Automic VaultAutomic Vault

brew / 保護ツール対応 / 順位 114

kubernetes-cli をインストール

kubernetes-cli のインストール経路、実行ファイル、メタデータ、AI エージェント向けセキュリティノートを確認します。

インストールコマンドセキュリティノート

agent safety

Agent safety answer

kubernetes-cli provides kubectl, which controls Kubernetes clusters and workloads.

Credential access

Reads kubeconfig, exec credentials, cluster tokens, and namespace context.

Remote mutation

Can create, patch, delete, scale, and exec into cluster workloads.

Publish/artifact risk

Can apply manifests that deploy or expose application artifacts.

Recommended control

Gate kubectl apply, delete, patch, exec, port-forward, and context changes.

Agent-use guidance

Allow get/describe with safe contexts; require approval for cluster writes and secret reads.

インストール

Automic Vault でインストール

Automic Vault
AV をダウンロード
sudo av install brew:kubernetes-cli

macOS

Homebrewverified · 100%
brew install kubernetes-cli

local Homebrew formula metadata

MacPortsverified · 94%
sudo port install kubectl

MacPorts ports tree · sysutils/kubectl/Portfile · source: api.github.com

Linux

Alpine Linux apkverified · 92%
sudo apk add kubectl

Alpine Linux edge package indexes · kubectl · source: dl-cdn.alpinelinux.org

Debian aptverified · 92%
sudo apt install kubectl

Debian stable package indexes · kubectl · source: deb.debian.org

Nixverified · 92%
nix profile install nixpkgs#kubectl

nixpkgs package indexes · pkgs/by-name/ku/kubectl/package.nix · source: api.github.com

Arch Linux pacmanverified · 92%
sudo pacman -S kubectl

Arch Linux sync databases · kubectl · source: geo.mirror.pkgbuild.com

Windows

Chocolateyverified · 92%
choco install kubernetes-cli

Chocolatey community package catalog · kubernetes-cli · source: community.chocolatey.org

Windows Package Managerverified · 92%
winget install --id Kubernetes.kubectl -e

Windows Package Manager source index · Kubernetes.kubectl · source: cdn.winget.microsoft.com

Scoopverified · 92%
scoop install main/kubectl

Scoop official bucket manifest trees · bucket/kubectl.json · source: api.github.com

プラットフォームノート

  • パッケージ固有のプラットフォームノートはありません。

概要

パッケージ概要

Kubernetes command-line interface

コマンドとエイリアス

  • kubectl

保護ツール対応

Plain Text Kubeconfig Secrets

`kubectl` reads kubeconfig files that commonly contain bearer tokens or embedded client private keys. Our isotope stores supported user credentials in the macOS keychain, rewrites kubeconfig user entries to Kubernetes exec credential plugins, and exposes credentials through `av credential-helper kubernetes` only while `kubectl` runs.

Risk classifier

orange risk · high confidence · infrastructure

Why

  • cluster orchestration infrastructure

Signals

  • override:kubernetes-cli

Install behavior

  • No Homebrew post-install hook is recorded in formula metadata.
  • Homebrew bottle metadata is available for 6 platform targets.
  • Build metadata lists 3 build dependencies.

ローカル README 抜粋

kubernetes-cli Protected-tool coverage

kubectl reads kubeconfig files that commonly contain bearer tokens, passwords, client key paths, or embedded client key data.

This protected-tool coverage migrates the default kubeconfig into the Automic Vault keychain and rewrites supported user entries to Kubernetes exec credential plugins that call av credential-helper kubernetes. The wrapper provides a short-lived approval token while kubectl is running.

Caveats

  • We currently migrate the default ~/.kube/config file only.
  • Multi-file KUBECONFIG setups must be migrated manually.
  • Only bearer-token and embedded client-certificate user credentials are

migrated to the exec helper.

  • Passwords, auth-provider refresh credentials, and client-key file paths must

be migrated manually.

  • Kubeconfigs that rely entirely on exec auth plugins may not contain

migratable secrets.

ソース: local coverage notes

カバレッジソース

ソース抜粋

Caveats

  • We currently migrate the default ~/.kube/config file only.
  • Multi-file KUBECONFIG setups must be migrated manually.
  • Passwords, auth-provider refresh credentials, and client-key file paths must be migrated manually.
  • Exec-plugin-only kubeconfigs may not contain migratable secrets.

実行可能ファイル

インストールされる実行可能ファイル

コマンド種類公開範囲メモ
kubectlcliglobal executable

鮮度

バージョンと鮮度

これらの信号は、ページ生成時期、パッケージマネージャの活動、上流リリース比較を分けて示します。バージョン遅れは、証拠 URL と比較可能なバージョンがある場合だけ警告されます。

ページ生成日2026-06-10
マネージャ版1.36.1
マネージャ更新日2026-05-12
ローカルデータok
上流not checked
検出された最新not detected

https://github.com/kubernetes/kubernetes

インストールメタデータ

パッケージメタデータ

Package keybrew:kubernetes-cli
Version1.36.1
Package managerHomebrew
Package manager pagehttps://formulae.brew.sh/formula/kubernetes-cli
Homepagehttps://kubernetes.io/docs/reference/kubectl/
Repositoryhttps://github.com/kubernetes/kubernetes
Upstream docshttps://kubernetes.io/docs/reference/kubectl
LicenseApache-2.0
Source archivehttps://github.com/kubernetes/kubernetes.git
Last updated2026-05-12T19:04:48Z
Pulseupdated
Build dependenciesbash, coreutils, go
Bottleavailable (arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux)
Homebrew post-installnot defined
Servicenone declared

registry facts

Source database details

Source DatabaseHomebrew formula API
Taphomebrew/core
Full Namekubernetes-cli
Aliases
  • kubectl
  • kubernetes-cli@1.36
Version Scheme0
Revision0
Head VersionHEAD
Bottle Stable Root URLhttps://ghcr.io/v2/homebrew/core
Deprecatedno
Disabledno
Keg Onlyno
URL Keys
  • head
  • stable

source database matches

Other package-manager records

Matches are pulled from external package-manager indexes and kept separate from local Automic Vault package links.

Chocolatey95%

kubernetes-cli

choco install kubernetes-cli
  • normalized package name match
  • Matched by: Kubernetes Cli
Chocolatey community package catalog · community.chocolatey.org · Chocolatey community package catalog: kubernetes-cli from http://community.chocolatey.org/api/v2/Packages?$filter=IsLatestVersion&$select=Id&$top=1000&$skiptoken='11','kubectx'
winget95%

Kubernetes.kubectl

winget install --id Kubernetes.kubectl -e
  • normalized package name match
  • Matched by: Kubernetes Cli
Windows Package Manager source index · cdn.winget.microsoft.com · Windows Package Manager source index: Kubernetes.kubectl from https://cdn.winget.microsoft.com/cache/source.msix
MacPorts94%

kubectl

sudo port install kubectl
  • installed executable or alias match
  • Matched by: Kubectl
MacPorts ports tree · api.github.com · MacPorts ports tree: sysutils/kubectl/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1
Debian apt92%

kubectl 1.32.3+ds-2

Command-line tool for controlling Kubernetes clusters

https://kubernetes.io/

sudo apt install kubectl
  • Section: admin
  • Architecture: amd64
  • Source Package: kubernetes
  • 1 dependencies
  • installed executable or alias match
  • Matched by: Kubectl
Debian stable package indexes · deb.debian.org · Debian stable package indexes: kubectl from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz
Nix92%

kubectl

nix profile install nixpkgs#kubectl
  • installed executable or alias match
  • Matched by: Kubectl
nixpkgs package indexes · api.github.com · nixpkgs package indexes: pkgs/by-name/ku/kubectl/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1
apk92%

kubectl 1.36.1-r0

Kubernetes - kubectl

https://kubernetes.io/

sudo apk add kubectl
  • License: Apache-2.0
  • Architecture: x86_64
  • Source Package: kubernetes
  • 1 provides
  • installed executable or alias match
  • Matched by: Kubectl
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: kubectl from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz
pacman92%

kubectl 1.36.1-1

A command line tool for communicating with a Kubernetes API server

https://kubernetes.io/

sudo pacman -S kubectl
  • License: Apache-2.0
  • Architecture: x86_64
  • 1 dependencies
  • installed executable or alias match
  • Matched by: Kubectl
Arch Linux sync databases · geo.mirror.pkgbuild.com · Arch Linux sync databases: kubectl from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz
Scoop92%

main/kubectl

scoop install main/kubectl
  • installed executable or alias match
  • Matched by: Kubectl
Scoop official bucket manifest trees · api.github.com · Scoop official bucket manifest trees: bucket/kubectl.json from https://api.github.com/repos/ScoopInstaller/Main/git/trees/master?recursive=1

パッケージグラフ

リンクは、ローカルのパッケージ関係グラフ、補足データ、依存関係、エコシステム一致、パッケージハブ所属から来ています。

関連ツール

  • goBuild dependency declared by Homebrew.
  • coreutilsBuild dependency declared by Homebrew.
  • bashBuild dependency declared by Homebrew.
  • minikubePopular package that depends on this formula.
  • krewPopular package that depends on this formula.
  • kopsPopular package that depends on this formula.
  • devspacePopular package that depends on this formula.
  • vclusterPopular package that depends on this formula.

同じワークフロー

  • kubectxShares av.db curated category or tags: cli, developer-tools, kubectl, kubernetes.
  • kubeloginShares av.db curated category or tags: cli, developer-tools, kubectl, kubernetes.
  • cmctlShares av.db curated category or tags: cli, cluster-management, developer-tools, kubernetes.
  • kubecolorShares av.db curated category or tags: cli, developer-tools, kubectl, kubernetes.
  • kubecmShares av.db curated category or tags: cli, developer-tools, kubectl, kubernetes.
  • kubectl-aiShares av.db curated category or tags: cli, developer-tools, kubectl, kubernetes.

ソース経路

リポジトリデータから生成

このページは scripts/generate-pkg-sqlite.py が生成した非公開のパッケージ SQLite アーティファクトから av-web によって提供されます。

使用ソース

  • Geiger risk classifier
  • Nucleus package database
  • av.db category and tag curation
  • cross-ecosystem install command graph
  • curated agent safety answer
  • external package-manager database matches
  • local coverage README
  • package relationship graph
  • package version freshness
  • package-page enrichment
  • secret-handling manifest