凭据访问
Reads kubeconfig, exec credentials, cluster tokens, and namespace context.
代理安全
代理安全回答
kubernetes-cli provides kubectl, which controls Kubernetes clusters and workloads.
远程变更
Can create, patch, delete, scale, and exec into cluster workloads.
发布/制品风险
Can apply manifests that deploy or expose application artifacts.
推荐控制
Gate kubectl apply, delete, patch, exec, port-forward, and context changes.
代理使用指南
Allow get/describe with safe contexts; require approval for cluster writes and secret reads.
安装
其他安装命令
macOS
Homebrew已验证 · 100%
brew install kubernetes-cliprovider-native install command
概览
软件包摘要
Kubernetes command-line interface
历史
项目历史与用法
kubectl is the Kubernetes command-line client and the binary packaged by Homebrew as kubernetes-cli. It is the standard local interface for sending requests to the Kubernetes control plane, reading and writing objects, inspecting resources, and driving day-to-day cluster operations.
项目历史
Kubernetes began as an open source Google project in 2014 and reached version 1.0 on July 21, 2015, alongside Google's announcement that the project would be donated to the newly formed Cloud Native Computing Foundation. kubectl evolved with the project as the human-facing client for the Kubernetes API.
采用历史
As Kubernetes became the common substrate for cloud-native infrastructure, kubectl became one of the most widely installed operations binaries in developer and platform-engineering toolchains. Its packaging across Homebrew, Linux distributions, Chocolatey, Scoop, winget, Nix, MacPorts, and other systems reflects that it is both a developer tool and an infrastructure administration tool.
使用方式
kubectl reads kubeconfig data to select a cluster, user, namespace, and context, then communicates with the API server. Kubernetes documentation says kubectl looks for config in $HOME/.kube/config by default, while KUBECONFIG and --kubeconfig allow explicit or merged configuration files.
为什么软件包爱好者会关心
The kubernetes-cli package is significant because it decouples the local client from a full Kubernetes installation. Package managers let users pin or upgrade the client, match cluster version-skew policy, and keep scripts using a predictable kubectl binary without installing control-plane components.
时间线
- 2014: Kubernetes was released as an open source project.
- 2015-07-21: Kubernetes 1.0 was released and the project was donated to the CNCF.
- 2023-08-15: Kubernetes documented pkgs.k8s.io as community-owned package repositories for Kubernetes packages.
- 2025-04-23: Kubernetes v1.33 was released.
- 2025-08-27: Kubernetes v1.34 was released.
Related projects
- kubectl is related to the Kubernetes API server, kubeconfig, client-go, kubeadm, kustomize, Helm, kubectl plugins, and the broader SIG CLI tooling ecosystem.
来源
安全态势
风险级别：orange
cluster orchestration infrastructure.
风险分类器
orange 风险 · 高 置信度 · infrastructure
原因
- cluster orchestration infrastructure
信号
- override:kubernetes-cli
安装行为
- 未记录 Homebrew bottle 元数据。
建议审查
在无人值守的代理使用前，请检查该工具是否读取明文凭据、写入远程状态、发布制品或调用插件。
local files
Configuration and credential file locations
These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.
Configuration files
Config paths the tool may read or write during local use.
- Unix
~/.kube/config
Credential files
Credential-bearing paths to review before unattended agent runs.
- Unix
~/.kube/config
可执行文件
已安装的可执行文件
| 命令 | 类型 | 暴露范围 | 备注 |
|---|---|---|---|
kubectl | 可执行文件 | 已索引可执行文件 | 从本地可执行文件索引发现。 |
新鲜度
版本和新鲜度
这些信号区分页生成时间、软件包管理器活动和上游发布比较。只有存在证据 URL 和可比较版本时，才会提示版本落后。
页面生成时间2026-08-03
管理器版本1.36.3
管理器更新时间2026-07-23
本地数据未知
上游不可用
检测到的最新版本未检测到
- OK没有生成新鲜度警告。
安装元数据
软件包元数据
| 软件包键 | brew:kubernetes-cli |
|---|---|
| 版本 | 1.36.3 |
| 软件包管理器 | Homebrew |
| 主页 | https://kubernetes.io/docs/reference/kubectl/ |
| 仓库 | https://github.com/kubernetes/kubernetes |
| 最后更新 | 2026-07-23T03:43:20Z |
| Pulse | updated |
| Bottle | 未记录 |
| 服务 | 未声明 |
来源线索
由仓库数据生成
此页面由 av-web 从 scripts/generate-pkg-sqlite.py 生成的私有软件包 SQLite 工件提供。
Combined YAML source
View the package source record on GitHub.
使用的来源
- Geiger risk classifier
- Nucleus package database
- curated agent safety answer
- curated configuration and credential file locations
- curated package history
- pkgdb category and tag curation