Comment 12 for bug 1866382

Seeing that we don't have a reproducer yet, I am not sure if we should first submit a defense patch similar to the following, it's harmless but it should also be able to solve the problem.

$ git diff
diff --git a/reactive/kubernetes_worker.py b/reactive/kubernetes_worker.py
index 4131a61..e46b0a3 100644
--- a/reactive/kubernetes_worker.py
+++ b/reactive/kubernetes_worker.py
@@ -1094,6 +1094,7 @@ def update_nrpe_config():
cmd = ['chown', '-R', 'nagios:nagios',
os.path.dirname(nrpe_kubeconfig_path)]
check_call(cmd)
+ check_call(['chown', 'nagios:nagios', '/var/lib/nagios'])

remove_state('nrpe-external-master.reconfigure')
set_state('nrpe-external-master.initial-config')