All Projects → aquasecurity → Kubectl Who Can

aquasecurity / Kubectl Who Can

Licence: apache-2.0
Show who has RBAC permissions to perform actions on different resources in Kubernetes

Programming Languages

go
31211 projects - #10 most used programming language

Projects that are alternatives of or similar to Kubectl Who Can

rbac-tool
Rapid7 | insightCloudSec | Kubernetes RBAC Power Toys - Visualize, Analyze, Generate & Query
Stars: ✭ 546 (+26.39%)
Mutual labels:  rbac, kubectl
Rakkess
Review Access - kubectl plugin to show an access matrix for k8s server resources
Stars: ✭ 751 (+73.84%)
Mutual labels:  rbac, kubectl
Kubetap
Kubectl plugin to interactively proxy Kubernetes Services with ease
Stars: ✭ 297 (-31.25%)
Mutual labels:  kubectl
3yadmin
基于react全家桶+antd构建的专注通用权限控制与表单的后台管理系统模板
Stars: ✭ 381 (-11.81%)
Mutual labels:  rbac
Php Practice
🌹 一天一点点,积少成多...
Stars: ✭ 351 (-18.75%)
Mutual labels:  rbac
Kubectl Fzf
A fast kubectl autocompletion with fzf
Stars: ✭ 315 (-27.08%)
Mutual labels:  kubectl
Krew
📦 Find and install kubectl plugins
Stars: ✭ 4,354 (+907.87%)
Mutual labels:  kubectl
Awesome Kubectl Plugins
Curated list of kubectl plugins
Stars: ✭ 279 (-35.42%)
Mutual labels:  kubectl
Defender
Roles & Permissions for Laravel 8 / 7 / 6 / 5
Stars: ✭ 403 (-6.71%)
Mutual labels:  rbac
Dokit
基于 Spring Boot2、 Jpa、 Spring Security、JWT、redis、Vue的前后端分离的后台管理系统开发平台, 用户管理、菜单管理、角色管理、字典管理、权限控制的方式为RBAC,操作日志、异常日志、接口限流、项目支持数据权限管理,支持一键生成前后端代码(支持在线预览及打包下载),支持前端菜单动态路由 可一键部署服务器应用,数据库。系统中活跃用户状态监控,监视当前系统CPU、内存、磁盘、堆栈等相关信息,基于Element UI在线表单设计及生成Vue代码。
Stars: ✭ 348 (-19.44%)
Mutual labels:  rbac
Casbin Rs
An authorization library that supports access control models like ACL, RBAC, ABAC in Rust.
Stars: ✭ 375 (-13.19%)
Mutual labels:  rbac
Kubectl Plugins
A Collection of Plugins for kubectl Integration (exec as any user, context switching, etc).
Stars: ✭ 340 (-21.3%)
Mutual labels:  kubectl
Flask Appbuilder
Simple and rapid application development framework, built on top of Flask. includes detailed security, auto CRUD generation for your models, google charts and much more. Demo (login with guest/welcome) - http://flaskappbuilder.pythonanywhere.com/
Stars: ✭ 3,603 (+734.03%)
Mutual labels:  rbac
Kubecolor
colorizes kubectl output
Stars: ✭ 363 (-15.97%)
Mutual labels:  kubectl
Go Admin
go web api,包含gin+gorm+jwt+rbac等。
Stars: ✭ 298 (-31.02%)
Mutual labels:  rbac
Fubectl
Reduces repetitive interactions with kubectl
Stars: ✭ 370 (-14.35%)
Mutual labels:  kubectl
Rback
RBAC in Kubernetes visualizer
Stars: ✭ 285 (-34.03%)
Mutual labels:  rbac
Zsh Kubectl Prompt
Display information about the kubectl current context and namespace in zsh prompt.
Stars: ✭ 342 (-20.83%)
Mutual labels:  kubectl
Rak8s
Stand up a Raspberry Pi based Kubernetes cluster with Ansible
Stars: ✭ 354 (-18.06%)
Mutual labels:  kubectl
D2 Admin Pm
基于 d2-admin的RBAC权限管理解决方案
Stars: ✭ 409 (-5.32%)
Mutual labels:  rbac

GitHub Release GitHub Action Coverage Status Go Report Card License GitHub All Releases

kubectl-who-can

Shows which subjects have RBAC permissions to VERB [TYPE | TYPE/NAME | NONRESOURCEURL] in Kubernetes.

asciicast

Installation

There are several ways to install kubectl-who-can. The recommended installation is via the kubectl plugin manager called krew.

krew

I assume that you've already installed krew. Then run the following command:

kubectl krew install who-can

The plugin will be available as kubectl who-can.

Manual

Download a release distribution archive for your operating system, extract it, and add the kubectl-who-can executable to your $PATH. For example, to manually install kubectl-who-can on macOS run the following command:

VERSION=`git describe --abbrev=0`

mkdir -p /tmp/who-can/$VERSION && \
curl -L https://github.com/aquasecurity/kubectl-who-can/releases/download/$VERSION/kubectl-who-can_darwin_x86_64.tar.gz \
  | tar xz -C /tmp/who-can/$VERSION && \
sudo mv -i /tmp/who-can/$VERSION/kubectl-who-can /usr/local/bin

Build from Source

This is a standard Go program. If you already know how to build and install Go code, you probably won't need these instructions.

Note that while the code is small, it has some rather big dependencies, and fetching + building these dependencies can take a few minutes.

Option 1 (if you have a Go compiler and want to tweak the code):

# Clone this repository (or your fork)
git clone https://github.com/aquasecurity/kubectl-who-can
cd kubectl-who-can
make

The kubectl-who-can binary will be in the current directory.

Option 2 (if you have a Go compiler and just want the binary):

go get -v github.com/aquasecurity/kubectl-who-can/cmd/kubectl-who-can

The kubectl-who-can binary will be in $GOPATH/bin.

Option 3 (if you don't have a Go compiler, but have Docker installed):

docker run --rm -v /usr/local/bin:/go/bin golang go get -v github.com/aquasecurity/kubectl-who-can/cmd/kubectl-who-can

The kubectl-who-can binary will be in /usr/local/bin.

Usage

$ kubectl who-can VERB (TYPE | TYPE/NAME | NONRESOURCEURL) [flags]

Flags

Name Shorthand Default Usage
namespace n If present, the namespace scope for this CLI request
all-namespaces A false If true, check for users that can do the specified action in any of the available namespaces
subresource Specify a sub-resource such as pod/log or deployment/scale

For additional details on flags and usage, run kubectl who-can --help.

Note that the project description data, including the texts, logos, images, and/or trademarks, for each open source project belongs to its rightful owner. If you wish to add or remove any projects, please contact us at [email protected].