toolnetes
Collection of miscellaneous helper tools.
Tools
(those with
๐ Speed up workflow
- kubectx + kubens (๐ฆctx + ns) - switch between clusters and namespaces
- kube-fzf - findpod/tailpod/execpod/describepod with the power of fzf
- stern - Multi pod and container log tailing for K8s (with regex support)
- kubectl-neat (๐ฆneat) - remove clutter from K8s manifests to make them more readable
- kubeconform - fast K8s manifests validation tool
- kubefwd - bulk port forwarding k8s services for local dev
- kube-ps1 - K8s prompt for bash & zsh
- fish-kube-prompt - K8s prompt for fish (Use together with Fish auto completion)
- kubectl aliases - check the '#KUBERNETES' section
โ๏ธ Cluster resources
- kube-capacity (
๐ฆ resource-capacity) - provide an overview of the resource requests/limits - kubectl-view-utilization (
๐ฆ view-utilization) - show cluster CPU and Memory requests utilization - kubectl-df-pv (๐ฆdf-pv) - check capacity for all PVCs
๐ Secrets
- kubectl-view-secret (
๐ฆ view-secret) - easy secret decoding tool - k8s-unused-secret-detector - Detect unused K8s Secrets
๐ก RBAC
- rakkess (
๐ฆ access-matrix) - shows an access matrix - kubectl-who-can (๐ฆwho-can) - shows which subjects have specific RBAC permissions
- rbac-lookup (
๐ฆ rbac-lookup) - find k8s roles and cluster roles
๐ Evaluate cluster
- pluto & kubent - utilities to find deprecated Kubernetes apiVersions
- popeye (
๐ฆ popeye) - k8s cluster resource sanitizer - sonobuoy - k8s diagnostic tool
- kubescape - testing if Kubernetes is deployed securely as defined in Kubernetes Hardening Guidance by NSA
- kubecost - give you visibility into current and historical K8s spend and resource allocation