certlens

README

certlens

certlens is terminal UI for inspecting Kubernetes TLS Secrets.

Features

• Inspect Kubernetes TLS Secrets interactively in the terminal
• View both raw/formatted PEM data with additional computed certificate details (expiry status, time until expiry, validity used, self-signed and much more..)
• Navigate certificate chains in a single TLS secret
• Paginated and filterable secrets list for easy navigation
• Copy certificate or private key data to clipboard
• Compatible with k9s as a plugin – inspect TLS secrets directly from the k9s UI (plugin config)

Demo

https://github.com/user-attachments/assets/6ffaf013-ab4a-409d-8a27-47902a7f03a9

Installation

Using go install

go install github.com/codechamp1/certlens/cmd/certlens@latest

Build from source

git clone https://github.com/codechamp1/certlens
cd certlens
make install

This will build the binary and place it in your $GOPATH/bin directory.

Usage

certlens [flags]

Flags

certlens --help
Usage of certlens:
  -context string
        context to use from kubeconfig, if not set, the current context will be used
  -kubeconfig string
        path to a kubeconfig (default "~/.kube/config")
  -name string
        name of the secret to lens, if not set, all secrets will be listed
  -namespace string
        namespace to lens, if not set, all namespaces will be used

Example

certlens -kubeconfig ~/.kube/config -namespace my-namespace

Integrations

• k9s plugin: certlens can be used as a plugin inside k9s to inspect TLS secrets directly from the k9s UI.
  See compat/k9s/plugins.yml for configuration details.
• kubectl plugin: certlens can be used as a kubectl plugin. Run make kubectl-plugin to install it, then use kubectl certlens to access certlens as a kubectl plugin.