[pulsar] branch master updated: Mount token secret with default permission for Function k8s runtime (#10743)

[lhotari]

This is an automated email from the ASF dual-hosted git repository.

lhotari pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/pulsar.git


The following commit(s) were added to refs/heads/master by this push:
     new 04b5da0  Mount token secret with default permission for Function k8s 
runtime (#10743)
04b5da0 is described below

commit 04b5da0f95794259694cc781e8960b7e52fac06b
Author: Ming <itestmyc...@gmail.com>
AuthorDate: Sun May 30 02:25:56 2021 -0400

    Mount token secret with default permission for Function k8s runtime (#10743)
    
    * user token secret mounted as default 644 permission to support rootless 
container
    
    * keep the read only permission for token file
---
 .../pulsar/functions/auth/KubernetesSecretsTokenAuthProvider.java      | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git 
a/pulsar-functions/runtime/src/main/java/org/apache/pulsar/functions/auth/KubernetesSecretsTokenAuthProvider.java
 
b/pulsar-functions/runtime/src/main/java/org/apache/pulsar/functions/auth/KubernetesSecretsTokenAuthProvider.java
index 457a26a..4e222e6 100644
--- 
a/pulsar-functions/runtime/src/main/java/org/apache/pulsar/functions/auth/KubernetesSecretsTokenAuthProvider.java
+++ 
b/pulsar-functions/runtime/src/main/java/org/apache/pulsar/functions/auth/KubernetesSecretsTokenAuthProvider.java
@@ -97,8 +97,7 @@ public class KubernetesSecretsTokenAuthProvider implements 
KubernetesFunctionAut
                         .name(SECRET_NAME)
                         .secret(
                                 new V1SecretVolumeSource()
-                                        .secretName(getSecretName(new 
String(functionAuthData.get().getData())))
-                                        .defaultMode(256))));
+                                        .secretName(getSecretName(new 
String(functionAuthData.get().getData()))))));
 
         podSpec.getContainers().forEach(container -> 
container.setVolumeMounts(Collections.singletonList(
                 new V1VolumeMount()