Merge pull request #26 from consideRatio/pr/fix-helm-warning

fix: restrict kubeconfig permissions to current user to avoid helm's warnings

.github/workflows/test_k3s.yml

@@ -109,6 +109,11 @@ jobs:
           helm version
           helm list
 
+          if helm version 2>&1 | grep WARNING > /dev/null; then
+              echo "helm is expected to run without a WARNING!"
+              exit 1
+          fi
+
       - name: Install network policies test
         run: helm install test-calico ./test-calico --wait
 

action.yml

@@ -115,10 +115,14 @@ runs:
           ${{ inputs.extra-setup-args }}
       shell: bash
 
+    # By providing a kubeconfig owned by the current user with 600 permissions,
+    # kubectl becomes usable without sudo, and helm won't emit warnings about
+    # bloated access to group/world.
     - name: Prepare a kubeconfig in ~/.kube/config
       run: |
         mkdir -p ~/.kube
         sudo cat /etc/rancher/k3s/k3s.yaml > "$HOME/.kube/config"
+        chmod 600 "$HOME/.kube/config"
         echo "KUBECONFIG=$HOME/.kube/config" >> $GITHUB_ENV
       shell: bash