Remove Sops configuration file
       ansible.builtin.file:
         path: "{{ repository_path }}/.sops.yaml"
@@ -39,14 +39,14 @@
         encrypted_regex: ^(data|stringData)$
         age: ["{{ bootstrap_age_public_key }}"]
         content_yaml: "{{ lookup('ansible.builtin.template', item.src) | from_yaml }}"
-        mode: "0755"
+        mode: "0644"
         force: true
       with_community.general.filetree: ["../templates/addons/{{ addon_name }}/"]
     - name: Restore Sops configuration file
       ansible.builtin.copy:
         src: "{{ repository_path }}/.sops.yaml.orig"
         dest: "{{ repository_path }}/.sops.yaml"
-        mode: "0755"
+        mode: "0644"
     - name: Remove backed up Sops configuration file
       ansible.builtin.file:
         path: "{{ repository_path }}/.sops.yaml.orig"
@@ -56,7 +56,7 @@
       ansible.builtin.copy:
         src: "{{ repository_path }}/.sops.yaml.orig"
         dest: "{{ repository_path }}/.sops.yaml"
-        mode: "0755"
+        mode: "0644"
     - name: Remove backed up Sops configuration file
       ansible.builtin.file:
         path: "{{ repository_path }}/.sops.yaml.orig"