Automic VaultAutomic Vault

brew / 受保护工具覆盖 / 排名 114

安装 kubernetes-cli

查看 kubernetes-cli 的安装路径、可执行文件、元数据以及面向 AI 代理工作流的安全说明。

安装命令安全说明

agent safety

Agent safety answer

kubernetes-cli provides kubectl, which controls Kubernetes clusters and workloads.

Credential access

Reads kubeconfig, exec credentials, cluster tokens, and namespace context.

Remote mutation

Can create, patch, delete, scale, and exec into cluster workloads.

Publish/artifact risk

Can apply manifests that deploy or expose application artifacts.

Recommended control

Gate kubectl apply, delete, patch, exec, port-forward, and context changes.

Agent-use guidance

Allow get/describe with safe contexts; require approval for cluster writes and secret reads.

安装

使用 Automic Vault 安装

Automic Vault
下载 AV
sudo av install brew:kubernetes-cli

macOS

Homebrewverified · 100%
brew install kubernetes-cli

local Homebrew formula metadata

MacPortsverified · 94%
sudo port install kubectl

MacPorts ports tree · sysutils/kubectl/Portfile · source: api.github.com

Linux

Alpine Linux apkverified · 92%
sudo apk add kubectl

Alpine Linux edge package indexes · kubectl · source: dl-cdn.alpinelinux.org

Debian aptverified · 92%
sudo apt install kubectl

Debian stable package indexes · kubectl · source: deb.debian.org

Nixverified · 92%
nix profile install nixpkgs#kubectl

nixpkgs package indexes · pkgs/by-name/ku/kubectl/package.nix · source: api.github.com

Arch Linux pacmanverified · 92%
sudo pacman -S kubectl

Arch Linux sync databases · kubectl · source: geo.mirror.pkgbuild.com

Windows

Chocolateyverified · 92%
choco install kubernetes-cli

Chocolatey community package catalog · kubernetes-cli · source: community.chocolatey.org

Windows Package Managerverified · 92%
winget install --id Kubernetes.kubectl -e

Windows Package Manager source index · Kubernetes.kubectl · source: cdn.winget.microsoft.com

Scoopverified · 92%
scoop install main/kubectl

Scoop official bucket manifest trees · bucket/kubectl.json · source: api.github.com

平台说明

  • 没有特定于此软件包的平台说明。

概览

软件包摘要

Kubernetes command-line interface

命令和别名

  • kubectl

受保护工具覆盖

Plain Text Kubeconfig Secrets

`kubectl` reads kubeconfig files that commonly contain bearer tokens or embedded client private keys. Our isotope stores supported user credentials in the macOS keychain, rewrites kubeconfig user entries to Kubernetes exec credential plugins, and exposes credentials through `av credential-helper kubernetes` only while `kubectl` runs.

Risk classifier

orange risk · high confidence · infrastructure

Why

  • cluster orchestration infrastructure

Signals

  • override:kubernetes-cli

Install behavior

  • No Homebrew post-install hook is recorded in formula metadata.
  • Homebrew bottle metadata is available for 6 platform targets.
  • Build metadata lists 3 build dependencies.

本地 README 摘录

kubernetes-cli Protected-tool coverage

kubectl reads kubeconfig files that commonly contain bearer tokens, passwords, client key paths, or embedded client key data.

This protected-tool coverage migrates the default kubeconfig into the Automic Vault keychain and rewrites supported user entries to Kubernetes exec credential plugins that call av credential-helper kubernetes. The wrapper provides a short-lived approval token while kubectl is running.

Caveats

  • We currently migrate the default ~/.kube/config file only.
  • Multi-file KUBECONFIG setups must be migrated manually.
  • Only bearer-token and embedded client-certificate user credentials are

migrated to the exec helper.

  • Passwords, auth-provider refresh credentials, and client-key file paths must

be migrated manually.

  • Kubeconfigs that rely entirely on exec auth plugins may not contain

migratable secrets.

来源: local coverage notes

覆盖来源

来源摘录

Caveats

  • We currently migrate the default ~/.kube/config file only.
  • Multi-file KUBECONFIG setups must be migrated manually.
  • Passwords, auth-provider refresh credentials, and client-key file paths must be migrated manually.
  • Exec-plugin-only kubeconfigs may not contain migratable secrets.

可执行文件

已安装的可执行文件

命令类型暴露范围备注
kubectlcliglobal executable

新鲜度

版本和新鲜度

这些信号区分页生成时间、软件包管理器活动和上游发布比较。只有存在证据 URL 和可比较版本时，才会提示版本落后。

页面生成时间2026-06-10
管理器版本1.36.1
管理器更新时间2026-05-12
本地数据ok
上游not checked
检测到的最新版本not detected

https://github.com/kubernetes/kubernetes

安装元数据

软件包元数据

Package keybrew:kubernetes-cli
Version1.36.1
Package managerHomebrew
Package manager pagehttps://formulae.brew.sh/formula/kubernetes-cli
Homepagehttps://kubernetes.io/docs/reference/kubectl/
Repositoryhttps://github.com/kubernetes/kubernetes
Upstream docshttps://kubernetes.io/docs/reference/kubectl
LicenseApache-2.0
Source archivehttps://github.com/kubernetes/kubernetes.git
Last updated2026-05-12T19:04:48Z
Pulseupdated
Build dependenciesbash, coreutils, go
Bottleavailable (arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux)
Homebrew post-installnot defined
Servicenone declared

registry facts

Source database details

Source DatabaseHomebrew formula API
Taphomebrew/core
Full Namekubernetes-cli
Aliases
  • kubectl
  • kubernetes-cli@1.36
Version Scheme0
Revision0
Head VersionHEAD
Bottle Stable Root URLhttps://ghcr.io/v2/homebrew/core
Deprecatedno
Disabledno
Keg Onlyno
URL Keys
  • head
  • stable

source database matches

Other package-manager records

Matches are pulled from external package-manager indexes and kept separate from local Automic Vault package links.

Chocolatey95%

kubernetes-cli

choco install kubernetes-cli
  • normalized package name match
  • Matched by: Kubernetes Cli
Chocolatey community package catalog · community.chocolatey.org · Chocolatey community package catalog: kubernetes-cli from http://community.chocolatey.org/api/v2/Packages?$filter=IsLatestVersion&$select=Id&$top=1000&$skiptoken='11','kubectx'
winget95%

Kubernetes.kubectl

winget install --id Kubernetes.kubectl -e
  • normalized package name match
  • Matched by: Kubernetes Cli
Windows Package Manager source index · cdn.winget.microsoft.com · Windows Package Manager source index: Kubernetes.kubectl from https://cdn.winget.microsoft.com/cache/source.msix
MacPorts94%

kubectl

sudo port install kubectl
  • installed executable or alias match
  • Matched by: Kubectl
MacPorts ports tree · api.github.com · MacPorts ports tree: sysutils/kubectl/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1
Debian apt92%

kubectl 1.32.3+ds-2

Command-line tool for controlling Kubernetes clusters

https://kubernetes.io/

sudo apt install kubectl
  • Section: admin
  • Architecture: amd64
  • Source Package: kubernetes
  • 1 dependencies
  • installed executable or alias match
  • Matched by: Kubectl
Debian stable package indexes · deb.debian.org · Debian stable package indexes: kubectl from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz
Nix92%

kubectl

nix profile install nixpkgs#kubectl
  • installed executable or alias match
  • Matched by: Kubectl
nixpkgs package indexes · api.github.com · nixpkgs package indexes: pkgs/by-name/ku/kubectl/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1
apk92%

kubectl 1.36.1-r0

Kubernetes - kubectl

https://kubernetes.io/

sudo apk add kubectl
  • License: Apache-2.0
  • Architecture: x86_64
  • Source Package: kubernetes
  • 1 provides
  • installed executable or alias match
  • Matched by: Kubectl
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: kubectl from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz
pacman92%

kubectl 1.36.1-1

A command line tool for communicating with a Kubernetes API server

https://kubernetes.io/

sudo pacman -S kubectl
  • License: Apache-2.0
  • Architecture: x86_64
  • 1 dependencies
  • installed executable or alias match
  • Matched by: Kubectl
Arch Linux sync databases · geo.mirror.pkgbuild.com · Arch Linux sync databases: kubectl from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz
Scoop92%

main/kubectl

scoop install main/kubectl
  • installed executable or alias match
  • Matched by: Kubectl
Scoop official bucket manifest trees · api.github.com · Scoop official bucket manifest trees: bucket/kubectl.json from https://api.github.com/repos/ScoopInstaller/Main/git/trees/master?recursive=1

软件包图谱

链接来自本地软件包关系图、补充数据、依赖边、生态匹配和软件包 hub 归属。

相关工具

  • goBuild dependency declared by Homebrew.
  • coreutilsBuild dependency declared by Homebrew.
  • bashBuild dependency declared by Homebrew.
  • minikubePopular package that depends on this formula.
  • krewPopular package that depends on this formula.
  • kopsPopular package that depends on this formula.
  • devspacePopular package that depends on this formula.
  • vclusterPopular package that depends on this formula.

相同工作流

  • kubectxShares av.db curated category or tags: cli, developer-tools, kubectl, kubernetes.
  • kubeloginShares av.db curated category or tags: cli, developer-tools, kubectl, kubernetes.
  • cmctlShares av.db curated category or tags: cli, cluster-management, developer-tools, kubernetes.
  • kubecolorShares av.db curated category or tags: cli, developer-tools, kubectl, kubernetes.
  • kubecmShares av.db curated category or tags: cli, developer-tools, kubectl, kubernetes.
  • kubectl-aiShares av.db curated category or tags: cli, developer-tools, kubectl, kubernetes.

来源线索

由仓库数据生成

此页面由 av-web 从 scripts/generate-pkg-sqlite.py 生成的私有软件包 SQLite 工件提供。

使用的来源

  • Geiger risk classifier
  • Nucleus package database
  • av.db category and tag curation
  • cross-ecosystem install command graph
  • curated agent safety answer
  • external package-manager database matches
  • local coverage README
  • package relationship graph
  • package version freshness
  • package-page enrichment
  • secret-handling manifest