In fluentd, volume mounts for configuration files (e.g. fluent.conf, configMapConfigs, fileConfigs) set the default mode to 0777. Kubernetes restricts configmaps to read-only, so it actually gets mounted at 0555. There is no reason to have the executable permission set on these files.

The default mode should be changed to 0444.