Kubelet Kubeconfig File Ownership Set To root:root

#!/usr/bin/env bash
#
# Fix CISKubernetes 4.1.6:
# Ensure /etc/kubernetes/kubelet.conf is owned by root:root
#
# Run on: every worker node (as root or with sudo)
# Safe to re-run.

set -euo pipefail

TARGET_FILE="/etc/kubernetes/kubelet.conf"

echo "==> Checking for ${TARGET_FILE}"

if [ ! -e "${TARGET_FILE}" ]; then
  echo "File ${TARGET_FILE} does not exist on this node. Nothing to do."
  exit 0
fi

current_owner_group="$(stat -c '%U:%G' "${TARGET_FILE}")"

if [ "${current_owner_group}" != "root:root" ]; then
  echo "Current ownership is ${current_owner_group}, fixing to root:root..."
  chown root:root "${TARGET_FILE}"
else
  echo "Ownership already correct (${current_owner_group}), no change needed."
fi

echo "==> Verifying ownership..."
verified_owner_group="$(stat -c '%U:%G' "${TARGET_FILE}")"
echo "Verified ownership: ${verified_owner_group}"

if [ "${verified_owner_group}" != "root:root" ]; then
  echo "ERROR: Failed to set ownership to root:root for ${TARGET_FILE}" >&2
  exit 1
fi

echo "==> Compliance check passed for ${TARGET_FILE}"