rbac-lookup
kubepug
rbac-lookup | kubepug | |
---|---|---|
3 | 9 | |
838 | 1,363 | |
1.2% | 1.0% | |
3.7 | 8.5 | |
9 days ago | 10 days ago | |
Go | Go | |
Apache License 2.0 | Apache License 2.0 |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
rbac-lookup
-
Is there a way to see exactly what permissions the built-in group "system:readonly" has?
try using a tool such as rbac-lookup to find roles attached to a principal name https://github.com/FairwindsOps/rbac-lookup
-
Kubernetes Hardening Tutorial Part 3: Authn, Authz, Logging & Auditing
RBAC Lookup is a CLI that allows you to easily find Kubernetes roles and cluster roles bound to any user, service account, or group name. It helps to provide visibility into Kubernetes auth.
-
Making Kubernetes Operations Easy with kubectl Plugins
rbac-lookup - Similar to the first plugin we mentioned, this plugin also helps with RBAC in your cluster. This can be used to perform reverse lookup of roles, giving you a list of roles that user, service account or group has assigned. For example, to find roles bound to service account named my-sa you use the following - kubectl rbac-lookup my-sa --kind serviceaccount --output wide.
kubepug
-
New IBM LinuxONE 4 Express – Rack-mounted pre-configured Linux mainframe
Agreed. The tooling around upgrades is painfully atrocious, and stuff like kubepug [1] should be part of the Kubernetes core.
[1] https://github.com/kubepug/kubepug
-
Top 15 Kubectl plugins for security engineers
Not strictly related to security, but I find kubepug awesome when planning upgrades, especially if you need to jump across 2 or 3 major versions.
- Kubernetes upgrade
-
Kubernetes 1.21 - Going EOL on major cloud providers in early 2023
Also kubepug - https://github.com/rikatz/kubepug
-
Essential plugins for Kubectl CLI
References Kubepug net-forward Krew
-
How do you verify all of your resources and manifests support before upgrading a Kubernetes version?
Verify with a tool like kubepug, something like
- rikatz/kubepug: Kubernetes PreUpGrade (Checker)
-
Making Kubernetes Operations Easy with kubectl Plugins
kube-pug - is a plugin known as deprecations in krew. Every cluster needs to be upgraded sooner or later and at some point you will run into API deprecations and/or removals. Finding what's being deprecated can be long and error-prone process and this plugin tries to simplify that. All you need to do is run kubectl deprecations --k8s-version=v1.XX.X and you will get list of all the instances of API objects in cluster that will be deprecated or removed in the specified version.
-
SilverSurfer - An OpenSource project to check ApiVersion Status and provide Migration path for Kubernetes objects when upgrading Kubernetes to 1.22 or any other.
Kubepug - Only checks whether the existing objects have any Deprecated ApiVersions
What are some alternatives?
rbac-manager - A Kubernetes operator that simplifies the management of Role Bindings and Service Accounts.
kube-no-trouble - Easily check your clusters for use of deprecated APIs
k9s - 🐶 Kubernetes CLI To Manage Your Clusters In Style!
ksniff - Kubectl plugin to ease sniffing on kubernetes pods using tcpdump and wireshark
kubectl-kubesec - Security risk analysis for Kubernetes resources
kubeval - Validate your Kubernetes configuration files, supports multiple Kubernetes versions
rakkess - Review Access - kubectl plugin to show an access matrix for k8s server resources
ketall - Like `kubectl get all`, but get really all resources
kubectl-dig - Deep kubernetes visibility from the kubectl
kubectx - Faster way to switch between clusters and namespaces in kubectl
kubelogin - kubectl plugin for Kubernetes OpenID Connect authentication (kubectl oidc-login)
silver-surfer - Kubernetes objects api-version compatibility checker and provides migration path for K8s objects and prepare it for cluster upgrades