kubectl-secret-data
What is it?
This is a kubectl plugin for finding decoded secret data. Since kubectl only outputs base64-encoded secrets, it makes it difficult to check the secret value. It helps finding a decoded secret data you want with productive search flags.
Usage
A kubectl plugin for finding decoded secret data.
Usage:
kubectl-secret-data [flags]
Flags:
-A, --all-namespace If present, find secrets from all namespaces
--cluster string The name of the kubeconfig context to use
--context string The name of the kubeconfig cluster to use
-h, --help help for kubectl-secret-data
--kubeconfig string Path to the kubeconfig file to use for CLI requests
-m, --multi-namespaces string The multi namespacess separated by "," where secrets exist.
-n, --namespace string The namespaces where secrets exist
-o, --output string The format of the result (default "yaml")
-E, --regex string The regular expression of secret name
Example
List all secret data in ns-1 in yaml(default).
kubectl-secret-data -n ns-1
# OR
kubectl-secret-data -n ns-1 -o yaml
Output
ns-1: # Namespace
- private-data-a: # Secrete Name
password: lkiugubau # Secret Data Key
user: smith
- private-data-b:
password: hiahgeoawngleawngaw
user: bob
- super-private-data-a:
password: hoge
user: foo
- super-private-data-b:
password: fuga
user: bar
List all secret data in ns-1 in json.
kubectl-secret-data -n ns-1 -o json
Output
{
"ns-1": [
{
"private-data-a": {
"password": "lkiugubau",
"user": "smith"
}
},
{
"private-data-b": {
"password": "hiahgeoawngleawngaw",
"user": "bob"
}
},
{
"super-private-data-a": {
"password": "hoge",
"user": "foo"
}
},
{
"super-private-data-b": {
"password": "fuga",
"user": "bar"
}
}
]
}
List all secret data in ns-1 and ns-2 in json. You can specify multiple namespace.
kubectl-secret-data -m ns-1,ns-2 -o json
#OR
kubectl-secret-data --multi-namespaces ns-1,ns-2 -o json
Output
{
"ns-1": [
{
"private-data-a": {
"password": "lkiugubau",
"user": "smith"
}
},
{
"private-data-b": {
"password": "hiahgeoawngleawngaw",
"user": "bob"
}
},
{
"super-private-data-a": {
"password": "hoge",
"user": "foo"
}
},
{
"super-private-data-b": {
"password": "fuga",
"user": "bar"
}
}
],
"ns-2": [
{
"important-value-x": {
"password": "abcd",
"user": "sam"
}
},
{
"important-value-y": {
"password": "xyz",
"user": "alice"
}
}
]
}
List secret data by matching regex in ns-1 in json.
kubectl-secret-data -n ns-1 -E "^super-.*"
Output
{
"ns-1": [
{
"super-private-data-a": {
"password": "hoge",
"user": "foo"
}
},
{
"super-private-data-b": {
"password": "fuga",
"user": "bar"
}
}
]
}
Installing
Pre-built binaries
See the release page for the full list of pre-built assets.
Linux
curl -L -o kubectl-secret-data.tar.gz https://github.com/kskumgk63/kubectl-secret-data/releases/download/v0.2.0/kubectl-secret-data_0.2.0_Linux_arm64.tar.gz
tar -xvf kubectl-secret-data.tar.gz
mv kubectl-secret-data /usr/local/bin/kubectl-secret-data
OSX
curl -L -o kubectl-secret-data.tar.gz https://github.com/kskumgk63/kubectl-secret-data/releases/download/v0.2.0/kubectl-secret-data_0.2.0_Darwin_arm64.tar.gz
tar -xvf kubectl-secret-data.tar.gz
mv kubectl-secret-data /usr/local/bin/kubectl-secret-data
Source
go get github.com/kskumgk63/kubectl-secret-data
1 Nov 3, 2021
0 Jan 11, 2022
6 Nov 18, 2021
2.5k Jan 4, 2023
70 Nov 28, 2022
12 Aug 14, 2022
160 Dec 22, 2022
3 Jul 21, 2022
15 Dec 7, 2022
16 Jul 17, 2022
9 Oct 13, 2022
3 Mar 1, 2022
2 Mar 9, 2022
2 May 11, 2022
14 Jun 9, 2022
11 Dec 7, 2022
1.1k Jan 8, 2023
5 Dec 16, 2022
0 Dec 20, 2021