From 229cdb70b9c61cdd233eabe22a44a3553f6fb234 Mon Sep 17 00:00:00 2001 From: zhangguanzhang Date: Thu, 5 Aug 2021 20:31:38 +0800 Subject: [PATCH] [zh] docs: sync and update the ref Signed-off-by: zhangguanzhang --- .../organize-cluster-access-kubeconfig.md | 11 +++++++++++ content/zh/docs/concepts/configuration/overview.md | 4 ++-- .../zh/docs/tasks/administer-cluster/encrypt-data.md | 4 ++-- 3 files changed, 15 insertions(+), 4 deletions(-) diff --git a/content/zh/docs/concepts/configuration/organize-cluster-access-kubeconfig.md b/content/zh/docs/concepts/configuration/organize-cluster-access-kubeconfig.md index 9907772704..023046d413 100644 --- a/content/zh/docs/concepts/configuration/organize-cluster-access-kubeconfig.md +++ b/content/zh/docs/concepts/configuration/organize-cluster-access-kubeconfig.md @@ -30,6 +30,17 @@ It does not mean that there is a file named `kubeconfig`. 用于配置集群访问的文件称为 *kubeconfig 文件*。这是引用配置文件的通用方法。这并不意味着有一个名为 `kubeconfig` 的文件 {{< /note >}} + +{{< warning >}} +只使用来源可靠的 kubeconfig 文件。使用特制的 kubeconfig 文件可能会导致恶意代码执行或文件暴露。 +如果必须使用不受信任的 kubeconfig 文件,请首先像检查 shell 脚本一样仔细检查它。 +{{< /warning>}} + -## 一般配置提示 +## 一般配置提示 {#general-configuration-tips} -## “Naked”Pods 与 ReplicaSet,Deployment 和 Jobs +## “Naked” Pods 与 ReplicaSet,Deployment 和 Jobs 其输出应该是 `mykey: bXlkYXRh`,`mydata` 数据是被加密过的,请参阅 - [解密 Secret](/zh/docs/concepts/configuration/secret#decoding-a-secret) + [解密 Secret](/zh/docs/tasks/configmap-secret/managing-secret-using-kubectl/#decoding-secret) 了解如何完全解码 Secret 内容。