From 553378085fae9b9688f9a495af65e183144f2efa Mon Sep 17 00:00:00 2001 From: Jose Diaz-Gonzalez Date: Wed, 23 Jul 2025 20:35:02 -0400 Subject: [PATCH] fix: ensure the rendered.yaml file is written into the secure filesystem --- plugins/scheduler-k3s/helm.go | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/plugins/scheduler-k3s/helm.go b/plugins/scheduler-k3s/helm.go index 98fedf630..c886a8020 100644 --- a/plugins/scheduler-k3s/helm.go +++ b/plugins/scheduler-k3s/helm.go @@ -495,8 +495,7 @@ func (p *KustomizeRenderer) Run(renderedManifests *bytes.Buffer) (*bytes.Buffer, return nil, fmt.Errorf("%s not found", konfig.DefaultKustomizationFileName()) } - renderedYamlPath := filepath.Join(p.KustomizeRootPath, "rendered.yaml") - if err := os.WriteFile(renderedYamlPath, renderedManifests.Bytes(), 0644); err != nil { + if err := fs.WriteFile(filepath.Join(p.KustomizeRootPath, "rendered.yaml"), renderedManifests.Bytes()); err != nil { return nil, fmt.Errorf("Error writing rendered.yaml: %w", err) }