Skip to content

Instantly share code, notes, and snippets.

View fonsecas72's full-sized avatar

Hugo Fonseca fonsecas72

View GitHub Profile
@fonsecas72
fonsecas72 / gist:3cae01bf199264acd703f4d0dccf2343
Created June 25, 2021 10:00
How to copy secrets to another namespace
kubectl -n source-namespace get secret some-secret -o yaml --export | kubectl -n dest-namespace apply -f -
@fonsecas72
fonsecas72 / gist:c822f5c7b65f0acfe2b6b837b3a8f515
Created June 25, 2021 09:59
How to check a cert secrt in k8s
kubectl get secret some-cert -o json | jq -r '.data."tls.crt" | @base64d ' | openssl x509 -text -noout
@fonsecas72
fonsecas72 / gist:df5b1b7af65c8be5ccbad27699c91514
Created February 5, 2021 19:39
get plain text of all k8s secrets
kubectl get secret my-user-pass -o json | jq '.data | map_values(@base64d)'
@fonsecas72
fonsecas72 / gist:0ef04265a3d0c5822e5d441b8d2de1f8
Created January 11, 2021 16:39
Installing polipo on ubuntu 20.04 20.10
wget http://archive.ubuntu.com/ubuntu/pool/universe/p/polipo/polipo_1.1.1-8_amd64.deb
sudo dpkg -i polipo_1.1.1-8_amd64.deb
@fonsecas72
fonsecas72 / q.sh
Created November 2, 2020 15:11
create terraform vars file based on AWS ip-ranges
#!/bin/bash
set -e
DIR="$( cd "$( dirname "${BASH_SOURCE[0]}" )" >/dev/null 2>&1 && pwd )"
echo "cloudfront_ips = <<-EOF" > $DIR/cloudfront_ips.auto.tfvars && curl -s https://ip-ranges.amazonaws.com/ip-ranges.json | jq -r '.prefixes[] | select(.service=="ROUTE53" or .service=="CLOUDFRONT") | .ip_prefix' >> $DIR/cloudfront_ips.auto.tfvars && echo EOF >> $DIR/cloudfront_ips.auto.tfvars
@fonsecas72
fonsecas72 / q.sh
Last active October 31, 2020 12:59
Kubectl - Getting all the ingresses that have mod-security annotation enabled - nginx-ingress
kubectl get ingress -A -o jsonpath='{range .items[?(@.metadata.annotations.nginx\.ingress\.kubernetes\.io/enable-modsecurity=="true")]}{.metadata.namespace}{"\t"}{.metadata.name}{"\n"}{end}'