Now Available as a Krew Plugin! See below for install steps
A pane of glass between you and your Kubernetes clusters.
- Sits as an intermediary between you and
kubectl, allowing you tolockandunlockcontexts. - Prevents misfires to production / high-value Kubernetes clusters that you might have strong IAM privileges on.
- Supports custom 'Profiles', allowing you to restrict certain verbs from being passed to high-value clusters.
If you wish to build it and try it out though, you can do one of the following:
- install Krew if you don't already have it
- run
kubectl krew index add kube-lock https://github.com/chaosinthecrd/kube-lock.gitto add this repository as a Krew index (this is a temporary step while the plugin is getting accepted to the upstream index) - install the plugin with
kubectl krew install kube-lock/lock - create an alias in your
.bashrcor.zshrclike:alias kubectl="kubectl-lock kubectl --" - From here, you can use
kube-lockby callingkubectl lockfollowed by the subcommand you wish to use (e.g.,kubectl lock lock)
- run
go build -o="kubectl-lock" .in the root of the repo, or download from the Github Releases page. - copy the produced binary into somewhere within your path
- create an alias in your
.bashrcor.zshrclike:alias kubectl="kubectl-lock kubectl --" - From here, you can use
kube-lockby callingkubectl-lockfollowed by the subcommand you wish to use (e.g.,kubectl-lock lock)

