ejohn20

jwt-decode() {
  jq -R 'split(".") | .[1] | @base64d | fromjson' <<<"$1"
}

jwt-header-decode() {
  jq -R 'split(".") | .[0] | @base64d | fromjson' <<<"$1"
}

ejohn20

#!/bin/bash

while IFS= read -r sa_metadata; do
  service_account=$(jq -r .name <<<"${sa_metadata}")
  namespace=$(jq -r .namespace <<<"${sa_metadata}")
  sp_client_id=$(jq -r .servicePrincipalClientId <<<"${sa_metadata}")
  ad_sp_data=$(az ad sp show --id "${sp_client_id}")
  ad_sp_id=$(jq -r '.id' <<<"${ad_sp_data}")
  ad_sp_display_name=$(jq -r '.displayName' <<<"${ad_sp_data}")

ejohn20

#!/bin/bash

CLUSTER_NAME="$1"

while IFS= read -r pod_identity_assn; do
  association_id=$(jq -r .associationId <<<"${pod_identity_assn}")
  service_account=$(jq -r .serviceAccount <<<"${pod_identity_assn}")
  namespace=$(jq -r .namespace <<<"${pod_identity_assn}")
  association=$(aws eks describe-pod-identity-association --cluster "${CLUSTER_NAME}" --association-id "${association_id}")
  role_arn=$(jq -r '.association.roleArn' <<<"${association}")

ejohn20

#!/bin/bash

while IFS= read -r sa_metadata; do
  service_account=$(jq -r .name <<<"${sa_metadata}")
  namespace=$(jq -r .namespace <<<"${sa_metadata}")
  role_arn=$(jq -r .rolearn <<<"${sa_metadata}")
  role_name=$(jq -r '.rolearn | split("/") | .[1]' <<<"${sa_metadata}")

  echo "Service Account: system:serviceaccount:${namespace}:${service_account}"
  echo "Role ARN: ${role_arn}"

ejohn20

#!/bin/bash

function escapeXml() {
    export xmlEncoded=$(echo "$1" | sed 's/&/\&amp;/g; s/</\&lt;/g; s/>/\&gt;/g; s/"/\&quot;/g; s/'"'"'/\&#39;/g')
}

function createJUnitTestSuites() {
    if [[ -f cfn_nag_junit.xml ]]; then
        rm cfn_nag_junit.xml
    fi

ejohn20

cd usr/bin/
wget https://github.com/dmayer/idb/raw/master/lib/utils/keychain_editor/keychaineditor
chmod keychaineditor 0744
keychaineditor --action dump --find "<appname>"