Updates

onyxia-init.sh

@@ -48,9 +48,13 @@ if [  "`which kubectl`" != "" ]; then
     kubectl config use-context in-cluster
     export KUBERNETES_SERVICE_ACCOUNT=`cat /var/run/secrets/kubernetes.io/serviceaccount/token | tr "." "\n" | head -2 | tail -1 | base64 --decode | jq -r ' .["kubernetes.io"].serviceaccount.name'`
     export KUBERNETES_NAMESPACE=`cat /var/run/secrets/kubernetes.io/serviceaccount/namespace`
-    # Fix permissions for custom images that need to be run as root
+    # Fix permissions on kubectl config file
     if [[ $(id -u) = 0 ]] && grep -q "onyxia" /etc/passwd; then 
+        # For internal images that need to be run as root
         chown -R onyxia:users ${HOME}/.kube 
+    else
+        # For community-based images
+        chmod 640 ${HOME}/.kube/config
     fi
 fi