cyberark / KubiScan

A tool to scan Kubernetes cluster for risky permissions

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Support for kubeconfig credentials directly in kubeconfig file

MMquant opened this issue · comments

I have kubeconfig file which doesn't contain

certificate-authority:
client-certificate:

keys.

Instead the credentials are included directly in the kubeconfig file via

certificate-authority-data:
client-certificate-data:

Can I pass such kubeconfig directly to kubiscan or do I need to move the credentials into separate files and use

certificate-authority:
client-certificate:

?

Hi,

It should work because we using config.load_kube_config() which should load the config file as is:

config.load_kube_config(os.path.abspath(kube_config_file))

If it doesn't work for you, let us know and we will fix it.