Skip to content

Instantly share code, notes, and snippets.

@superseb
Last active September 18, 2019 14:05
Show Gist options
  • Save superseb/c6e8581eef5d01518b17544c07ea4032 to your computer and use it in GitHub Desktop.
Save superseb/c6e8581eef5d01518b17544c07ea4032 to your computer and use it in GitHub Desktop.
EKS in Rancher debug

EKS in Rancher debug

# Configure CLUSTERID (can be found in UI)
CLUSTERID=c-tc6mc

# Get service account token, endpoint and ca certificate
docker exec $(docker  ps | grep -E "rancher/rancher:|rancher/rancher |rancher/rancher@|rancher_rancher" | awk '{ print $1 }') kubectl  -n cattle-system get secret "c-${CLUSTERID}" -o json | docker run -i oildex/jq:1.6 jq -r '.data.cluster  | @base64d' | docker run -i oildex/jq:1.6 jq -r '.rootCACert | @base64d' > ca.crt
docker exec $(docker  ps | grep -E "rancher/rancher:|rancher/rancher |rancher/rancher@|rancher_rancher" | awk '{ print $1 }') kubectl  -n cattle-system get secret "c-${CLUSTERID}" -o json | docker run -i oildex/jq:1.6 jq -r '.data.cluster  | @base64d' | docker run -i oildex/jq:1.6 jq -r '.serviceAccountToken' > token
docker exec $(docker  ps | grep -E "rancher/rancher:|rancher/rancher |rancher/rancher@|rancher_rancher" | awk '{ print $1 }') kubectl  -n cattle-system get secret "c-${CLUSTERID}" -o json | docker run -i oildex/jq:1.6 jq -r '.data.cluster  | @base64d' | docker run -i oildex/jq:1.6 jq -r '.endpoint' > endpoint

# Use extracted info to query cluster
kubectl --token="$(cat token)" --server="$(cat endpoint)" --certificate-authority=ca.crt get nodes
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment