From 0576ce7842e39689ac8906ce9a3b9a04f79f4376 Mon Sep 17 00:00:00 2001 From: Adao Oliveira Jr Date: Wed, 11 Nov 2026 18:25:03 -0600 Subject: [PATCH] fix(cli): say in --help that read-only blocks every external plugin Read-only mode refuses every external plugin, whatever `dangerous` says (internal/ui/plugins.go), as docs/commands.md, docs/plugins.md and SECURITY.md say. The --help text and the comment on Model.readOnly still said only dangerous plugins were blocked. Signed-off-by: Adao Oliveira Jr --- internal/ui/model.go | 2 +- main.go | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/internal/ui/model.go b/internal/ui/model.go index ed46b2f..727a5c2 100644 --- a/internal/ui/model.go +++ b/internal/ui/model.go @@ -228,7 +228,7 @@ type Model struct { connName string // readOnly is --readonly. Actions that change the cluster or open a - // session into it are hidden and refused, and so are dangerous plugins + // session into it are hidden and refused, and so are external plugins // and typed shell commands; see domain.ReadOnlyAllows. readOnly bool diff --git a/main.go b/main.go index dfddbc4..4e51248 100644 --- a/main.go +++ b/main.go @@ -227,7 +227,7 @@ usage: needed) — k10s never shows this unless you ask for it k10s --readonly look, never touch: no edit, scale, restart, cordon, drain or delete, no shell or port-forward, and no - dangerous plugins or typed shell commands. Every + external plugins or typed shell commands. Every request that could change the cluster is refused before it leaves the machine. Works with demo too. k10s update install the newest release over this binary