Skip to content

Commit 04d0c72

Browse files
gracenngtabbysable
andauthored
Kube config warnings for code execution (#28248)
* Update configure-access-multiple-clusters.md * Rewording kubeconfig warning * Tabitha's suggestion Co-authored-by: Tabitha Sable <[email protected]> * Re-order sentences * Copy update Co-authored-by: Tabitha Sable <[email protected]>
1 parent 3548f28 commit 04d0c72

File tree

2 files changed

+12
-1
lines changed

2 files changed

+12
-1
lines changed

content/en/docs/concepts/configuration/organize-cluster-access-kubeconfig.md

Lines changed: 5 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -17,6 +17,11 @@ a *kubeconfig file*. This is a generic way of referring to configuration files.
1717
It does not mean that there is a file named `kubeconfig`.
1818
{{< /note >}}
1919

20+
{{< warning >}}
21+
Only use kubeconfig files from trusted sources. Using a specially-crafted kubeconfig file could result in malicious code execution or file exposure.
22+
If you must use an untrusted kubeconfig file, inspect it carefully first, much as you would a shell script.
23+
{{< /warning>}}
24+
2025
By default, `kubectl` looks for a file named `config` in the `$HOME/.kube` directory.
2126
You can specify other kubeconfig files by setting the `KUBECONFIG` environment
2227
variable or by setting the
@@ -154,4 +159,3 @@ are stored absolutely.
154159

155160

156161

157-

content/en/docs/tasks/access-application-cluster/configure-access-multiple-clusters.md

Lines changed: 7 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -20,6 +20,13 @@ a *kubeconfig file*. This is a generic way of referring to configuration files.
2020
It does not mean that there is a file named `kubeconfig`.
2121
{{< /note >}}
2222

23+
24+
{{< warning >}}
25+
Only use kubeconfig files from trusted sources. Using a specially-crafted kubeconfig file could result in malicious code execution or file exposure.
26+
If you must use an untrusted kubeconfig file, inspect it carefully first, much as you would a shell script.
27+
{{< /warning>}}
28+
29+
2330
## {{% heading "prerequisites" %}}
2431

2532
{{< include "task-tutorial-prereqs.md" >}}

0 commit comments

Comments
 (0)