summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorBrian Coca <bcoca@users.noreply.github.com>2020-04-03 15:01:34 -0400
committerMatt Clay <matt@mystile.com>2020-04-21 11:45:58 -0700
commit137caed836ef096945086cfe75dc11587b68db3a (patch)
tree721482e09dea687c9e30e2e798e97b39beb16b11
parentde9a4f5474c5f5db442ae7493d6b5da7177e335d (diff)
downloadansible-137caed836ef096945086cfe75dc11587b68db3a.tar.gz
document danger of kubectl options (#68195)
-rw-r--r--lib/ansible/plugins/connection/kubectl.py5
1 files changed, 5 insertions, 0 deletions
diff --git a/lib/ansible/plugins/connection/kubectl.py b/lib/ansible/plugins/connection/kubectl.py
index 063d38d437..a5f43f11f7 100644
--- a/lib/ansible/plugins/connection/kubectl.py
+++ b/lib/ansible/plugins/connection/kubectl.py
@@ -65,6 +65,7 @@ DOCUMENTATION = """
kubectl_extra_args:
description:
- Extra arguments to pass to the kubectl command line.
+ - Please be aware that this passes information directly on the command line and it could expose sensitive data.
default: ''
vars:
- name: ansible_kubectl_extra_args
@@ -108,6 +109,8 @@ DOCUMENTATION = """
kubectl_password:
description:
- Provide a password for authenticating with the API.
+ - Please be aware that this passes information directly on the command line and it could expose sensitive data.
+ We recommend using the file based authentication options instead.
default: ''
vars:
- name: ansible_kubectl_password
@@ -116,6 +119,8 @@ DOCUMENTATION = """
kubectl_token:
description:
- API authentication bearer token.
+ - Please be aware that this passes information directly on the command line and it could expose sensitive data.
+ We recommend using the file based authentication options instead.
vars:
- name: ansible_kubectl_token
- name: ansible_kubectl_api_key