kubepug VS ketall

Agreed. The tooling around upgrades is painfully atrocious, and stuff like kubepug [1] should be part of the Kubernetes core.

[1] https://github.com/kubepug/kubepug

Not strictly related to security, but I find kubepug awesome when planning upgrades, especially if you need to jump across 2 or 3 major versions.

Also kubepug - https://github.com/rikatz/kubepug

References Kubepug net-forward Krew

Verify with a tool like kubepug, something like

kube-pug - is a plugin known as deprecations in krew. Every cluster needs to be upgraded sooner or later and at some point you will run into API deprecations and/or removals. Finding what's being deprecated can be long and error-prone process and this plugin tries to simplify that. All you need to do is run kubectl deprecations --k8s-version=v1.XX.X and you will get list of all the instances of API objects in cluster that will be deprecated or removed in the specified version.

Kubepug - Only checks whether the existing objects have any Deprecated ApiVersions

There's also ketall / kubectl get-all .

get-all is a krew plugin

That said, if two clusters are supposed to be identical, you can use ketall (https://github.com/corneliusweig/ketall) to dump all resources then diff them?

ketall - We all know that kubectl get all doesn't really give you all the resources. To really list all resources you can use ketall also known as get-all in krew. This plugin can just dump all the resources into your terminal as well as filter based on time, exclusions, label selectors or scopes (cluster or namespace).