To install these kubectl plugins:
- Install Krew
- Run
kubectl krew install PLUGIN_NAMEto install a plugin via Krew.
The following kubectl plugins are currently available on
Krew plugin index. Note that this table may be
outdated. For the most up-to-date list of plugins, visit the
krew-index
repository or run kubectl krew search.
| Name | Description | Stars |
|---|---|---|
| access-matrix | Show an RBAC access matrix for server resources |  |
| advise-psp | Suggests PodSecurityPolicies for cluster. |  |
| auth-proxy | Authentication proxy to a pod or service |  |
| bulk-action | Do bulk actions on Kubernetes resources. |  |
| ca-cert | Print the PEM CA certificate of the current cluster |  |
| capture | Triggers a Sysdig capture to troubleshoot the running pod |  |
| change-ns | View or change the current namespace via kubectl. |  |
| cluster-group | Exec commands across a group of contexts. |  |
| config-cleanup | Automatically clean up your kubeconfig |  |
| cssh | SSH into Kubernetes nodes |  |
| ctx | Switch between contexts in your kubeconfig |  |
| custom-cols | A "kubectl get" replacement with customizable column presets |  |
| debug-shell | Create pod with interactive kube-shell. |  |
| debug | Attach ephemeral debug container to running pod |  |
| deprecations | Checks for deprecated objects in a cluster |  |
| df-pv | Show disk usage (like unix df) for persistent volumes |  |
| doctor | Scans your cluster and reports anomalies. |  |
| duck | List custom resources with ducktype support |  |
| eksporter | Export resources and removes a pre-defined set of fields for later import |  |
| evict-pod | Evicts the given pod |  |
| exec-as | Like kubectl exec, but offers a user flag to exec as root or any other user. |
 |
| exec-cronjob | Run a CronJob immediately as Job |  |
| fields | Grep resources hierarchy by field name |  |
| fleet | Shows config and resources of a fleet of clusters |  |
| get-all | Like kubectl get all but really everything |
 |
| gke-credentials | Fetch credentials for GKE clusters | |
| gopass | Imports secrets from gopass |  |
| grep | Filter Kubernetes resources by matching their names |  |
| iexec | Interactive selection tool for kubectl exec |
 |
| images | Show container images used in the cluster. |  |
| ingress-nginx | Interact with ingress-nginx |  |
| konfig | Merge, split or import kubeconfig files |  |
| krew | Package manager for kubectl plugins. |  |
| kubesec-scan | Scan Kubernetes resources with kubesec.io. |  |
| kudo | Declaratively build, install, and run operators using KUDO. |  |
| match-name | Match names of pods and other API objects |  |
| modify-secret | modify secret with implicit base64 translations |  |
| mtail | Tail logs from multiple pods matching label selector | |
| neat | Remove clutter from Kubernetes manifests to make them more readable. |  |
| net-forward | Proxy to arbitrary TCP services on a cluster network |  |
| node-admin | List nodes and run privileged pod with chroot | |
| node-restart | Restart cluster nodes sequentially & gracefully |  |
| node-shell | Spawn a root shell on a node via kubectl |  |
| ns | Switch between Kubernetes namespaces | |
| oidc-login | Log in to the OpenID Connect provider |  |
| open-svc | Open the Kubernetes URL(s) for the specified service in your browser. |  |
| outdated | Finds outdated container images running in a cluster |  |
| passman | Store kubeconfig credentials in keychains or password managers |  |
| pod-dive | Shows a pod's workload tree and info inside a node |  |
| pod-logs | Display a list of pods to get logs from | |
| pod-shell | Display a list of pods to execute a shell in | |
| preflight | Executes application preflight tests in a cluster |  |
| profefe | Gather and manage pprof profiles from running pods |  |
| prompt | Prompts for user confirmation when executing commands in critical namespaces or clusters, i.e., production. | |
| prune-unused | Prune unused resources | |
| rbac-lookup | Reverse lookup for RBAC |  |
| rbac-view | A tool to visualize your RBAC permissions. |  |
| resource-capacity | Provides an overview of resource requests, limits, and utilization |  |
| resource-snapshot | Prints a snapshot of nodes, pods and HPAs resource usage |  |
| restart | Restarts a pod with the given name |  |
| rm-standalone-pods | Remove all pods without owner references | |
| score | Kubernetes object analysis with recommendations for improved reliability and security |  |
| snap | Delete half of the pods in a namespace or cluster |  |
| sniff | Start a remote packet capture on pods using tcpdump and wireshark |  |
| sort-manifests | Sort manifest files in a proper order by Kind |  |
| spy | pod debugging tool for kubernetes clusters with docker runtimes |  |
| ssh-jump | A kubectl plugin to SSH into Kubernetes nodes using a SSH jump host Pod |  |
| sshd | Run SSH server in a Pod |  |
| ssm-secret | Import/export secrets from/to AWS SSM param store |  |
| sudo | Run Kubernetes commands impersonated as group system:masters |  |
| support-bundle | Creates support bundles for off-cluster analysis | |
| tail | Stream logs from multiple pods and containers using simple, dynamic source selection. |  |
| topology | Explore region topology for nodes or pods |  |
| tree | Show a tree of object hierarchies through ownerReferences |  |
| view-allocations | List allocations per resources, nodes, pods. |  |
| view-secret | Decode Kubernetes secrets |  |
| view-serviceaccount-kubeconfig | Show a kubeconfig setting to access the apiserver with a specified serviceaccount. |  |
| view-utilization | Shows cluster cpu and memory utilization |  |
| virt | Control KubeVirt virtual machines using virtctl |  |
| warp | Sync and execute local files in Pod |  |
| who-can | Shows who has RBAC permissions to access Kubernetes resources |  |
| whoami | Show the subject that's currently authenticated as. |  |
This page is generated by running the generate-plugin-overview tool.