From de853eab13f83073a1fb77b66399138e92c5047f Mon Sep 17 00:00:00 2001 From: Ilya Buziuk Date: Tue, 3 Dec 2024 15:14:51 +0100 Subject: [PATCH 1/2] docs: Using https://open-vsx.org with thousands of community-supported extensions is not recommended in an air-gapped environment Signed-off-by: Ilya Buziuk --- .../proc_selecting-an-open-vsx-registry-instance.adoc | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/modules/administration-guide/partials/proc_selecting-an-open-vsx-registry-instance.adoc b/modules/administration-guide/partials/proc_selecting-an-open-vsx-registry-instance.adoc index 8ec51cb042..dc19da7492 100644 --- a/modules/administration-guide/partials/proc_selecting-an-open-vsx-registry-instance.adoc +++ b/modules/administration-guide/partials/proc_selecting-an-open-vsx-registry-instance.adoc @@ -24,8 +24,9 @@ spec: ---- <1> For example: `openVSXURL: "pass:c,a,q[https://open-vsx.org]"`. + -[TIP] -==== +[IMPORTANT] +==== +* Using link:https://open-vsx.org[https://open-vsx.org] with thousands of community-supported extensions is not recommended in an air-gapped environment, isolated from the internet. In order to reduce the risk of malware infections and unauthorized access to your code use the embedded or self-hosted Open VSX registry with the curated set of extensions. * To select the embedded Open VSX registry instance in the `plugin-registry` pod, use `openVSXURL: ''`. You can xref:adding-or-removing-extensions-in-the-embedded-open-vsx-registry-instance[customize the list of included extensions]. From 53de73e1c71ba141b2a59217ccf2e21dad0adf53 Mon Sep 17 00:00:00 2001 From: Ilya Buziuk Date: Wed, 4 Dec 2024 11:54:24 +0100 Subject: [PATCH 2/2] Update modules/administration-guide/partials/proc_selecting-an-open-vsx-registry-instance.adoc --- .../partials/proc_selecting-an-open-vsx-registry-instance.adoc | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/modules/administration-guide/partials/proc_selecting-an-open-vsx-registry-instance.adoc b/modules/administration-guide/partials/proc_selecting-an-open-vsx-registry-instance.adoc index dc19da7492..ce6c6cfa65 100644 --- a/modules/administration-guide/partials/proc_selecting-an-open-vsx-registry-instance.adoc +++ b/modules/administration-guide/partials/proc_selecting-an-open-vsx-registry-instance.adoc @@ -26,7 +26,7 @@ spec: + [IMPORTANT] ==== -* Using link:https://open-vsx.org[https://open-vsx.org] with thousands of community-supported extensions is not recommended in an air-gapped environment, isolated from the internet. In order to reduce the risk of malware infections and unauthorized access to your code use the embedded or self-hosted Open VSX registry with the curated set of extensions. +* Using link:https://open-vsx.org[https://open-vsx.org] is not recommended in an air-gapped environment, isolated from the internet. In order to reduce the risk of malware infections and unauthorized access to your code use the embedded or self-hosted Open VSX registry with the curated set of extensions. * To select the embedded Open VSX registry instance in the `plugin-registry` pod, use `openVSXURL: ''`. You can xref:adding-or-removing-extensions-in-the-embedded-open-vsx-registry-instance[customize the list of included extensions].