@@ -58,11 +58,11 @@ func DefaultImage() string {
58
58
func NewPrometheus (sharedDir string , name string , config , promImage string ) (* e2e.HTTPService , string , error ) {
59
59
dir := filepath .Join (sharedDir , "data" , "prometheus" , name )
60
60
container := filepath .Join (e2e .ContainerSharedDir , "data" , "prometheus" , name )
61
- if err := os .MkdirAll (dir , 0777 ); err != nil {
61
+ if err := os .MkdirAll (dir , 0750 ); err != nil {
62
62
return nil , "" , errors .Wrap (err , "create prometheus dir" )
63
63
}
64
64
65
- if err := ioutil .WriteFile (filepath .Join (dir , "prometheus.yml" ), []byte (config ), 0666 ); err != nil {
65
+ if err := ioutil .WriteFile (filepath .Join (dir , "prometheus.yml" ), []byte (config ), 0600 ); err != nil {
66
66
return nil , "" , errors .Wrap (err , "creating prom config failed" )
67
67
}
68
68
@@ -152,7 +152,7 @@ func NewQuerier(sharedDir, name string, storeAddresses, fileSDStoreAddresses, ru
152
152
if len (fileSDStoreAddresses ) > 0 {
153
153
queryFileSDDir := filepath .Join (sharedDir , "data" , "querier" , name )
154
154
container := filepath .Join (e2e .ContainerSharedDir , "data" , "querier" , name )
155
- if err := os .MkdirAll (queryFileSDDir , 0777 ); err != nil {
155
+ if err := os .MkdirAll (queryFileSDDir , 0750 ); err != nil {
156
156
return nil , errors .Wrap (err , "create query dir failed" )
157
157
}
158
158
@@ -166,7 +166,7 @@ func NewQuerier(sharedDir, name string, storeAddresses, fileSDStoreAddresses, ru
166
166
return nil , err
167
167
}
168
168
169
- if err := ioutil .WriteFile (queryFileSDDir + "/filesd.yaml" , b , 0666 ); err != nil {
169
+ if err := ioutil .WriteFile (queryFileSDDir + "/filesd.yaml" , b , 0600 ); err != nil {
170
170
return nil , errors .Wrap (err , "creating query SD config failed" )
171
171
}
172
172
@@ -206,7 +206,7 @@ func NewReceiver(sharedDir string, networkName string, name string, replicationF
206
206
dir := filepath .Join (sharedDir , "data" , "receive" , name )
207
207
dataDir := filepath .Join (dir , "data" )
208
208
container := filepath .Join (e2e .ContainerSharedDir , "data" , "receive" , name )
209
- if err := os .MkdirAll (dataDir , 0777 ); err != nil {
209
+ if err := os .MkdirAll (dataDir , 0750 ); err != nil {
210
210
return nil , errors .Wrap (err , "create receive dir" )
211
211
}
212
212
b , err := json .Marshal (hashring )
@@ -251,15 +251,15 @@ func NewReceiverWithConfigWatcher(sharedDir string, networkName string, name str
251
251
dir := filepath .Join (sharedDir , "data" , "receive" , name )
252
252
dataDir := filepath .Join (dir , "data" )
253
253
container := filepath .Join (e2e .ContainerSharedDir , "data" , "receive" , name )
254
- if err := os .MkdirAll (dataDir , 0777 ); err != nil {
254
+ if err := os .MkdirAll (dataDir , 0750 ); err != nil {
255
255
return nil , errors .Wrap (err , "create receive dir" )
256
256
}
257
257
b , err := json .Marshal (hashring )
258
258
if err != nil {
259
259
return nil , errors .Wrapf (err , "generate hashring file: %v" , hashring )
260
260
}
261
261
262
- if err := ioutil .WriteFile (filepath .Join (dir , "hashrings.json" ), b , 0666 ); err != nil {
262
+ if err := ioutil .WriteFile (filepath .Join (dir , "hashrings.json" ), b , 0600 ); err != nil {
263
263
return nil , errors .Wrap (err , "creating receive config" )
264
264
}
265
265
@@ -295,7 +295,7 @@ func NewReceiverWithConfigWatcher(sharedDir string, networkName string, name str
295
295
func NewRuler (sharedDir string , name string , ruleSubDir string , amCfg []alert.AlertmanagerConfig , queryCfg []query.Config ) (* Service , error ) {
296
296
dir := filepath .Join (sharedDir , "data" , "rule" , name )
297
297
container := filepath .Join (e2e .ContainerSharedDir , "data" , "rule" , name )
298
- if err := os .MkdirAll (dir , 0777 ); err != nil {
298
+ if err := os .MkdirAll (dir , 0750 ); err != nil {
299
299
return nil , errors .Wrap (err , "create rule dir" )
300
300
}
301
301
@@ -343,7 +343,7 @@ func NewRuler(sharedDir string, name string, ruleSubDir string, amCfg []alert.Al
343
343
func NewAlertmanager (sharedDir string , name string ) (* e2e.HTTPService , error ) {
344
344
dir := filepath .Join (sharedDir , "data" , "am" , name )
345
345
container := filepath .Join (e2e .ContainerSharedDir , "data" , "am" , name )
346
- if err := os .MkdirAll (dir , 0777 ); err != nil {
346
+ if err := os .MkdirAll (dir , 0750 ); err != nil {
347
347
return nil , errors .Wrap (err , "create am dir" )
348
348
}
349
349
const config = `
@@ -355,7 +355,7 @@ route:
355
355
receivers:
356
356
- name: 'null'
357
357
`
358
- if err := ioutil .WriteFile (filepath .Join (dir , "config.yaml" ), []byte (config ), 0666 ); err != nil {
358
+ if err := ioutil .WriteFile (filepath .Join (dir , "config.yaml" ), []byte (config ), 0600 ); err != nil {
359
359
return nil , errors .Wrap (err , "creating alertmanager config file failed" )
360
360
}
361
361
@@ -382,7 +382,7 @@ receivers:
382
382
func NewStoreGW (sharedDir string , name string , bucketConfig client.BucketConfig , relabelConfig ... relabel.Config ) (* Service , error ) {
383
383
dir := filepath .Join (sharedDir , "data" , "store" , name )
384
384
container := filepath .Join (e2e .ContainerSharedDir , "data" , "store" , name )
385
- if err := os .MkdirAll (dir , 0777 ); err != nil {
385
+ if err := os .MkdirAll (dir , 0750 ); err != nil {
386
386
return nil , errors .Wrap (err , "create store dir" )
387
387
}
388
388
@@ -428,7 +428,7 @@ func NewCompactor(sharedDir string, name string, bucketConfig client.BucketConfi
428
428
dir := filepath .Join (sharedDir , "data" , "compact" , name )
429
429
container := filepath .Join (e2e .ContainerSharedDir , "data" , "compact" , name )
430
430
431
- if err := os .MkdirAll (dir , 0777 ); err != nil {
431
+ if err := os .MkdirAll (dir , 0750 ); err != nil {
432
432
return nil , errors .Wrap (err , "create compact dir" )
433
433
}
434
434
0 commit comments