Decode a Secret

Dump and base64-decode all fields in a k8s Secret

kubectl get secret <name> -n <ns> -o jsonpath='{.data}' | python3 -c "import sys,json,base64; [print(k,'=',base64.b64decode(v).decode()) for k,v in json.load(sys.stdin).items()]"
tool
k8s-debug27 commands
tags
secretsdebug

More k8s-debug commands

  • List all resources in namespace
    kubectl api-resources --verbs=list --namespaced -o name | xargs -I{} kubectl get {} -n <ns> --ignore-not-found

    Enumerate every resource type in a namespace — useful for auditing

  • JSONPath on any resource
    kubectl get pods -A -o jsonpath='{range .items[*]}{.metadata.namespace}\t{.metadata.name}\t{.status.phase}\n{end}'

    Extract specific fields from k8s API objects without jq

  • Debug pod with ephemeral container
    kubectl debug -it mypod --image=busybox --target=app

    Attach an ephemeral debug container to a running pod

  • Run debug pod on node
    kubectl debug node/my-node -it --image=ubuntu

    Get privileged shell on a cluster node via debug pod

  • Exec into sidecar container
    kubectl exec -it mypod -c sidecar-name -- /bin/sh

    Open shell in a specific container of a multi-container pod

all 27 k8s-debug commands