toolnetes

Collection of miscellaneous helper tools.

Tools

(those with 📦 can be installed via krew)

🚀 Speed up workflow

• kubectx + kubens (📦ctx + ns) - switch between clusters and namespaces
• kube-fzf - findpod/tailpod/execpod/describepod with the power of fzf
• stern - Multi pod and container log tailing for K8s (with regex support)
• kubectl-neat (📦neat) - remove clutter from K8s manifests to make them more readable
• kubeconform - fast K8s manifests validation tool
• kubefwd - bulk port forwarding k8s services for local dev
• kube-ps1 - K8s prompt for bash & zsh
• fish-kube-prompt - K8s prompt for fish (Use together with Fish auto completion)
• kubectl aliases - check the '#KUBERNETES' section

⚖️ Cluster resources

• kube-capacity (📦resource-capacity) - provide an overview of the resource requests/limits
• kubectl-view-utilization (📦view-utilization) - show cluster CPU and Memory requests utilization
• kubectl-df-pv (📦df-pv) - check capacity for all PVCs

🗝 Secrets

• kubectl-view-secret (📦view-secret) - easy secret decoding tool
• k8s-unused-secret-detector - Detect unused K8s Secrets

🛡 RBAC

• rakkess (📦access-matrix) - shows an access matrix
• kubectl-who-can (📦who-can) - shows which subjects have specific RBAC permissions
• rbac-lookup (📦rbac-lookup) - find k8s roles and cluster roles

📝 Evaluate cluster

• pluto & kubent - utilities to find deprecated Kubernetes apiVersions
• popeye (📦popeye) - k8s cluster resource sanitizer
• sonobuoy - k8s diagnostic tool
• kubescape - testing if Kubernetes is deployed securely as defined in Kubernetes Hardening Guidance by NSA
• kubecost - give you visibility into current and historical K8s spend and resource allocation