Updated openssl plugin to not leak certs to /tmp

mmontes11 · May 11, 2024 · fa817c7 · fa817c7
1 parent ed306dc
commit fa817c7
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 5 deletions.
diff --git a/.k9s/plugins/cert-manager.yaml b/.k9s/plugins/cert-manager.yaml
@@ -11,7 +11,6 @@ plugins:
     args:
       - -c
       - "cmctl inspect secret --context $CONTEXT -n $NAMESPACE $NAME |& less"
-
   cert-status:
     shortCut: Shift-S
     confirm: false
@@ -23,7 +22,6 @@ plugins:
     args:
       - -c
       - "cmctl status certificate --context $CONTEXT -n $NAMESPACE $NAME |& less"
-
   cert-renew:
     shortCut: Shift-R
     confirm: false

diff --git a/.k9s/plugins/openssl.yaml b/.k9s/plugins/openssl.yaml
@@ -10,8 +10,7 @@ plugins:
     background: false
     args:
       - -c
-      - kubectl get secret --context $CONTEXT -n $NAMESPACE $NAME -o json | jq -r ".data.\"ca.crt\"" | base64 -d > /tmp/ca.crt && openssl storeutl -noout -text -certs /tmp/ca.crt |& less
-
+      - kubectl get secret --context $CONTEXT -n $NAMESPACE $NAME -o json | jq -r ".data.\"ca.crt\"" | base64 -d | openssl storeutl -noout -text -certs /dev/stdin |& less
   secret-openssl-tls:
     shortCut: Shift-O
     confirm: false
@@ -22,4 +21,4 @@ plugins:
     background: false
     args:
       - -c
-      - kubectl get secret --context $CONTEXT -n $NAMESPACE $NAME -o json | jq -r ".data.\"tls.crt\"" | base64 -d > /tmp/tls.crt && openssl storeutl -noout -text -certs /tmp/tls.crt |& less
+      - kubectl get secret --context $CONTEXT -n $NAMESPACE $NAME -o json | jq -r ".data.\"tls.crt\"" | base64 -d | openssl storeutl -noout -text -certs /dev/stdin |& less