Comments (7)
This issue is currently awaiting triage.
SIG CLI takes a lead on issue triage for this repo, but any Kubernetes member can accept issues by applying the triage/accepted
label.
The triage/accepted
label can be added by org members by writing /triage accepted
in a comment.
Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.
from kubectl.
In my opinion, this would negatively impact the security. Bad actors would define symlinks of various unlisted yaml definitions and blindly applying these resources seems to be not preferable.
from kubectl.
Unfortunately, this sounds like a valid point.
Maybe we could think about an cli option to accept this behavior explicitly? I don't know if that's a good idea.
from kubectl.
I agree that it could be a security concern, and I think I recall that kubectl resolving symlinks has been avoided in the past.
As a workaround, could you copy the files you want to apply, expanding symlinks, something like this?
cp -rL . /tmp/staging
kubectl apply -f /tmp/staging --recursive
rm -r /tmp/staging
from kubectl.
Yes, there is definitely a workaround. There is almost always one. That just makes our deployments a little more complex.
I can live with that, but I still wanted to put the topic up for discussion here.
from kubectl.
Thanks for bringing this topic. I'd like to close this issue, if you don't mind;
/close
from kubectl.
@ardaguclu: Closing this issue.
In response to this:
Thanks for bringing this topic. I'd like to close this issue, if you don't mind;
/close
Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.
from kubectl.
Related Issues (20)
- --disable-compression makes request to localhost instead to the kubernetes API when kubectl is running in-cluster HOT 5
- kube-apiserver drops connection from kubectl after 1 minute HOT 4
- kubectl get: when resource name is in form resource_type/name the error occurs HOT 10
- Add `--profile` to `kubectl run` HOT 9
- Kubectl does not support secret creation from `.env` files with multiline values HOT 14
- How to set kubectl i18n HOT 3
- `kubectl logs -f` Is there a reason `-f` still errors when a pod is in state `ContainerCreating`? Can it wait? HOT 5
- kubectl create --validate flag help has excessive spacing between sentences. HOT 4
- Support config get-contexts JSON output HOT 5
- Cobra command Kubectl Create does not return error to be handled HOT 6
- VSCode as kubectl editor is not returning to terminal until I quit VSCode completely HOT 5
- rsync via kubectl hangs HOT 3
- kubectl apply's get /namespaces/{} output is disregarded HOT 13
- Port forwarding dies after cancelling a TCP request HOT 3
- Include Namespace in `kubectl delete` Dry-Run Output HOT 7
- Failed to get terminated pod logs HOT 9
- `kubectl explain` not re-wrapping lines HOT 2
- Update go HOT 3
- Client-side validation is skipped if the cluster and resource support server-side validation HOT 9
- Allow kubeconfig option load a list of kubeconfig files HOT 2
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from kubectl.