KubExplorer

Warning: Proof of concept. Feedback is much welcome.

Discovers and prints out any Configmaps and Secrets not linked to any of the following resources:

Deployments,
ReplicaSets,
StatefulSets,
DaemonSets,
Jobs,
CronJobs,
ReplicationControllers,
Pods,
Ingresses.

Running

Pre-compiled x86_64-unknown-linux-gnu binaries are available. For other platforms, compilation is an easy, but necessary step.

Install Rust
Simply invoke cargo run -- -h (add the --release flag for optimal performance) to obtain instructions.

> cargo run -- -h

KubEx - Kubernetes Explorer 0.1.0
Pavel Pscheidl <[email protected]>
Discovers unused ConfigMaps and Secrets

USAGE:
    kubex [OPTIONS]

FLAGS:
    -h, --help       Prints help information
    -V, --version    Prints version information

OPTIONS:
    -k, --kubeconfig <PATH_TO_KUBECONFIG>    Path to a KUBECONFIG file. When not set, env is used.
    -n, --namespace <NAMESPACE>              Namespace to search in.
    -o, --output <OUTPUT>                    Output format. YAML by default. [default: yaml]  [possible values: yaml,
                                             json]

E.g. cargo run --release -- -k /etc/rancher/k3s/k3s.yaml -n default -o json to explicitly specify the KUBECONFIG and the namespace. If KUBECONFIG is not specified, the KUBECONFIG env variable is looked for. When not found, an error is thrown. If namespace is not defined, the default namespace from KUBECONFIG is used.

Testing

Run tests using cargo test. Tests require:

Running Kubernetes cluster with supported API version 1_19,
KUBECONFIG environment variable set.

An easy way to obtain a Kubernetes cluster is k3s.io - curl -sfL https://get.k3s.io | sh -. After installation, export KUBECONFIG=/etc/rancher/k3s/k3s.yaml and make sure to chown or chmod the $KUBECONFIG file for current user to be able to read it.

You might also like...

Kubernetes + wasmCloud

KasmCloud Managing and Running Actors, Providers, and Links in Kubernetes ⚠️ Warning This is a contributor-led experimental project and is not recomme

22 Oct 8, 2023

KFtray - A tray application that manages port forwarding in Kubernetes.

Ktray is written in Rust and React, with Tauri framework. The app simplifies the process of starting and stopping multiple port forwarding configurations through a user-friendly interface.

42 Dec 17, 2023

Fusion is a cross-platform App Dev ToolKit build on Rust . Fusion lets you create Beautiful and Fast apps for mobile and desktop platform.

1 Oct 19, 2021

Comments

Search for secrets in Ingresses

Ingresses might link to secret maps and configs as well, e.g. in the tls section.

--- 
apiVersion: extensions/v1beta1
kind: Ingress
metadata: 
name: tls-example-ingress
spec: 
rules: 
- 
host: mydomain.com
http: 
paths: 
- 
backend: 
serviceName: my-service
servicePort: 80
path: /
tls: 
- 
hosts: 
- mydomain.com
secretName: my-tls-secret

opened by Pscheidl 0

Detect standalone pods

Pods not tied to any deployment/replica set etc.

In some cases, pods are spawned by custom controllers. How to deal with that ? Define custom rule/path ? Ignore for now ?

opened by Pscheidl 0