
Security News
Software Engineering Daily Podcast: Feross on AI, Open Source, and Supply Chain Risk
Socket CEO Feross Aboukhadijeh joins Software Engineering Daily to discuss modern software supply chain attacks and rising AI-driven security risks.
kube-deploy
Advanced tools
It's meant to be used in continuous integration pipelines in order to update a kubernetes deployment with the most recent docker image. It sends a PATCH request to the kubernetes apiserver in order to do so.
Currently, only deployments are supported and other types of kubernetes resources will be added when and if they are requested.
Usage: kube-deploy [options] <resource-type/resource-name> <container-name> <container-image>
Options:
-h, --help output usage information
-u --url <string> kubernetes API URL
-n --namespace <string> optional: kubernetes namespace [default: default]
-k --insecure-https optional: ingore SSL certificate validity
It's designed to be used as a script in other packages:
"scripts": {
...
"deploy": "kube-deploy -u https://kubernetes.example.com deployment/my-deployment my-container-name docker/image:tag",
...
}
So that it makes it easy to just say npm run kube-deploy in the CI pipeline.
In order to authenticate against the kubernetes deployment, kube-deploy will use the access token from the environment variable KUBERNETES_TOKEN.
FAQs
Utility for patching kubernetes resources
The npm package kube-deploy receives a total of 4 weekly downloads. As such, kube-deploy popularity was classified as not popular.
We found that kube-deploy demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Socket CEO Feross Aboukhadijeh joins Software Engineering Daily to discuss modern software supply chain attacks and rising AI-driven security risks.

Security News
GitHub has revoked npm classic tokens for publishing; maintainers must migrate, but OpenJS warns OIDC trusted publishing still has risky gaps for critical projects.

Security News
Rust’s crates.io team is advancing an RFC to add a Security tab that surfaces RustSec vulnerability and unsoundness advisories directly on crate pages.