First Scrub

Use scrubctl scrub when you have a local YAML or JSON resource and want sanitized output without connecting to a cluster.

scrubctl scrub -f deployment.yaml

You can also read from stdin:

scrubctl scrub < resource.yaml

The direct scrub path accepts any Kubernetes kind. Generic sanitization applies to every resource, and kind-specific cleanup applies to known resource types such as Deployment and Service.

Pipe Live Output

When invoked with no subcommand and YAML on stdin, scrubctl scrubs the resource directly:

oc get deploy/web -n my-app -o yaml | scrubctl
kubectl get deploy/web -n my-app -o yaml | scrubctl

This mode is useful for quick inspection because it does not require a curated namespace export.