Credential access
Reads kubeconfig, exec credentials, cluster tokens, and namespace context.
brew / couverture d'outils protégés / rang 114
Installer kubernetes-cli
Consultez les chemins d'installation, exécutables, métadonnées et notes de sécurité de kubernetes-cli pour les workflows d'agents IA.
agent safety
Agent safety answer
kubernetes-cli provides kubectl, which controls Kubernetes clusters and workloads.
Remote mutation
Can create, patch, delete, scale, and exec into cluster workloads.
Publish/artifact risk
Can apply manifests that deploy or expose application artifacts.
Recommended control
Gate kubectl apply, delete, patch, exec, port-forward, and context changes.
Agent-use guidance
Allow get/describe with safe contexts; require approval for cluster writes and secret reads.
installation
Installer avec Automic Vault
Automic Vault
sudo av install brew:kubernetes-climacOS
Homebrewverified · 100%
brew install kubernetes-clilocal Homebrew formula metadata
MacPortsverified · 94%
sudo port install kubectlMacPorts ports tree · sysutils/kubectl/Portfile · source: api.github.com
Linux
Alpine Linux apkverified · 92%
sudo apk add kubectlAlpine Linux edge package indexes · kubectl · source: dl-cdn.alpinelinux.org
Debian aptverified · 92%
sudo apt install kubectlDebian stable package indexes · kubectl · source: deb.debian.org
Nixverified · 92%
nix profile install nixpkgs#kubectlnixpkgs package indexes · pkgs/by-name/ku/kubectl/package.nix · source: api.github.com
Arch Linux pacmanverified · 92%
sudo pacman -S kubectlArch Linux sync databases · kubectl · source: geo.mirror.pkgbuild.com
Windows
Chocolateyverified · 92%
choco install kubernetes-cliChocolatey community package catalog · kubernetes-cli · source: community.chocolatey.org
Windows Package Managerverified · 92%
winget install --id Kubernetes.kubectl -eWindows Package Manager source index · Kubernetes.kubectl · source: cdn.winget.microsoft.com
Scoopverified · 92%
scoop install main/kubectlScoop official bucket manifest trees · bucket/kubectl.json · source: api.github.com
Source du gestionnaire de paquets
Notes de plateforme
- Aucune note de plateforme propre au paquet n'était présente.
aperçu
Résumé du paquet
Kubernetes command-line interface
Page d'accueil
Commandes et alias
- kubectl
couverture d'outils protégés
Plain Text Kubeconfig Secrets
`kubectl` reads kubeconfig files that commonly contain bearer tokens or embedded client private keys. Our isotope stores supported user credentials in the macOS keychain, rewrites kubeconfig user entries to Kubernetes exec credential plugins, and exposes credentials through `av credential-helper kubernetes` only while `kubectl` runs.
Risk classifier
orange risk · high confidence · infrastructure
Why
- cluster orchestration infrastructure
Signals
- override:kubernetes-cli
Install behavior
- No Homebrew post-install hook is recorded in formula metadata.
- Homebrew bottle metadata is available for 6 platform targets.
- Build metadata lists 3 build dependencies.
Extrait README local
kubernetes-cli Protected-tool coverage
kubectl reads kubeconfig files that commonly contain bearer tokens, passwords, client key paths, or embedded client key data.
This protected-tool coverage migrates the default kubeconfig into the Automic Vault keychain and rewrites supported user entries to Kubernetes exec credential plugins that call av credential-helper kubernetes. The wrapper provides a short-lived approval token while kubectl is running.
Caveats
- We currently migrate the default
~/.kube/configfile only. - Multi-file
KUBECONFIGsetups must be migrated manually. - Only bearer-token and embedded client-certificate user credentials are
migrated to the exec helper.
- Passwords, auth-provider refresh credentials, and client-key file paths must
be migrated manually.
- Kubeconfigs that rely entirely on exec auth plugins may not contain
migratable secrets.
Source: local coverage notes
Source de couverture
Extrait source
Caveats
- We currently migrate the default ~/.kube/config file only.
- Multi-file KUBECONFIG setups must be migrated manually.
- Passwords, auth-provider refresh credentials, and client-key file paths must be migrated manually.
- Exec-plugin-only kubeconfigs may not contain migratable secrets.
exécutables
Exécutables installés
| Commande | Type | Exposition | Note |
|---|---|---|---|
kubectl | cli | global executable |
fraîcheur
Version et fraîcheur
Ces signaux séparent l'âge de génération de la page, l'activité du gestionnaire de paquets et la comparaison avec les versions amont. Un retard de version n'est signalé que lorsqu'une URL de preuve et des versions comparables sont présentes.
page générée2026-06-10
version du gestionnaire1.36.1
gestionnaire mis à jour2026-05-12
données localesok
amontnot checked
dernière version détectéenot detected
https://github.com/kubernetes/kubernetes
- infoNo cached GitHub release or tag data was available.https://github.com/kubernetes/kubernetesnone confidence
métadonnées d'installation
Métadonnées du paquet
| Package key | brew:kubernetes-cli |
|---|---|
| Version | 1.36.1 |
| Package manager | Homebrew |
| Package manager page | https://formulae.brew.sh/formula/kubernetes-cli |
| Homepage | https://kubernetes.io/docs/reference/kubectl/ |
| Repository | https://github.com/kubernetes/kubernetes |
| Upstream docs | https://kubernetes.io/docs/reference/kubectl |
| License | Apache-2.0 |
| Source archive | https://github.com/kubernetes/kubernetes.git |
| Last updated | 2026-05-12T19:04:48Z |
| Pulse | updated |
| Build dependencies | bash, coreutils, go |
| Bottle | available (arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux) |
| Homebrew post-install | not defined |
| Service | none declared |
registry facts
Source database details
| Source Database | Homebrew formula API |
|---|---|
| Tap | homebrew/core |
| Full Name | kubernetes-cli |
| Aliases |
|
| Version Scheme | 0 |
| Revision | 0 |
| Head Version | HEAD |
| Bottle Stable Root URL | https://ghcr.io/v2/homebrew/core |
| Deprecated | no |
| Disabled | no |
| Keg Only | no |
| URL Keys |
|
source database matches
Other package-manager records
Matches are pulled from external package-manager indexes and kept separate from local Automic Vault package links.
Chocolatey95%
kubernetes-cli
choco install kubernetes-cli- normalized package name match
- Matched by: Kubernetes Cli
winget95%
Kubernetes.kubectl
winget install --id Kubernetes.kubectl -e- normalized package name match
- Matched by: Kubernetes Cli
MacPorts94%
kubectl
sudo port install kubectl- installed executable or alias match
- Matched by: Kubectl
Debian apt92%
kubectl 1.32.3+ds-2
Command-line tool for controlling Kubernetes clusters
sudo apt install kubectl- Section: admin
- Architecture: amd64
- Source Package: kubernetes
- 1 dependencies
- installed executable or alias match
- Matched by: Kubectl
Nix92%
kubectl
nix profile install nixpkgs#kubectl- installed executable or alias match
- Matched by: Kubectl
apk92%
kubectl 1.36.1-r0
Kubernetes - kubectl
sudo apk add kubectl- License: Apache-2.0
- Architecture: x86_64
- Source Package: kubernetes
- 1 provides
- installed executable or alias match
- Matched by: Kubectl
pacman92%
kubectl 1.36.1-1
A command line tool for communicating with a Kubernetes API server
sudo pacman -S kubectl- License: Apache-2.0
- Architecture: x86_64
- 1 dependencies
- installed executable or alias match
- Matched by: Kubectl
Scoop92%
main/kubectl
scoop install main/kubectl- installed executable or alias match
- Matched by: Kubectl
piste source
Généré depuis les données du dépôt
Cette page est servie par av-web depuis l'artéfact SQLite privé des paquets généré par scripts/generate-pkg-sqlite.py.
Sources utilisées
- Geiger risk classifier
- Nucleus package database
- av.db category and tag curation
- cross-ecosystem install command graph
- curated agent safety answer
- external package-manager database matches
- local coverage README
- package relationship graph
- package version freshness
- package-page enrichment
- secret-handling manifest