From 38a2d14ffa459cb3003387b26de5079c72ce5a0a Mon Sep 17 00:00:00 2001
From: Brad Stein <Brad.Stein@gmail.com>
Date: Wed, 31 Dec 2025 15:44:17 -0300
Subject: [PATCH] communication: fix MAS config permissions

---
 services/communication/mas-deployment.yaml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/services/communication/mas-deployment.yaml b/services/communication/mas-deployment.yaml
index 10912787..58df3c05 100644
--- a/services/communication/mas-deployment.yaml
+++ b/services/communication/mas-deployment.yaml
@@ -38,6 +38,7 @@ spec:
               umask 077
               DB_PASS_ESCAPED="$(printf '%s' "${MAS_DB_PASSWORD}" | sed 's/[\\/&]/\\&/g')"
               sed "s/@@MAS_DB_PASSWORD@@/${DB_PASS_ESCAPED}/g" /etc/mas/config.yaml > /rendered/config.yaml
+              chmod 0644 /rendered/config.yaml
           env:
             - name: MAS_DB_PASSWORD
               valueFrom: