fix: specify mode for adminapi sudoers

delgado3d · darora · commit bf7687a20db0 · 2024-03-26T14:41:29.000+08:00
diff --git a/ansible/tasks/internal/admin-api.yml b/ansible/tasks/internal/admin-api.yml
@@ -19,6 +19,7 @@
   copy:
     src: files/adminapi.sudoers.conf
     dest: /etc/sudoers.d/adminapi
+    mode: "0644"
 
 - name: perms for adminapi
   shell: |
diff --git a/common.vars.pkr.hcl b/common.vars.pkr.hcl
@@ -1 +1 @@
-postgres-version = "15.1.1.30"
+postgres-version = "15.1.1.31"
diff --git a/docker/all-in-one/Dockerfile b/docker/all-in-one/Dockerfile
@@ -172,7 +172,7 @@ RUN ln -s /data/opt/supabase-admin-api /opt/supabase-admin-api \
 # Scripts for adminapi
 COPY ansible/files/admin_api_scripts /root
 COPY --chown=adminapi:adminapi docker/all-in-one/etc/adminapi /etc/adminapi
-COPY docker/all-in-one/etc/sudoers.d /etc/sudoers.d/
+COPY --chmod=644 docker/all-in-one/etc/sudoers.d /etc/sudoers.d/
 
 # Script for pg_egress_collect
 COPY --chown=adminapi:adminapi docker/all-in-one/opt/pg_egress_collect /opt/pg_egress_collect
