reegnz

Inspecting Kubernetes JWT tokens

Start a cluster with a dummy workload

kind create cluster
kubectl apply -f cli.yaml
kubectl apply -f discovery.yaml

n1snt

Note

I’ve written a newer optimized 2026 version of this guide with a faster setup using Zinit + Starship and improved plugin loading.

This version avoids slow shell startups and works better with modern Zsh setups.

Updated guide: https://gist.github.com/n1snt/2cccc8aa5f7b645a7628d3512c70deb6

Oh my zsh.

smartameer

#!/bin/bash

function prompt_for_multiselect {

    # little helpers for terminal print control and key input
    GREEN='\033[00;32m'
    YELLOW='\033[00;33m'
    RESTORE='\033[0m'
    ESC=$( printf "\033")
    cursor_blink_on()   { printf "$ESC[?25h"; }

Dentrax

package main

import (
	"archive/tar"
	"bytes"
	"fmt"
	"github.com/google/go-containerregistry/pkg/crane"
	"github.com/google/go-containerregistry/pkg/name"
	v1 "github.com/google/go-containerregistry/pkg/v1"
	"github.com/google/go-containerregistry/pkg/v1/mutate"

Issif

package main

import (
	"bytes"
	"encoding/json"
	"fmt"
	"io"
	"log"
	"math/rand"
	"net/http"

dims

Folks, Leave me a comment / URL if something you like is missing!

Beginner Resources

Resource	Description
Kube Academy	https://kube.academy/
kuernetes-101	https://kube.academy/courses/kubernetes-101/
Docs Home	https://kubernetes.io/docs/home/
CKS CKA CKAD Simulator	https://killer.sh/

PatrLind

How to protect your ~/.kube/ configuration

I had a need to protect my Kubernetes config file on my computer against accidental or malicious change or reading, so I came up with this way of protecting the config files.

How it works

The ~/.kube folder is mounted using encfs. By using the --ondemand flag it will automatically ask for the encryption key/password when accessed and keep

vfarcic

######################################################
# Shipa                                              #
# A Kubernetes platform from developer's perspective #
# https://youtu.be/aCwlI3AhNOY                       #
######################################################

#########
# Setup #
#########

onelittlenightmusic

jr, jp, jb (alias to opa eval): Cheatsheet

jr, jp and jb are commands for JSON modification.

Basic usages

$ data='{"name":"chris", "friends":["alice", "bob"]}'
# jr
$ echo $data | jr 'i.name'

mvisonneau

git clone https://github.com/kubernetes/dns.git
cd dns
git checkout 1.17.0
make containers CONTAINER_BINARIES=node-cache
make containers CONTAINER_BINARIES=node-cache ARCH=arm64

docker tag gcr.io/k8s-staging-dns/k8s-dns-node-cache-amd64:1.17.0 mvisonneau/k8s-dns-node-cache-amd64:1.17.0
docker tag gcr.io/k8s-staging-dns/k8s-dns-node-cache-arm64:1.17.0 mvisonneau/k8s-dns-node-cache-arm64:1.17.0
docker push mvisonneau/k8s-dns-node-cache-amd64:1.17.0
docker push mvisonneau/k8s-dns-node-cache-arm64:1.17.0