{
  "slug": "kubectl-diff-adds-show-secret-flag-bac4e0676b16",
  "title": "kubectl diff adds show-secret flag",
  "tools": [
    "kubectl"
  ],
  "tags": [
    "agent"
  ],
  "introduced_at": "2026-04-22T17:57:14.000Z",
  "announced_at": "2026-04-22T17:57:14.000Z",
  "effective_at": null,
  "date_basis": "source-publication",
  "status": "unknown",
  "how": {
    "incantation": "When reviewing a diff that must display Secret values, run `kubectl diff` with `--show-secrets` and a manifest path. The v1.36 source uses the plural flag; the release note uses the singular form.",
    "examples": [
      "kubectl diff --show-secrets -f <manifest>"
    ],
    "gotchas": [
      "Version: v1.36.0",
      "--show-secrets: Boolean flag; when true, do not mask Secret values in the diff. Defaults to false.",
      "-f, --filename <manifest> (required): Filename, directory, or URL containing configuration to diff.",
      "The flag explicitly allows secret values to be displayed during the diff operation.",
      "Docs conflict: Release note and card say `show-secret`; v1.36 source and current generated docs document `--show-secrets` (plural)."
    ]
  },
  "why_it_matters": "Review a diff that includes Kubernetes Secret values.",
  "sources": [
    "https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.36.md#v1360",
    "https://github.com/kubernetes/kubernetes/blob/release-1.36/staging/src/k8s.io/kubectl/pkg/cmd/diff/diff.go",
    "https://kubernetes.io/docs/reference/kubectl/generated/kubectl_diff/"
  ],
  "rank": 0.93019,
  "judge": {
    "publish": true,
    "judge_model": "codex-cli/gpt-6-luna+typesafe/jev-1.13.0",
    "prompt_version": "extract-v7+enrich-v2+judge-v2x3+jev-publish-v1"
  },
  "review_state": "approved",
  "provenance": {
    "run_id": "wave1b-tools-20261017",
    "verdict_id": "wave1b-tools-20261017:wave1b-tools-20261017-4f840f45e2d1b226-2:gate",
    "evidence_hash": "5f6f4f0ea9c5d0dbb88842a86abf0003f9ce84690d76320038b4b0856865ba9e"
  },
  "review": {
    "draft_hash": "2c2ed7c127105dc08c71592f19ee0ceedc068c5b924fad855636ce41f8d63025",
    "reviewer": "publication-gate",
    "reviewed_at": "2026-10-07T00:00:00.000Z",
    "decision": "wave1b-tools-20261017:gate",
    "reason": "3 of 3 judge runs approved with p_yes >= 0.9 (mean 0.93 >= 0.9; 2 needed) and Jev gave 0.64 (>= 0.6 needed)."
  }
}