News for hackers. Stuff that matters.
Re:Everything useful I know about kubectl by Osiris on Monday July 05, 2021 @12:01PM (#27739283)
k9s is a fantastic tool. It's a CLI GUI written in go.
Re:Everything useful I know about kubectl by jeffbee on Monday July 05, 2021 @12:07PM (#27739347)
More of a TUI than a CLI. I love its presentation but it falls apart if you have about 1000 pods or more.
Re:Everything useful I know about kubectl by icythere on Monday July 05, 2021 @12:19PM (#27739475)
I used k9s before and that's an awesome tool. Tho it doesn't help when I want to send a command to my team mate and he just executes them on wrong cluster. It's the problem I want to solve
Re:Everything useful I know about kubectl by birdyrooster on Monday July 05, 2021 @03:23PM (#27741093)
Create a User/Role for deleting (or whatever dangerous action) resources in prod cluster/namespace. Setup RBAC which allows your employees to impersonate as that user/role using kubectl --as. This way if you send your coworkers a command for dev environment and they try to run it in prod it will fail because they didn’t run kubectl as that impersonated user.
Re:Everything useful I know about kubectl by icythere on Tuesday July 06, 2021 @12:30AM (#27744230)
Totally agreed. This is the right way for many problems. Sometimes it's quite not possible to deploy the idea: In one of my past working spaces, everyone (even newbies) was provided with all _root_ privileges -- the idea was to help the team to learn from their mistakes (if any), and it's actually a great idea.
Re:Everything useful I know about kubectl by pm90 on Monday July 05, 2021 @04:02PM (#27741368)
I'm glad to hear that this is a more common problem. When sharing kubectl commands, I always specify the --context flag explicitly so the person using it has to manually edit the context name to whatever they are using before running it.
Re:Everything useful I know about kubectl by icythere on Tuesday July 06, 2021 @12:39AM (#27744274)
That's definitely helpful. Some different applications support different options to switch context. For example, Helm uses `--kube-context`.