On a client machine, what directory (by default) contains sensitive credential information?

Thekubectlclient uses configuration from$HOME/.kube/configby default.

This file contains: cluster API server endpoint, user certificates, tokens, or kubeconfigs →sensitive credentials.

Exact extract (Kubernetes Docs – Configure Access to Clusters):

“By default, kubectl looks for a file named config in the $HOME/.kube directory. This file contains configuration information including user credentials.”

Other options clarified:

A: /etc/kubernetes/ exists on nodes (control plane) not client machines.

C: /opt/kubernetes/secrets/ is not a standard path.

D: $HOME/.config/kubernetes/ is not where kubeconfig is stored by default.