Automic VaultAutomic Vault

brew

使用 Homebrew 安装 calicoctl

查看 calicoctl 的安装路径、可执行文件、元数据以及面向 AI 代理工作流的安全说明。

安装

其他安装命令

macOS

Homebrew已验证 · 100%
brew install calicoctl

local Homebrew formula metadata

概览

软件包摘要

Calico CLI tool

命令和别名

  • calicoctl

历史

项目历史与用法

calicoctl is the command-line management tool for Calico Open Source, the Tigera-maintained container networking and network-policy project. It gives package-manager users a direct CLI for Calico resources, BGP configuration, IP address management, node operations, and policy workflows.

项目历史

The Calico repository README describes Project Calico as an open-source project created and maintained by Tigera, with a large user and contributor community. It says Calico is widely adopted for container networking and security, powering millions of nodes daily across many countries.

The calicoctl documentation defines the tool as a command-line interface for managing Calico Open Source network policy, BGP, IP address management, and node operations. The repository tag history shows component-specific calicoctl tags in the older monorepo era, and the modern docs require the calicoctl version to match the Calico cluster version unless the version mismatch override is used.

采用历史

calicoctl adoption follows Calico adoption: as Kubernetes and container-network policy became operational necessities, administrators needed a packageable CLI to inspect and manipulate Calico resources outside higher-level deployment tools. The official README's scale claims and 200-plus contributor note indicate the broader Calico ecosystem rather than just the CLI.

In practice, calicoctl became a common operational package for cluster administrators, CI jobs, and incident-response shells because it can create, apply, replace, patch, delete, get, validate, convert, and inspect Calico resources from files, directories, stdin, or resource names.

使用方式

Users run `calicoctl` against a Calico datastore or Kubernetes cluster to manage network/security policy, endpoint configuration, IP pools, BGP peers, Felix configuration, host endpoints, workload endpoints, node state, and IPAM. It supports a familiar declarative file flow through `create`, `apply`, `replace`, `patch`, and `delete` commands.

The docs warn that calicoctl and Calico versions should match, which is especially relevant for package managers: installing a newer CLI than the cluster can break calls unless `--allow-version-mismatch` is explicitly set.

为什么软件包爱好者会关心

calicoctl is significant because it is a Kubernetes-era infrastructure CLI where package versioning is operationally meaningful. Unlike a generic helper binary, the CLI is coupled to cluster API expectations and is packaged separately for local admin machines, automation runners, and troubleshooting environments.

It also represents the packaging shape of cloud-native networking: one source project, many cluster components, a standalone CLI, Helm/operator deployment paths, and version-sensitive compatibility across distributions.

时间线

  • 2010s: Project Calico emerged as an open-source container networking and policy project maintained by Tigera.
  • 2010s: calicoctl became the CLI surface for managing Calico resources and node/network-policy operations.
  • 2021: Calico 3.x release stream continued with frequent GitHub releases and component tags.
  • 2026: Current Calico docs describe calicoctl as the user-reference CLI for Calico Open Source network policy, BGP, IPAM, and node operations.

Related projects

  • Related projects include Project Calico, Tigera Operator, Kubernetes NetworkPolicy, CNI plugins, Felix, BIRD, Typha, kube-controllers, Cilium, Flannel, and other Kubernetes networking and policy tools. calicoctl is the direct admin CLI in that ecosystem.

安全态势

风险级别:绿色

narrow executable package without higher-risk signals.

风险分类器

绿色 风险 · 低 置信度 · appliance

原因

  • narrow executable package without higher-risk signals

信号

  • metadata:no-higher-risk-signals

安装行为

  • formula 元数据中未记录 Homebrew post-install 钩子。
  • Homebrew bottle 元数据适用于 6 个平台目标。
  • 构建元数据列出 1 个构建依赖。

建议审查

在无人值守的代理使用前,请检查该工具是否读取明文凭据、写入远程状态、发布制品或调用插件。

local files

Configuration and credential file locations

These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.

Configuration files

Config paths the tool may read or write during local use.

Unix
/etc/calico/calicoctl.cfg

可执行文件

已安装的可执行文件

命令类型暴露范围备注
calicoctlcli全局可执行文件

新鲜度

版本和新鲜度

这些信号区分页生成时间、软件包管理器活动和上游发布比较。只有存在证据 URL 和可比较版本时,才会提示版本落后。

页面生成时间2026-07-08
管理器版本3.32.1
管理器更新时间2026-06-27
本地数据OK
上游not checked
检测到的最新版本未检测到

https://github.com/projectcalico/calico

安装元数据

软件包元数据

软件包键brew:calicoctl
版本3.32.1
软件包管理器Homebrew
软件包管理器页面https://formulae.brew.sh/formula/calicoctl
主页https://www.tigera.io/project-calico/
仓库https://github.com/projectcalico/calico
上游文档https://docs.tigera.io/calico/latest/reference/calicoctl/overview
许可证Apache-2.0
源码归档https://github.com/projectcalico/calico.git
最后更新2026-06-27T07:47:51Z
Pulseupdated
构建依赖go
Bottle可用 (于 arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux)
Homebrew post-install未定义
服务未声明

注册表事实

源数据库详情

Source DatabaseHomebrew formula API
Taphomebrew/core
Full Namecalicoctl
Version Scheme0
Revision0
Head VersionHEAD
Bottle Stable Root URLhttps://ghcr.io/v2/homebrew/core
Deprecatedno
Disabledno
Keg Onlyno
URL Keys
  • head
  • stable

来源线索

由仓库数据生成

此页面由 av-webscripts/generate-pkg-sqlite.py 生成的私有软件包 SQLite 工件提供。

使用的来源

  • Geiger risk classifier
  • Nucleus package database
  • av.db category and tag curation
  • cross-ecosystem install command graph
  • curated configuration and credential file locations
  • curated package history
  • package relationship graph
  • package version freshness
  • package-page enrichment