{"id":13522123,"url":"https://github.com/rafi/kubectl-pass","last_synced_at":"2025-04-14T03:23:02.590Z","repository":{"id":137298386,"uuid":"197019447","full_name":"rafi/kubectl-pass","owner":"rafi","description":"kubectl plugin for integration with pass (the standard unix password manager)","archived":false,"fork":false,"pushed_at":"2019-07-16T05:52:54.000Z","size":4,"stargazers_count":6,"open_issues_count":1,"forks_count":1,"subscribers_count":1,"default_branch":"master","last_synced_at":"2025-04-10T04:05:41.208Z","etag":null,"topics":["auth","k8s","kubectl","kubectl-plugins","kubernetes","pass"],"latest_commit_sha":null,"homepage":null,"language":"Shell","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":null,"status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/rafi.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":null,"code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2019-07-15T14:54:46.000Z","updated_at":"2025-02-02T19:23:25.000Z","dependencies_parsed_at":null,"dependency_job_id":"d10f48a6-f625-4905-816f-9c71ce4f0b46","html_url":"https://github.com/rafi/kubectl-pass","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rafi%2Fkubectl-pass","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rafi%2Fkubectl-pass/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rafi%2Fkubectl-pass/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rafi%2Fkubectl-pass/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/rafi","download_url":"https://codeload.github.com/rafi/kubectl-pass/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":248814096,"owners_count":21165687,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["auth","k8s","kubectl","kubectl-plugins","kubernetes","pass"],"created_at":"2024-08-01T06:00:42.596Z","updated_at":"2025-04-14T03:23:02.557Z","avatar_url":"https://github.com/rafi.png","language":"Shell","funding_links":[],"categories":["kubectl Plugins"],"sub_categories":["Installing plugins via awesome-kubectl-plugins"],"readme":"# kubectl-pass\n\n\u003e Authentication and secret management with [pass] and [kubectl]\n\u003e integration. Works as a standalone script, or kubectl plugin.\n\u003e\n\u003e `pass`, the standard Unix password manager, is a powerful way to store\n\u003e your valuable secrets with GPG keys.\n\u003e Read about it more at [passwordstore.org].\n\n## Table of Contents\n\n\u003c!-- vim-markdown-toc GFM --\u003e\n\n* [Pre-requisites](#pre-requisites)\n* [Install](#install)\n* [Commands](#commands)\n  * [Auth](#auth)\n* [See Also](#see-also)\n* [License](#license)\n\n\u003c!-- vim-markdown-toc --\u003e\n\n## Pre-requisites\n\n* [kubectl]\n* [pass]\n* [jq]\n\n## Install\n\nCopy `kubectl-pass` somewhere in your `$PATH`:\n\n```bash\ncd ~/.local/bin\ncurl -LO https://github.com/rafi/kubectl-pass/raw/master/kubectl-pass\nchmod ug+x kubectl-pass\n```\n\nNow you can run as a kubectl plugin, standalone, or alias:\n\n```bash\nkubectl pass -h\n# OR\nkubectl-pass -h\n# OR\nalias kubepass=kubectl-pass\nkubepass -h\n```\n\n## Commands\n\n* [x] kubectl pass [auth](#auth)\n* [ ] kubectl pass [secret](#secret)\n\n### Auth\n\n`kubectl pass auth` reads an encrypted pass file, looks for matching keywords\nand returns a Kubernetes `ExecCredential` kind manifest.\nFor example, if you are using PEM, create a new encrypted pass secret:\n\n```bash\npass edit personal/k8s\n```\n\nFill in these fields: (Make sure they are already base64 encoded)\n\n```yaml\nclient-certificate-data: LS0...\nclient-key-data: LS0...\n```\n\nFinally, edit your `~/.kube/config` user:\n\n```yaml\nusers:\n- name: personal-admin\n  user:\n    exec:\n      apiVersion: client.authentication.k8s.io/v1beta1\n      args:\n      - auth\n      - pem\n      - personal/k8s\n      command: kubectl-pass\n```\n\nNow try using `kubectl` with the context you've edited. Enjoy!\n\n### Secret\n\nComing Soon...\n\n## See Also\n\n## License\n\n* MIT\n\n[kubectl]: https://kubernetes.io/docs/tasks/tools/install-kubectl/\n[pass]: https://www.passwordstore.org\n[passwordstore.org]: https://www.passwordstore.org\n[jq]: https://github.com/stedolan/jq\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Frafi%2Fkubectl-pass","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Frafi%2Fkubectl-pass","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Frafi%2Fkubectl-pass/lists"}