Related command

az aks get-credentials

Description

Background

I need help on a case where when my customer uses soft link for config file, they get the below prompt :-

/home/sander_flobbe/.kube/config has permissions '777'. It should be readable and writable only by its owner.

As per my understanding, customer shouldn’t be getting this prompt, as symlink has by default permissions of 777 which can't be modified.

Steps to reproduce the behavior:

1. rm -rf .kube
2. mkdir .kube
3. cd .kube
4. touch my-config
5. ln -s my-config config
6. az aks get-credentials --resource-group (..) --name (..) --subscription (..)

This gives a (false) error:
/home/sander_flobbe/.kube/config has permissions "777".
It should be readable and writable only by its owner.
Merged "aks6e827e784bbf2" as current context in /home/sander_flobbe/.kube/config

This behavior is reproducible with the steps shared.

In this PR, it will additionally check if the storage path is a symlink, and if so, skip the permission check.

Testing Guide

History Notes

[Component Name 1] BREAKING CHANGE: az command a: Make some customer-facing breaking change
[Component Name 2] az command b: Add some customer-facing feature

This checklist is used to make sure that common guidelines for a pull request are followed.

• The PR title and description has followed the guideline in Submitting Pull Requests.

• I adhere to the Command Guidelines.

• I adhere to the Error Handling Guidelines.