fix(utils): close SSH client in GetKubeConfig (#640)

ArangoGutierrez · web-flow · commit e656385b25e4 · 2026-02-13T18:44:10.000+01:00
provisioner.New() opens an SSH connection that was never closed, leaking a TCP socket and SSH multiplexer goroutines on every call. Audit finding #4 (HIGH). Signed-off-by: Carlos Eduardo Arango Gutierrez <eduardoa@nvidia.com>
diff --git a/pkg/utils/kubeconfig.go b/pkg/utils/kubeconfig.go
@@ -35,6 +35,7 @@ func GetKubeConfig(log *logger.FunLogger, cfg *v1alpha1.Environment, hostUrl str
 	if err != nil {
 		return err
 	}
+	defer func() { _ = p.Client.Close() }()
 
 	session, err := p.Client.NewSession()
 	if err != nil {

Original file line number	Diff line number	Diff line change
`@@ -35,6 +35,7 @@ func GetKubeConfig(log logger.FunLogger, cfg v1alpha1.Environment, hostUrl str`
`35`	`35`	`if err != nil {`
`36`	`36`	`return err`
`37`	`37`	`}`
	`38`	`+ defer func() { _ = p.Client.Close() }()`
`38`	`39`
`39`	`40`	`session, err := p.Client.NewSession()`
`40`	`41`	`if err != nil {`