rbac-lookup
Easily find roles and cluster roles attached to any user, service account, or group name in your Kubernetes cluster (by FairwindsOps)
kubectl-kubesec
Security risk analysis for Kubernetes resources (by controlplaneio)
| rbac-lookup | kubectl-kubesec | |
|---|---|---|
| 3 | 2 | |
| 838 | 500 | |
| 1.2% | 0.2% | |
| 3.7 | 5.9 | |
| 8 days ago | 4 months ago | |
| Go | Go | |
| Apache License 2.0 | Apache License 2.0 |
The number of mentions indicates the total number of mentions that we've tracked plus the number of user suggested alternatives.
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
rbac-lookup
Posts with mentions or reviews of rbac-lookup.
We have used some of these posts to build our list of alternatives
and similar projects. The last one was on 2022-03-15.
-
Is there a way to see exactly what permissions the built-in group "system:readonly" has?
try using a tool such as rbac-lookup to find roles attached to a principal name https://github.com/FairwindsOps/rbac-lookup
-
Kubernetes Hardening Tutorial Part 3: Authn, Authz, Logging & Auditing
RBAC Lookup is a CLI that allows you to easily find Kubernetes roles and cluster roles bound to any user, service account, or group name. It helps to provide visibility into Kubernetes auth.
-
Making Kubernetes Operations Easy with kubectl Plugins
rbac-lookup - Similar to the first plugin we mentioned, this plugin also helps with RBAC in your cluster. This can be used to perform reverse lookup of roles, giving you a list of roles that user, service account or group has assigned. For example, to find roles bound to service account named my-sa you use the following - kubectl rbac-lookup my-sa --kind serviceaccount --output wide.
kubectl-kubesec
Posts with mentions or reviews of kubectl-kubesec.
We have used some of these posts to build our list of alternatives
and similar projects. The last one was on 2021-10-08.
-
Looking for the simplest way to store secrets
It depends what level of security you need. As far as simple goes: https://kubesec.io/
-
Making Kubernetes Operations Easy with kubectl Plugins
kubesec - known as kubesec-scan in krew is plugin for scanning resources with https://kubesec.io/ scanner. When you run this plugin against your manifests, it will tell you recommended changes to improve security of your workloads. To view all rules that the scanner uses visit the above website.
What are some alternatives?
When comparing rbac-lookup and kubectl-kubesec you can also consider the following projects:
rbac-manager - A Kubernetes operator that simplifies the management of Role Bindings and Service Accounts.
kubelogin - kubectl plugin for Kubernetes OpenID Connect authentication (kubectl oidc-login)
k9s - 🐶 Kubernetes CLI To Manage Your Clusters In Style!
kube-capacity - A simple CLI that provides an overview of the resource requests, limits, and utilization in a Kubernetes cluster
rakkess - Review Access - kubectl plugin to show an access matrix for k8s server resources
kubectl-neat - Clean up Kubernetes yaml and json output to make it readable
kubectl-dig - Deep kubernetes visibility from the kubectl
ksniff - Kubectl plugin to ease sniffing on kubernetes pods using tcpdump and wireshark
rbac-lookup vs rbac-manager
kubectl-kubesec vs kubelogin
rbac-lookup vs k9s
kubectl-kubesec vs kube-capacity
rbac-lookup vs rakkess
kubectl-kubesec vs kubectl-neat
rbac-lookup vs kubectl-dig
kubectl-kubesec vs rakkess
rbac-lookup vs kubelogin
kubectl-kubesec vs k9s
rbac-lookup vs ksniff
kubectl-kubesec vs kubectl-dig