fix: set permissions on files to 0644

Signed-off-by: Devin Buhl <devin@buhl.casa>

bootstrap/tasks/kubernetes/main.yaml

@@ -12,7 +12,7 @@
   ansible.builtin.template:
     src: "{{ item.src }}"
     dest: "{{ repository_path }}/kubernetes/{{ item.path | regex_replace('.j2$', '') }}"
-    mode: "0755"
+    mode: "0644"
   with_community.general.filetree: ["../templates/kubernetes/"]
 
 # https://github.com/ansible-collections/community.sops/issues/153
@@ -22,7 +22,7 @@
       ansible.builtin.copy:
         src: "{{ repository_path }}/.sops.yaml"
         dest: "{{ repository_path }}/.sops.yaml.orig"
-        mode: "0755"
+        mode: "0644"
     - name: Remove Sops configuration file
       ansible.builtin.file:
         path: "{{ repository_path }}/.sops.yaml"
@@ -34,14 +34,14 @@
         encrypted_regex: ^(data|stringData)$
         age: ["{{ bootstrap_age_public_key }}"]
         content_yaml: "{{ lookup('ansible.builtin.template', item.src) | from_yaml }}"
-        mode: "0755"
+        mode: "0644"
         force: true
       with_community.general.filetree: ["../templates/kubernetes/"]
     - name: Restore Sops configuration file
       ansible.builtin.copy:
         src: "{{ repository_path }}/.sops.yaml.orig"
         dest: "{{ repository_path }}/.sops.yaml"
-        mode: "0755"
+        mode: "0644"
     - name: Remove backed up Sops configuration file
       ansible.builtin.file:
         path: "{{ repository_path }}/.sops.yaml.orig"
@@ -51,7 +51,7 @@
       ansible.builtin.copy:
         src: "{{ repository_path }}/.sops.yaml.orig"
         dest: "{{ repository_path }}/.sops.yaml"
-        mode: "0755"
+        mode: "0644"
     - name: Remove backed up Sops configuration file
       ansible.builtin.file:
         path: "{{ repository_path }}/.sops.yaml.orig"