set -euo pipefail (i.e. add -u) catches typo'd env-var reads. Would need [ -z "${DEBUG:-}" ] on line 2 and [ -z "${KUBECONFIG:-}" ] on line 11 to coexist with set -u, since the current [ -z "$VAR" ] form errors on unset variables under -u.

With KUBECONFIG="$CONFTEMP:$KUBECONFIG", the merge picks up current-context from CONFTEMP — so importing flips the operator's active context to whatever the imported file pointed at. That's the right semantic for "import + start using this cluster" but it'll surprise an operator who just wanted to add the entry without disturbing their current workflow. Worth a one-line # note: current-context becomes whatever CONFTEMP set comment so the behaviour is documented at the call site.