decode_kubernetes_secrets.py

#!/usr/bin/env python3
'''
A very simple kubernetes secrets dump tool. You can use it like this:
# kubectl get secret -o yaml -A | python decode_secrets.py
'''

import sys
import yaml
import base64

MAX_LENGTH = 120


if sys.argv[1:]:
    with open(sys.argv[1]) as fh:
        data = yaml.load(fh)
else:
    data = yaml.load(sys.stdin)


for item in data['items']:
    data = item.pop('data')
    metadata = item.pop('metadata')

    for key, value in data.items():
        key = '{namespace}.{name}.{key}'.format(key=key, **metadata)
        value = base64.b64decode(value).decode('utf-8')
        if value[MAX_LENGTH:]:
            value = value[:MAX_LENGTH - 3] + '...'

        print(f'{key}={value}')