Comment by simonw

If the agent has permission to run kubectl config view what's to stop it from reading those config files directly?