Credential access
Reads kubeconfig, exec credentials, cluster tokens, and namespace context.
brew / Protected-Tool-Abdeckung / Rang 114
kubernetes-cli installieren
Prüfe Installationswege, Executables, Metadaten und Sicherheitshinweise für kubernetes-cli in AI-Agent-Workflows.
agent safety
Agent safety answer
kubernetes-cli provides kubectl, which controls Kubernetes clusters and workloads.
Remote mutation
Can create, patch, delete, scale, and exec into cluster workloads.
Publish/artifact risk
Can apply manifests that deploy or expose application artifacts.
Recommended control
Gate kubectl apply, delete, patch, exec, port-forward, and context changes.
Agent-use guidance
Allow get/describe with safe contexts; require approval for cluster writes and secret reads.
Installation
Mit Automic Vault installieren
Automic Vault
sudo av install brew:kubernetes-climacOS
Homebrewverified · 100%
brew install kubernetes-clilocal Homebrew formula metadata
MacPortsverified · 94%
sudo port install kubectlMacPorts ports tree · sysutils/kubectl/Portfile · source: api.github.com
Linux
Alpine Linux apkverified · 92%
sudo apk add kubectlAlpine Linux edge package indexes · kubectl · source: dl-cdn.alpinelinux.org
Debian aptverified · 92%
sudo apt install kubectlDebian stable package indexes · kubectl · source: deb.debian.org
Nixverified · 92%
nix profile install nixpkgs#kubectlnixpkgs package indexes · pkgs/by-name/ku/kubectl/package.nix · source: api.github.com
Arch Linux pacmanverified · 92%
sudo pacman -S kubectlArch Linux sync databases · kubectl · source: geo.mirror.pkgbuild.com
Windows
Chocolateyverified · 92%
choco install kubernetes-cliChocolatey community package catalog · kubernetes-cli · source: community.chocolatey.org
Windows Package Managerverified · 92%
winget install --id Kubernetes.kubectl -eWindows Package Manager source index · Kubernetes.kubectl · source: cdn.winget.microsoft.com
Scoopverified · 92%
scoop install main/kubectlScoop official bucket manifest trees · bucket/kubectl.json · source: api.github.com
Paketmanager-Quelle
Plattformhinweise
- Es waren keine paketspezifischen Plattformhinweise vorhanden.
Überblick
Paketzusammenfassung
Kubernetes command-line interface
Homepage
Befehle und Aliase
- kubectl
Protected-Tool-Abdeckung
Plain Text Kubeconfig Secrets
`kubectl` reads kubeconfig files that commonly contain bearer tokens or embedded client private keys. Our isotope stores supported user credentials in the macOS keychain, rewrites kubeconfig user entries to Kubernetes exec credential plugins, and exposes credentials through `av credential-helper kubernetes` only while `kubectl` runs.
Risk classifier
orange risk · high confidence · infrastructure
Why
- cluster orchestration infrastructure
Signals
- override:kubernetes-cli
Install behavior
- No Homebrew post-install hook is recorded in formula metadata.
- Homebrew bottle metadata is available for 6 platform targets.
- Build metadata lists 3 build dependencies.
Lokaler README-Auszug
kubernetes-cli Protected-tool coverage
kubectl reads kubeconfig files that commonly contain bearer tokens, passwords, client key paths, or embedded client key data.
This protected-tool coverage migrates the default kubeconfig into the Automic Vault keychain and rewrites supported user entries to Kubernetes exec credential plugins that call av credential-helper kubernetes. The wrapper provides a short-lived approval token while kubectl is running.
Caveats
- We currently migrate the default
~/.kube/configfile only. - Multi-file
KUBECONFIGsetups must be migrated manually. - Only bearer-token and embedded client-certificate user credentials are
migrated to the exec helper.
- Passwords, auth-provider refresh credentials, and client-key file paths must
be migrated manually.
- Kubeconfigs that rely entirely on exec auth plugins may not contain
migratable secrets.
Quelle: local coverage notes
Quelle der Abdeckung
Quellauszug
Caveats
- We currently migrate the default ~/.kube/config file only.
- Multi-file KUBECONFIG setups must be migrated manually.
- Passwords, auth-provider refresh credentials, and client-key file paths must be migrated manually.
- Exec-plugin-only kubeconfigs may not contain migratable secrets.
Executables
Installierte Executables
| Befehl | Art | Sichtbarkeit | Hinweis |
|---|---|---|---|
kubectl | cli | global executable |
Aktualität
Version und Aktualität
Diese Signale trennen das Alter der Seitengenerierung, Aktivität des Paketmanagers und Upstream-Release-Vergleich. Versionsrückstand wird nur gemeldet, wenn eine Evidenz-URL und vergleichbare Versionen vorhanden sind.
Seite generiert2026-06-10
Manager-Version1.36.1
Manager aktualisiert2026-05-12
lokale Datenok
Upstreamnot checked
neueste erkannte Versionnot detected
https://github.com/kubernetes/kubernetes
- infoNo cached GitHub release or tag data was available.https://github.com/kubernetes/kubernetesnone confidence
Installationsmetadaten
Paketmetadaten
| Package key | brew:kubernetes-cli |
|---|---|
| Version | 1.36.1 |
| Package manager | Homebrew |
| Package manager page | https://formulae.brew.sh/formula/kubernetes-cli |
| Homepage | https://kubernetes.io/docs/reference/kubectl/ |
| Repository | https://github.com/kubernetes/kubernetes |
| Upstream docs | https://kubernetes.io/docs/reference/kubectl |
| License | Apache-2.0 |
| Source archive | https://github.com/kubernetes/kubernetes.git |
| Last updated | 2026-05-12T19:04:48Z |
| Pulse | updated |
| Build dependencies | bash, coreutils, go |
| Bottle | available (arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux) |
| Homebrew post-install | not defined |
| Service | none declared |
registry facts
Source database details
| Source Database | Homebrew formula API |
|---|---|
| Tap | homebrew/core |
| Full Name | kubernetes-cli |
| Aliases |
|
| Version Scheme | 0 |
| Revision | 0 |
| Head Version | HEAD |
| Bottle Stable Root URL | https://ghcr.io/v2/homebrew/core |
| Deprecated | no |
| Disabled | no |
| Keg Only | no |
| URL Keys |
|
source database matches
Other package-manager records
Matches are pulled from external package-manager indexes and kept separate from local Automic Vault package links.
Chocolatey95%
kubernetes-cli
choco install kubernetes-cli- normalized package name match
- Matched by: Kubernetes Cli
winget95%
Kubernetes.kubectl
winget install --id Kubernetes.kubectl -e- normalized package name match
- Matched by: Kubernetes Cli
MacPorts94%
kubectl
sudo port install kubectl- installed executable or alias match
- Matched by: Kubectl
Debian apt92%
kubectl 1.32.3+ds-2
Command-line tool for controlling Kubernetes clusters
sudo apt install kubectl- Section: admin
- Architecture: amd64
- Source Package: kubernetes
- 1 dependencies
- installed executable or alias match
- Matched by: Kubectl
Nix92%
kubectl
nix profile install nixpkgs#kubectl- installed executable or alias match
- Matched by: Kubectl
apk92%
kubectl 1.36.1-r0
Kubernetes - kubectl
sudo apk add kubectl- License: Apache-2.0
- Architecture: x86_64
- Source Package: kubernetes
- 1 provides
- installed executable or alias match
- Matched by: Kubectl
pacman92%
kubectl 1.36.1-1
A command line tool for communicating with a Kubernetes API server
sudo pacman -S kubectl- License: Apache-2.0
- Architecture: x86_64
- 1 dependencies
- installed executable or alias match
- Matched by: Kubectl
Scoop92%
main/kubectl
scoop install main/kubectl- installed executable or alias match
- Matched by: Kubectl
Quellspur
Aus Repository-Daten generiert
Diese Seite wird von av-web aus dem privaten Paket-SQLite-Artefakt bereitgestellt, das scripts/generate-pkg-sqlite.py erstellt.
Verwendete Quellen
- Geiger risk classifier
- Nucleus package database
- av.db category and tag curation
- cross-ecosystem install command graph
- curated agent safety answer
- external package-manager database matches
- local coverage README
- package relationship graph
- package version freshness
- package-page enrichment
- secret-handling manifest