Use curl instead of kubectl

curl.sh

#!/bin/bash

#
# download yq
#

curl -fsSL https://github.com/mikefarah/yq/releases/download/v4.43.1/yq_linux_amd64 -o /usr/local/bin/yq
chmod +x /usr/local/bin/yq

#
# get certs from kubeconfig
#

KEY_DATA="$(yq eval '.users[] | select(.name == "kubernetes-admin") | .user.client-key-data' ~/.kube/config | base64 -d)"
CERT_DATA="$(yq eval '.users[] | select(.name == "kubernetes-admin") | .user.client-certificate-data' ~/.kube/config | base64 -d)"
CA_DATA="$(yq eval '.clusters[] | select(.name == "kubernetes") | .cluster.certificate-authority-data' ~/.kube/config | base64 -d)"

#
# deploy pod
#

curl -X POST \
  --cacert <(echo "${CA_DATA}") \
  --cert <(echo "${CERT_DATA}") \
  --key <(echo "${KEY_DATA}") \
  -H "Content-Type: application/json" \
  -H "Accept: application/json" \
  --data-binary @<(yq eval -j pod.yaml) \
  https://192.168.50.101:6443/api/v1/namespaces/default/pods?fieldManager=kubectl-create

#
# list pods
#

curl \
  --cacert <(echo "${CA_DATA}") \
  --cert <(echo "${CERT_DATA}") \
  --key <(echo "${KEY_DATA}") \
  -H "Accept: application/json" \
  https://192.168.50.101:6443/api/v1/namespaces/default/pods?limit=5

#
# delete pod
#

curl -X DELETE \
  --cacert <(echo "${CA_DATA}") \
  --cert <(echo "${CERT_DATA}") \
  --key <(echo "${KEY_DATA}") \
  -H "Accept: application/json" \
  -H "Content-Type: application/json" \
  https://192.168.50.101:6443/api/v1/namespaces/default/pods/pod

cat ~/.kube/config | tee \
  >(yq eval '.users[] | select(.name == "kubernetes-admin") | .user.client-key-data' - | base64 -d > /tmp/kube-api-key.pem) \
  >(yq eval '.users[] | select(.name == "kubernetes-admin") | .user.client-certificate-data' - | base64 -d > /tmp/kube-api-cert.pem) \
  >(yq eval '.clusters[] | select(.name == "kubernetes") | .cluster.certificate-authority-data' - | base64 -d > /tmp/kube-api-ca.pem) > /dev/null

curl \
  --cacert /tmp/kube-api-ca.pem \
  --cert /tmp/kube-api-cert.pem \
  --key /tmp/kube-api-key.pem \
  https://192.168.50.101:6443/api/v1/namespaces/default/pods?limit=5

curl -k \
  -H "Accept: application/json" \
  -H "Authorization: Bearer $(aws eks get-token --cluster-name eksworkshop-eksctl | jq -r '.status.token')" \
  https://C15918F6AD0190339DC3E37DF96941E4.yl4.eu-west-1.eks.amazonaws.com/api/v1/namespaces/default/pods?limit=5

ref. https://github.com/kubernetes-sigs/aws-iam-authenticator#api-authorization-from-outside-a-cluster