which OS level directory files permission required for fluentd to work? like .netrc required write permission in case of HTTP proxy

[deepaksb2]

What is a problem?

we are seeing below error while executing rest API when HTTP proxy is configured which states .netrc requires write permission though proxy is configured with no password authentication.

https://:Permission bits for '/root/.netrc' should be 0600, but are 400,

providing required permissions to file has eventually resolved the issue but we would like to know if any other dependent OS files required similar permissions as a prerequisite.

Describe the configuration of Fluentd

fluentd is installed on RHEL 8 and HTTP proxy is configured.

Describe the logs of Fluentd

Getting below error

https://:Permission bits for '/root/.netrc' should be 0600, but are 400

Environment

- Fluentd version:1.16.3 tried with later version as well
- TD Agent version:4.5.2 (tried with LTS version as well)
- Fluent Package version:
- Docker image (tag):
- Operating system: Windows, RHEL 8/9
- Kernel version:

[Watson1978]

Based on my research,
the fluent-plugin-kubernetes_metadata_filter has the following library dependencies:

fluent-plugin-kubernetes_metadata_filter
-> kubeclient
  -> rest-client
    -> netrc

And, netrc gem might access to ~/.netrc and it require 0600 as permission

Regarding whether similar access occurs with Fluentd core, I've never heard of such a case.
Since it depends on implementation, I'm not sure whether all plugins have such access.

[deepaksb2]

Thanks for the reply , I also backtracked and found one of out custom gem plugin based on rest-client.