From e33f968466f98bac2e60427b2eeb03d8d96d12cd Mon Sep 17 00:00:00 2001 From: Michael Crenshaw Date: Tue, 31 May 2022 10:40:07 -0700 Subject: [PATCH] docs: security warning for plugins (#9547) Signed-off-by: Michael Crenshaw --- docs/user-guide/config-management-plugins.md | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/docs/user-guide/config-management-plugins.md b/docs/user-guide/config-management-plugins.md index 8819abb230a36..a235a0e7bb6de 100644 --- a/docs/user-guide/config-management-plugins.md +++ b/docs/user-guide/config-management-plugins.md @@ -2,6 +2,11 @@ Argo CD allows integrating more config management tools using config management plugins. +!!! warning + Plugins are granted a level of trust in the Argo CD system, so it is important to implement plugins securely. Argo + CD administrators should only install plugins from trusted sources, and they should audit plugins to weigh their + particular risks and benefits. + ## Installing a CMP There are two ways to install a Config Management Plugin (CMP):