search

cyberark / KubiScan

A tool to scan Kubernetes cluster for risky permissions
GNU General Public License v3.0
1.31k stars 130 forks source link

Support for kubeconfig credentials directly in kubeconfig file #58

Closed MMquant closed 1 year ago

MMquant commented 1 year ago

I have kubeconfig file which doesn't contain

certificate-authority:
client-certificate:

keys.

Instead the credentials are included directly in the kubeconfig file via

certificate-authority-data:
client-certificate-data:

Can I pass such kubeconfig directly to kubiscan or do I need to move the credentials into separate files and use

certificate-authority:
client-certificate:

?

g3rzi commented 1 year ago

Hi,

It should work because we using config.load_kube_config() which should load the config file as is: https://github.com/cyberark/KubiScan/blob/b8e7f427692953d59284eb8d23033371c9026bdb/api/api_client.py#L66

If it doesn't work for you, let us know and we will fix it.