From 330c3e269cfe922cfd3307a7a037ee511f90e6f5 Mon Sep 17 00:00:00 2001 From: Somefive Date: Wed, 8 Dec 2021 09:12:07 +0800 Subject: [PATCH] Fix: kubeconfig tmp file security (#2894) Signed-off-by: Yin Da --- pkg/apiserver/rest/usecase/cluster.go | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pkg/apiserver/rest/usecase/cluster.go b/pkg/apiserver/rest/usecase/cluster.go index a0e11998c..67348bdcd 100644 --- a/pkg/apiserver/rest/usecase/cluster.go +++ b/pkg/apiserver/rest/usecase/cluster.go @@ -184,7 +184,7 @@ func (c *clusterUsecaseImpl) ListKubeClusters(ctx context.Context, query string, } func joinClusterByKubeConfigString(ctx context.Context, k8sClient client.Client, clusterName string, kubeConfig string) (string, error) { - tmpFileName := fmt.Sprintf("/tmp/cluster-secret-%s-%s-%d.kubeconfig", clusterName, utils.RandomString(8), time.Now().UnixNano()) + tmpFileName := fmt.Sprintf("/tmp/cluster-secret-%s-%d.kubeconfig", utils.RandomString(8), time.Now().UnixNano()) if err := ioutil.WriteFile(tmpFileName, []byte(kubeConfig), 0600); err != nil { return "", errors.Wrapf(err, "failed to write kubeconfig to temp file %s", tmpFileName) }