eks-get-token.sh

eks-get-token.sh

#!/bin/bash

# inspired by https://www.youtube.com/watch?v=4l4Kuds8O3s

cluster=dev

# grab the k8s api server endpoint and the encoded authentication token
eks_token=$(aws eks get-token --cluster-name ${cluster} | jq .status.token --raw-output)
eks_endpoint=$(aws eks describe-cluster --name ${cluster} | jq .cluster.endpoint --raw-output)

# decode the token to see what's going on under the hood (this patially fails but the essential details are clear)
echo ${eks_token} | cut -d. -f2 | base64 --decode

# send a request to the endpoint which returns a list of methods
curl -k -H "x-k8s-aws-id: ${cluster}" -H "Authorization: Bearer ${eks_token}" ${eks_endpoint}

# hit the /version method
curl -k -H "x-k8s-aws-id: ${cluster}" -H "Authorization: Bearer ${eks_token}" ${eks_endpoint}/version