Kuttle allows you to easily get an access into your Kubernetes network environment. SSH access is not required, since kubectl is used instead of ssh.
In comparison with Telepresence, kuttle only proxies Kubernetes network onto your local laptop.
Install sshuttle following official documentation or use your distro's package manager:
- MacOS:
brew install sshuttle - Debian/Ubuntu:
apt-get install sshuttle - Fedora/RedHat/CentOS:
yum install sshuttle
Download kuttle:
wget https://github.com/kayrus/kuttle/raw/master/kuttle
chmod +x kuttleAdditionally you can place kuttle into $PATH
Under the hood sshuttle spawns a remote python oneliner that evaluates a server code, received via stdin, which proxies the traffic. To get a connection to the remote server sshuttle usually uses ssh. kuttle allows sshuttle to use kubectl without any ssh dependencies.
$ pstree -pal `pidof -x sshuttle`
sshuttle,1489 /usr/bin/sshuttle -r remote.example.com 10.254.0.0/16
├─ssh,1492 remote.example.com -- exec /bin/sh -c 'P=python3.5; $P -V 2>/dev/null || P=python; exec "$P" -c '"'"'import sys, os; verbosity=0; sys.stdin = os.fdopen(0, "rb"); exec(compile(sys.stdin.read(978), "assembler.py", "exec"))'"'"''
└─sudo,1490 -p [local sudo] Password: PYTHONPATH=/usr/lib/python3/dist-packages -- /usr/bin/python3 /usr/bin/sshuttle --method auto --firewall
└─python3,1491 /usr/bin/sshuttle --method auto --firewall$ pstree -pal `pidof -x sshuttle`
sshuttle,1538 /usr/bin/sshuttle -r kuttle -e kuttle 10.254.0.0/16
├─kubectl,1541 exec -i kuttle -- /bin/sh -c exec /bin/sh -c 'P=python3.5; $P -V 2>/dev/null || P=python; exec "$P" -c '"'"'import sys, os; verbosity=0; sys.stdin = os.fdopen(0, "rb"); exec(compile(sys.stdin.read(978), "assembler.py", "exec"))'"'"''
│ ├─{kubectl},1544
│ ├─{kubectl},1547
│ ├─{kubectl},1551
│ ├─{kubectl},1552
│ ├─{kubectl},1553
│ ├─{kubectl},1556
│ ├─{kubectl},1557
│ └─{kubectl},1558
└─sudo,1539 -p [local sudo] Password: PYTHONPATH=/usr/lib/python3/dist-packages -- /usr/bin/python3 /usr/bin/sshuttle --method auto --firewall
└─python3,1540 /usr/bin/sshuttle --method auto --firewallSince sshuttle uses python interpreter, python should be installed inside target pod's container.
Prior to version 0.78.2, sshuttle used netstat to list routes. If your sshuttle version is older than 0.78.2, you have to ensure that netstat CLI is also installed inside pod's container.
Simple alpine container with a minimal python is enough for kuttle. You can use the kubectl command below in order to spawn ready-to-use pod as a VPN server:
kubectl run kuttle --image=alpine:latest --restart=Never -- sh -c 'apk add python3 --update && exec tail -f /dev/null'
sshuttle -r kuttle -e kuttle 0.0.0.0/0Route local requests to the 10.254.0.0/16 subnet via pod-with-python pod in your Kubernetes cluster:
sshuttle -r '--context my-context --namespace default pod-with-python' -e /path/to/kuttle 10.254.0.0/16Use your Kubernetes pod as a VPN server with DNS requests being resolved by pod:
sshuttle --dns -r '--context my-context --namespace default pod-with-python' -e /path/to/kuttle 0.0.0.0/0If you already have set kubectl defaults and placed kuttle in $PATH, just specify the pod name:
sshuttle --dns -r pod-with-python -e kuttle 0.0.0.0/0Thanks to sshuttle authors and @databus23 for getting me inspired.
React
Typescript
Django
Laravel
Facebook
Microsoft
Google
Alibaba
D3
Tencent