nixos/kubernetes: use correct -o option with bash install when copying certs in cfssl prestart script

This commit is contained in:
Joris Bolsens 2024-02-10 00:31:39 -08:00
parent 8f9789aa7f
commit 1856e7e4b1

View file

@ -174,7 +174,7 @@ in
'')
(optionalString cfg.genCfsslAPIToken ''
if [ ! -f "${cfsslAPITokenPath}" ]; then
install -u cfssl -m 400 <(head -c ${toString (cfsslAPITokenLength / 2)} /dev/urandom | od -An -t x | tr -d ' ') "${cfsslAPITokenPath}"
install -o cfssl -m 400 <(head -c ${toString (cfsslAPITokenLength / 2)} /dev/urandom | od -An -t x | tr -d ' ') "${cfsslAPITokenPath}"
fi
'')]);