From 8cbaa932edf2bd98a7aabeb276f77416324aefe7 Mon Sep 17 00:00:00 2001
From: Miren Esnaola <mirene@google.com>
Date: Mon, 27 Mar 2023 14:49:09 +0200
Subject: [PATCH] Fixed permissions of files created

---
 blueprints/apigee/bigquery-analytics/main.tf                  | 4 ++--
 blueprints/apigee/hybrid-gke/ansible.tf                       | 4 ++--
 blueprints/apigee/hybrid-gke/apigee.tf                        | 2 +-
 .../nb-glb-psc-neg-sb-psc-ilbl7-hybrid-neg/apiproxy.tf        | 2 +-
 blueprints/cloud-operations/adfs/main.tf                      | 4 ++--
 blueprints/gke/autopilot/ansible.tf                           | 4 ++--
 blueprints/gke/binauthz/main.tf                               | 4 ++--
 blueprints/gke/multi-cluster-mesh-gke-fleet-api/ansible.tf    | 4 ++--
 8 files changed, 14 insertions(+), 14 deletions(-)

diff --git a/blueprints/apigee/bigquery-analytics/main.tf b/blueprints/apigee/bigquery-analytics/main.tf
index 68e672d2..d1149f8c 100644
--- a/blueprints/apigee/bigquery-analytics/main.tf
+++ b/blueprints/apigee/bigquery-analytics/main.tf
@@ -287,7 +287,7 @@ resource "local_file" "create_datastore_file" {
     path           = var.path
   })
   filename        = "${path.module}/create-datastore.sh"
-  file_permission = "0777"
+  file_permission = "0755"
 }
 
 resource "local_file" "deploy_apiproxy_file" {
@@ -295,5 +295,5 @@ resource "local_file" "deploy_apiproxy_file" {
     org_name = module.apigee.org_name
   })
   filename        = "${path.module}/deploy-apiproxy.sh"
-  file_permission = "0777"
+  file_permission = "0755"
 }
diff --git a/blueprints/apigee/hybrid-gke/ansible.tf b/blueprints/apigee/hybrid-gke/ansible.tf
index b7694ab1..e1f2f718 100644
--- a/blueprints/apigee/hybrid-gke/ansible.tf
+++ b/blueprints/apigee/hybrid-gke/ansible.tf
@@ -27,7 +27,7 @@ resource "local_file" "vars_file" {
     ingress_ip_name  = local.ingress_ip_name
   })
   filename        = "${path.module}/ansible/vars/vars.yaml"
-  file_permission = "0666"
+  file_permission = "0644"
 }
 
 resource "local_file" "gssh_file" {
@@ -36,5 +36,5 @@ resource "local_file" "gssh_file" {
     zone       = var.zone
   })
   filename        = "${path.module}/ansible/gssh.sh"
-  file_permission = "0777"
+  file_permission = "0755"
 }
diff --git a/blueprints/apigee/hybrid-gke/apigee.tf b/blueprints/apigee/hybrid-gke/apigee.tf
index b92592aa..c9c6b10d 100644
--- a/blueprints/apigee/hybrid-gke/apigee.tf
+++ b/blueprints/apigee/hybrid-gke/apigee.tf
@@ -89,5 +89,5 @@ resource "local_file" "deploy_apiproxy_file" {
     org = module.project.project_id
   })
   filename        = "${path.module}/deploy-apiproxy.sh"
-  file_permission = "0777"
+  file_permission = "0755"
 }
diff --git a/blueprints/apigee/network-patterns/nb-glb-psc-neg-sb-psc-ilbl7-hybrid-neg/apiproxy.tf b/blueprints/apigee/network-patterns/nb-glb-psc-neg-sb-psc-ilbl7-hybrid-neg/apiproxy.tf
index a94b11ee..c65e08df 100644
--- a/blueprints/apigee/network-patterns/nb-glb-psc-neg-sb-psc-ilbl7-hybrid-neg/apiproxy.tf
+++ b/blueprints/apigee/network-patterns/nb-glb-psc-neg-sb-psc-ilbl7-hybrid-neg/apiproxy.tf
@@ -37,5 +37,5 @@ resource "local_file" "deploy_apiproxy_file" {
     environment  = local.environment
   })
   filename        = "${path.module}/deploy-apiproxy.sh"
-  file_permission = "0777"
+  file_permission = "0755"
 }
diff --git a/blueprints/cloud-operations/adfs/main.tf b/blueprints/cloud-operations/adfs/main.tf
index 0a35a90a..b05d09aa 100644
--- a/blueprints/cloud-operations/adfs/main.tf
+++ b/blueprints/cloud-operations/adfs/main.tf
@@ -130,7 +130,7 @@ resource "local_file" "vars_file" {
     adfs_dns_domain_name = var.adfs_dns_domain_name
   })
   filename        = "${path.module}/ansible/vars/vars.yaml"
-  file_permission = "0666"
+  file_permission = "0644"
 }
 
 resource "local_file" "gssh_file" {
@@ -139,5 +139,5 @@ resource "local_file" "gssh_file" {
     project_id = var.project_id
   })
   filename        = "${path.module}/ansible/gssh.sh"
-  file_permission = "0777"
+  file_permission = "0755"
 }
diff --git a/blueprints/gke/autopilot/ansible.tf b/blueprints/gke/autopilot/ansible.tf
index 393d6009..091079d3 100644
--- a/blueprints/gke/autopilot/ansible.tf
+++ b/blueprints/gke/autopilot/ansible.tf
@@ -24,7 +24,7 @@ resource "local_file" "vars_file" {
     app_url    = local.urls["app"]
   })
   filename        = "${path.module}/ansible/vars/vars.yaml"
-  file_permission = "0666"
+  file_permission = "0644"
 }
 
 resource "local_file" "gssh_file" {
@@ -33,5 +33,5 @@ resource "local_file" "gssh_file" {
     zone       = local.zone
   })
   filename        = "${path.module}/ansible/gssh.sh"
-  file_permission = "0777"
+  file_permission = "0755"
 }
diff --git a/blueprints/gke/binauthz/main.tf b/blueprints/gke/binauthz/main.tf
index 77f7f0e4..2592266d 100644
--- a/blueprints/gke/binauthz/main.tf
+++ b/blueprints/gke/binauthz/main.tf
@@ -260,7 +260,7 @@ resource "local_file" "app_file" {
     image     = local.image
   })
   filename        = "${path.module}/app/app.yaml"
-  file_permission = "0666"
+  file_permission = "0644"
 }
 
 resource "local_file" "rbac_file" {
@@ -269,5 +269,5 @@ resource "local_file" "rbac_file" {
     google_sa = module.app_cb_sa.email
   })
   filename        = "${path.module}/tenant-setup.yaml"
-  file_permission = "0666"
+  file_permission = "0644"
 }
diff --git a/blueprints/gke/multi-cluster-mesh-gke-fleet-api/ansible.tf b/blueprints/gke/multi-cluster-mesh-gke-fleet-api/ansible.tf
index b239bf09..5f11b423 100644
--- a/blueprints/gke/multi-cluster-mesh-gke-fleet-api/ansible.tf
+++ b/blueprints/gke/multi-cluster-mesh-gke-fleet-api/ansible.tf
@@ -25,7 +25,7 @@ resource "local_file" "vars_file" {
     project_id            = module.fleet_project.project_id
   })
   filename        = "${path.module}/ansible/vars/vars.yaml"
-  file_permission = "0666"
+  file_permission = "0644"
 }
 
 resource "local_file" "gssh_file" {
@@ -34,5 +34,5 @@ resource "local_file" "gssh_file" {
     zone       = var.mgmt_server_config.zone
   })
   filename        = "${path.module}/ansible/gssh.sh"
-  file_permission = "0777"
+  file_permission = "0755"
 }