plugins.md

Available kubectl plugins

To install these kubectl plugins:

1. Install Krew
2. Run kubectl krew install PLUGIN_NAME to install a plugin via Krew.

The following kubectl plugins are currently available on Krew plugin index. Note that this table may be outdated. For the most up-to-date list of plugins, visit the krew-index repository or run kubectl krew search.

Name	Description	Stars
access-matrix	Show an RBAC access matrix for server resources
advise-psp	Suggests PodSecurityPolicies for cluster.
apparmor-manager	Manage AppArmor profiles for cluster.
auth-proxy	Authentication proxy to a pod or service
bulk-action	Do bulk actions on Kubernetes resources.
ca-cert	Print the PEM CA certificate of the current cluster
capture	Triggers a Sysdig capture to troubleshoot the running pod
change-ns	View or change the current namespace via kubectl.
cilium	Easily interact with Cilium agents.
cluster-group	Exec commands across a group of contexts.
config-cleanup	Automatically clean up your kubeconfig
cssh	SSH into Kubernetes nodes
ctx	Switch between contexts in your kubeconfig
custom-cols	A "kubectl get" replacement with customizable column presets
debug-shell	Create pod with interactive kube-shell.
debug	Attach ephemeral debug container to running pod
deprecations	Checks for deprecated objects in a cluster
df-pv	Show disk usage (like unix df) for persistent volumes
doctor	Scans your cluster and reports anomalies.
duck	List custom resources with ducktype support
eksporter	Export resources and removes a pre-defined set of fields for later import
evict-pod	Evicts the given pod
exec-as	Like kubectl exec, but offers a user flag to exec as root or any other user.
exec-cronjob	Run a CronJob immediately as Job
fields	Grep resources hierarchy by field name
fleet	Shows config and resources of a fleet of clusters
get-all	Like kubectl get all but really everything
gke-credentials	Fetch credentials for GKE clusters
gopass	Imports secrets from gopass
grep	Filter Kubernetes resources by matching their names
iexec	Interactive selection tool for kubectl exec
images	Show container images used in the cluster.
ingress-nginx	Interact with ingress-nginx
konfig	Merge, split or import kubeconfig files
krew	Package manager for kubectl plugins.
kubesec-scan	Scan Kubernetes resources with kubesec.io.
kudo	Declaratively build, install, and run operators using KUDO.
kuttl	Declaratively run and test operators
match-name	Match names of pods and other API objects
modify-secret	modify secret with implicit base64 translations
mtail	Tail logs from multiple pods matching label selector
neat	Remove clutter from Kubernetes manifests to make them more readable.
net-forward	Proxy to arbitrary TCP services on a cluster network
node-admin	List nodes and run privileged pod with chroot
node-restart	Restart cluster nodes sequentially and gracefully
node-shell	Spawn a root shell on a node via kubectl
ns	Switch between Kubernetes namespaces
oidc-login	Log in to the OpenID Connect provider
open-svc	Open the Kubernetes URL(s) for the specified service in your browser.
outdated	Finds outdated container images running in a cluster
passman	Store kubeconfig credentials in keychains or password managers
pod-dive	Shows a pod's workload tree and info inside a node
pod-logs	Display a list of pods to get logs from
pod-shell	Display a list of pods to execute a shell in
popeye	Scans your clusters for potential resource issues
preflight	Executes application preflight tests in a cluster
profefe	Gather and manage pprof profiles from running pods
prompt	Prompts for user confirmation when executing commands in critical namespaces or clusters, i.e., production.
prune-unused	Prune unused resources
rbac-lookup	Reverse lookup for RBAC
rbac-view	A tool to visualize your RBAC permissions.
resource-capacity	Provides an overview of resource requests, limits, and utilization
resource-snapshot	Prints a snapshot of nodes, pods and HPAs resource usage
restart	Restarts a pod with the given name
rm-standalone-pods	Remove all pods without owner references
rolesum	Summarize RBAC roles for subjects
score	Kubernetes static code analysis.
snap	Delete half of the pods in a namespace or cluster
sniff	Start a remote packet capture on pods using tcpdump and wireshark
sort-manifests	Sort manifest files in a proper order by Kind
spy	pod debugging tool for kubernetes clusters with docker runtimes
sql	Query the cluster via pseudo-SQL
ssh-jump	A kubectl plugin to SSH into Kubernetes nodes using a SSH jump host Pod
sshd	Run SSH server in a Pod
ssm-secret	Import/export secrets from/to AWS SSM param store
status	Show status details of a given resource.
sudo	Run Kubernetes commands impersonated as group system:masters
support-bundle	Creates support bundles for off-cluster analysis
tail	Stream logs from multiple pods and containers using simple, dynamic source selection.
tmux-exec	An exec multiplexer using Tmux
topology	Explore region topology for nodes or pods
tree	Show a tree of object hierarchies through ownerReferences
view-allocations	List allocations per resources, nodes, pods.
view-secret	Decode Kubernetes secrets
view-serviceaccount-kubeconfig	Show a kubeconfig setting to access the apiserver with a specified serviceaccount.
view-utilization	Shows cluster cpu and memory utilization
virt	Control KubeVirt virtual machines using virtctl
warp	Sync and execute local files in Pod
who-can	Shows who has RBAC permissions to access Kubernetes resources
whoami	Show the subject that's currently authenticated as.

---

This page is generated by running the generate-plugin-overview tool.