Skip to content

Commit 2e1caa0

Browse files
Added caution block and resolved review comments
1 parent 6fa916f commit 2e1caa0

File tree

1 file changed

+9
-0
lines changed

1 file changed

+9
-0
lines changed

content/en/docs/tasks/access-application-cluster/configure-access-multiple-clusters.md

Lines changed: 9 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -88,6 +88,10 @@ kubectl config --kubeconfig=config-demo set-cluster scratch --server=https://5.6
8888

8989
Add user details to your configuration file:
9090

91+
{{< caution >}}
92+
Storing passwords in Kubernetes client config is risky. A better alternative would be to use a credential plugin and store them separately. See: [client-go credential plugins](/docs/reference/access-authn-authz/authentication/#client-go-credential-plugins)
93+
{{< /caution >}}
94+
9195
```shell
9296
kubectl config --kubeconfig=config-demo set-credentials developer --client-certificate=fake-cert-file --client-key=fake-key-seefile
9397
kubectl config --kubeconfig=config-demo set-credentials experimenter --username=exp --password=some-password
@@ -153,6 +157,11 @@ users:
153157
client-key: fake-key-file
154158
- name: experimenter
155159
user:
160+
# Documentation note (this comment is NOT part of the command output).
161+
# Storing passwords in Kubernetes client config is risky.
162+
# A better alternative would be to use a credential plugin
163+
# and store the credentials separately.
164+
# See https://kubernetes.io/docs/reference/access-authn-authz/authentication/#client-go-credential-plugins
156165
password: some-password
157166
username: exp
158167
```

0 commit comments

Comments
 (0)