macOS
brew install kraneprovider-native install command
安装
brew install kraneprovider-native install command
概览
Kubernetes deploy tool with rollout verification
历史
krane is Shopify's Kubernetes deployment CLI with rollout verification. It occupies the space between raw kubectl apply and heavier deployment systems by giving CI/CD jobs a clearer pass/fail answer and debug context.
The project began publicly as Shopify's kubernetes-deploy tooling; the GitHub repository was created on 2017-01-17. Its README explains that krane wraps kubectl apply rather than replacing Kubernetes primitives, with rollout watching, failure diagnostics, predeploy phases, EJSON secret handling, render, run, restart, and global-deploy commands.
The 1.0 migration guide documents the rename from kubernetes-deploy to krane at version 1.0.0. That release redesigned the CLI, renamed the Ruby namespace, moved metrics to the krane prefix, and split behavior such as rendering and global resources into clearer commands.
Shopify used krane with its open-source Shipit deployment application, which made the tool visible as part of Shopify's Kubernetes deployment story. Packaging through RubyGems and Homebrew made it usable both as a Ruby library/tool and as a standalone CLI in developer and CI environments.
A typical krane deploy command targets an application namespace and Kubernetes context, using kubeconfig credentials from $KUBECONFIG or ~/.kube/config. For Google Cloud authentication, the README documents $GOOGLE_APPLICATION_CREDENTIALS as an additional credentials source.
krane is commonly used where a deploy job needs to apply manifests, wait for workload rollout, print actionable failure information, and optionally run one-off tasks or render templates before deploy.
krane is a useful packaging example because it is a Ruby-origin Kubernetes tool that installs like a CLI but delegates core state changes to kubectl and kubeconfig. Its history also shows a clean package rename from a descriptive old name to a shorter executable and namespace.
安全态势
infrastructure mutation or orchestration signal.
orange 风险 · 中 置信度 · infrastructure
在无人值守的代理使用前,请检查该工具是否读取明文凭据、写入远程状态、发布制品或调用插件。
local files
These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.
Credential-bearing paths to review before unattended agent runs.
$KUBECONFIG~/.kube/config$GOOGLE_APPLICATION_CREDENTIALS可执行文件
| 命令 | 类型 | 暴露范围 | 备注 |
|---|---|---|---|
krane | 可执行文件 | 已索引可执行文件 | 从本地可执行文件索引发现。 |
新鲜度
这些信号区分页生成时间、软件包管理器活动和上游发布比较。只有存在证据 URL 和可比较版本时,才会提示版本落后。
安装元数据
| 软件包键 | brew:krane |
|---|---|
| 版本 | 3.9.1 |
| 软件包管理器 | Homebrew |
| 主页 | https://github.com/Shopify/krane |
| Bottle | 未记录 |
| 服务 | 未声明 |
来源线索
此页面由 av-web 从 scripts/generate-pkg-sqlite.py 生成的私有软件包 SQLite 工件提供。
View the package source record on GitHub.