This is a kubectl plugin of TCP proxy. It allows you to connect to a remote host via port-forward and socat pod as follows:
Local port
↓
Pod (socat)
↓
Remote host:port
Install the latest release from Homebrew or GitHub Releases.
# Homebrew
brew install int128/tap/kubectl-socatTo connect to www.example.com:80 from local port 10000:
% kubectl socat 10000:www.example.com:80
I0307 22:10:21.520991 76486 external_forwarder.go:52] creating a pod
I0307 22:10:21.586707 76486 external_forwarder.go:58] created pod default/socat-dkgm4
I0307 22:10:21.611300 76486 pod.go:57] pod default/socat-dkgm4 is still Pending
I0307 22:10:22.181070 76486 pod.go:57] pod default/socat-dkgm4 is still Pending
I0307 22:10:23.274268 76486 external_forwarder.go:106] starting port-forwarder from 10000 to default/socat-dkgm4:10000
I0307 22:10:23.335257 76486 pod.go:87] default/socat-dkgm4/tunnel1: 2021/03/07 13:10:23 socat[1] W ioctl(5, IOCTL_VM_SOCKETS_GET_LOCAL_CID, ...): Not a tty
I0307 22:10:23.336618 76486 pod.go:87] default/socat-dkgm4/tunnel1: 2021/03/07 13:10:23 socat[1] N listening on AF=2 0.0.0.0:10000
Forwarding from 127.0.0.1:10000 -> 10000Press ctrl-c to stop the command. It cleans up the socat pod.
As well as you can create multiple tunnels:
% kubectl socat 15432:postgresql.staging:5432 13306:mysql.staging:3306kubectl socat [flags] LOCAL_PORT:REMOTE_HOST:REMOTE_PORT...
Flags:
--add_dir_header If true, adds the file directory to the header of the log messages
--alsologtostderr log to standard error as well as files
--as string Username to impersonate for the operation
--as-group stringArray Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
--cache-dir string Default cache directory (default "~/.kube/cache")
--certificate-authority string Path to a cert file for the certificate authority
--client-certificate string Path to a client certificate file for TLS
--client-key string Path to a client key file for TLS
--cluster string The name of the kubeconfig cluster to use
--context string The name of the kubeconfig context to use
-h, --help help for kubectl
--image string Pod image (default "ghcr.io/int128/kubectl-socat/mirror/alpine/socat:latest")
--insecure-skip-tls-verify If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
--kubeconfig string Path to the kubeconfig file to use for CLI requests.
-l, --local-port int local port
--log_backtrace_at traceLocation when logging hits line file:N, emit a stack trace (default :0)
--log_dir string If non-empty, write log files in this directory
--log_file string If non-empty, use this log file
--log_file_max_size uint Defines the maximum size a log file can grow to. Unit is megabytes. If the value is 0, the maximum file size is unlimited. (default 1800)
--logtostderr log to standard error instead of files (default true)
-n, --namespace string If present, the namespace scope for this CLI request
--one_output If true, only write logs to their native severity level (vs also writing to each lower severity level)
-r, --remote-host string remote host:port
--request-timeout string The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests. (default "0")
-s, --server string The address and port of the Kubernetes API server
--skip_headers If true, avoid header prefixes in the log messages
--skip_log_headers If true, avoid headers when opening log files
--stderrthreshold severity logs at or above this threshold go to stderr (default 2)
--tls-server-name string Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used
--token string Bearer token for authentication to the API server
--user string The name of the kubeconfig user to use
-v, --v Level number for the log level verbosity
--version version for kubectl
--vmodule moduleSpec comma-separated list of pattern=N settings for file-filtered loggingThis is an open source software licensed under Apache License 2.0. Feel free to open issues and pull requests for improving code and documents.