KUBERNETES LEAST PRIVILEGE IMPLEMENTATION USING THE GOOGLE CLOUD AS AN EXAMPLE

• kubectl-sudo

  2 160 0.0 Shell

  Run kubernetes commands with the security privileges of another user

  

With the kubectl-sudo plugin, kubectl commands that require more extensive rights can be executed explicitly as a member of the admin group. This reduces the chance of accidentally modifying or deleting resources on the cluster, for example when running scripts or being in the wrong namespace.

• helm-sudo

  1 14 3.2 Shell

  A Helm plugin for running commands with the security privileges of another user

  

In the Kubernetes environment, Helm charts are very important. So, to be able to use the functionality for Helm as well, we have developed a corresponding plugin that can be used analogously to kubectl-sudo. Analogous to the usage of the kubectl-sudo plugin, here is an example for the helm plugin helm sudo list.

• WorkOS

  workos.com sponsored

  The modern identity platform for B2B SaaS. The APIs are flexible and easy-to-use, supporting authentication, user identity, and complex enterprise features like SSO and SCIM provisioning.

  

• sudo-kubeconfig

  1 6 0.0 Shell

  Create a sudo kubeconfig for your current kubernetes context

  

To create a sudo context this script is available: wget -P /tmp/ "https://raw.githubusercontent.com/cloudogu/sudo-kubeconfig/0.1.0/create-sudo-kubeconfig.sh" With it, only these steps are necessary to interactively create a kubeconfig for the currently selected context:

Suggest a related project