├── README.md
├── LICENSE
└── kubectl-console


/README.md:
--------------------------------------------------------------------------------
 1 | # kubectl-console
 2 | 
 3 | A useful kubectl plugin that enables you to bash into any worker with root access and the host file system loaded. Can be used to collect artifacts from a worker to debug incidents. ex: runnig tcpdump
 4 | 
 5 | ## installation
 6 | 
 7 | Copy the kubectl-node file to system path (ex:$PATH)
 8 | 
 9 | ## Usage
10 | 
11 | `
12 | kubectl console 10.18.0.4
13 | `
14 | 
15 | 
16 | ## Demo
17 | [![asciicast](https://asciinema.org/a/9IDpInVMtO6FkKoUidt0wGwPS.svg)](https://asciinema.org/a/9IDpInVMtO6FkKoUidt0wGwPS)
18 | 


--------------------------------------------------------------------------------
/LICENSE:
--------------------------------------------------------------------------------
 1 | MIT License
 2 | 
 3 | Copyright (c) 2024 Subhi Al Hasan
 4 | 
 5 | Permission is hereby granted, free of charge, to any person obtaining a copy
 6 | of this software and associated documentation files (the "Software"), to deal
 7 | in the Software without restriction, including without limitation the rights
 8 | to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
 9 | copies of the Software, and to permit persons to whom the Software is
10 | furnished to do so, subject to the following conditions:
11 | 
12 | The above copyright notice and this permission notice shall be included in all
13 | copies or substantial portions of the Software.
14 | 
15 | THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
16 | IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
17 | FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
18 | AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
19 | LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
20 | OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
21 | SOFTWARE.
22 | 


--------------------------------------------------------------------------------
/kubectl-console:
--------------------------------------------------------------------------------
 1 | #!/usr/bin/env bash
 2 | 
 3 | set -eu
 4 | 
 5 | usage() {
 6 |   cat <<EOF
 7 | 
 8 | Usage: kubectl console x.x.x.x
 9 | 
10 | Run a command in a running containers
11 | EOF
12 |   exit 0
13 | }
14 | 
15 | to_json() {
16 |   text="$*"
17 |   p=""
18 |   for i in $text; do
19 |     [[ -n "$p" ]] && p+=", "
20 |     p+="\"$i"\"
21 |   done
22 |   echo -en "$p"
23 | }
24 | 
25 | 
26 | [ $# -eq 0 ] && usage
27 | 
28 | KUBECTL="$(type -p kubectl)"
29 | WORKER=$1
30 | 
31 | 
32 | temp_pod="kubectl-console-temp-privileged-pod-${WORKER//./-}-${RANDOM}"
33 | 
34 | 
35 | read -r -d '' OVERRIDES <<EOF || :
36 | {
37 |     "apiVersion": "v1",
38 |     "spec": {
39 |         "hostPID":true,
40 |         "hostNetwork": true,
41 |         "hostIPC": true,
42 |         "volumes":[
43 |         {"name":"host-volume","hostPath":{"path":"/","type":"Directory"}}
44 |         ],
45 |         "containers": [
46 |             {
47 |                 "image": "docker",
48 |                 "name": "'$temp_pod'",
49 |                 "stdin": true,
50 |                 "stdinOnce": true,
51 |                 "securityContext": { "privileged":true, "allowPrivilegeEscalation":true },
52 |                 "tty": true,
53 |                 "restartPolicy": "Never",
54 |                 "command": ["/bin/bash"],
55 |                 "volumeMounts": [{
56 |                     "mountPath": "/",
57 |                     "name": "host-volume"
58 |                 }]
59 |             }
60 |         ],
61 | 
62 |         "nodeSelector": {"kubernetes.io/hostname": "'$WORKER'"}
63 |     }
64 | }
65 | EOF
66 | 
67 | function cleanup()
68 | {
69 |   echo -e "Deleting prvillaged pod $temp_pod on worker $WORKER...\n"
70 | 
71 |   $KUBECTL delete pod $temp_pod
72 | 
73 | }
74 | 
75 | trap cleanup EXIT SIGINT
76 | 
77 | echo -e "Creating a prvillaged pod '$temp_pod' on worker $WORKER...\n"
78 | 
79 | eval "$KUBECTL" run -it --restart=Never --image=docker --overrides="'${OVERRIDES}'" "$temp_pod"


--------------------------------------------------------------------------------