Keywords: Apache Airflow - Google Cloud Platform - How to - Permissions
I'm in need of a little assistance altering the permissions of some SSL .pem certificates when mounting volumes from Kubernetes secrets.
I'm using the Bitnami Airflow helm chart and have been able to mount the relevant .pem certificates to allow me to access the files in the Pod. However, I'm not able to alter their permissions to remove group access.
I've set the default mode for the Volume where the .pem files reside to 256 or 384 (0400 & 0600, respectively), but when I exec into the containers, the permissions show different settings at 0440 & 0640, instead.
Is there a different way to go about this? Do I need to configure an init container?
For context, I need to alter the permissions to connect to Postgres CloudSQL with SSL-enabled.