cloudlogin (Cloud.ru)

cloudlogin

Cloud.ru utility that obtains and refreshes kubectl tokens for Evolution Managed Kubernetes from personal access keys

CLIMedium riskRussian stack

cloud-ru-tech/cloudlogin

Install

tar -xzf <archive_name>
sudo mv cloudlogin /usr/local/bin/
cloudlogin help

For Linux and macOS. On Windows extract to C:\Program Files\cloudlogin and add it to PATH.

This is third-party code. Review the repository files before installing.

What it does

Obtains a user token from Cloud.ru personal access keys and reissues it automatically when it expires. It is required to connect kubectl to an Evolution Managed Kubernetes cluster. The token is cached in $HOME/.cloudru/.token. It can print the current token and convert a downloaded kubeconfig into the right format.

Who it is for. DevOps engineers and developers who work with Kubernetes on Cloud.ru.

Good fit when

  • You need kubectl access to an Evolution Managed Kubernetes cluster
  • An agent in the terminal runs kubectl against a Cloud.ru cluster
  • You need to convert an old kubeconfig to the cloudlogin format

Not a fit when

  • Your Kubernetes cluster is not on Cloud.ru
  • Personal access keys must not be stored on this machine

Example request

Check the connection to my Cloud.ru cluster with kubectl cluster-info

Limitations

Installed manually from an archive; the README mentions no package manager. Works only with Cloud.ru personal access keys and the id.cloud.ru endpoint. It is an auth helper, not a cluster management tool.

How to disable. Remove the cloudlogin binary from /usr/local/bin or your PATH directory, remove the keys from kubeconfig and delete the token cache at $HOME/.cloudru/.token.

Security check

  • Uses Cloud.ru personal access keys
  • Caches the cluster access token on disk
  • Installed as a downloaded binary

README in short

cloudlogin obtains and refreshes a Cloud.ru user token and is required for kubectl with Evolution Managed Kubernetes. The README covers installation on Linux, macOS and Windows, kubeconfig setup via environment variables or the file, and connection checks. Viewing the token and converting kubeconfig with convert-kubeconfig are described separately.

FAQ

Where is the token stored?

After a kubectl call, the token is cached in $HOME/.cloudru/.token.

How do I see the token?

Set CLOUDRU_KEY_ID and CLOUDRU_SECRET_ID and run cloudlogin get-token.

Kubernetes MCP

MCP Server Kubernetes

Editors’ pick

MCP server for managing a Kubernetes cluster through kubectl and Helm, with a non-destructive mode

MCP serverHigh risk1.6K
Editors’ pick

HashiCorp's official MCP server for the Terraform Registry and HCP Terraform: providers, modules, policies and workspaces

MCP serverHigh risk1.5K

CLI for full-cycle CI/CD to Kubernetes: image builds, Helm-based deploys and container registry cleanup

CLIHigh risk4.7K

Terraform Skill

Terraform & OpenTofu Skill for AI Agents

A Terraform and OpenTofu best-practices skill: tests, modules, state, CI/CD and security scanning for AWS, Azure and GCP

SkillLow risk2.3K