Nick SzaunigandClaude Opus 5.5
46991a0815
Values were passed as kubectl -p argument and via environment variables, both visible to other processes. Node now generates the values and writes the patch into a private temp file (umask 077, removed on exit); kubectl reads it with --patch-file. Only key names and modes are on the command line. Also fixes the first key being dropped (node -e argv offset). Co-Authored-By: Claude Opus 5.5 (1M context) <[email protected]>