Skip to content

Instantly share code, notes, and snippets.

@ryran

ryran/check-etcd-secret-certs.sh

Created June 20, 2019 14:49
Show Gist options

  • Select an option

    Learn more about clone URLs
  • Save ryran/f0a0da3df85df228068de2b06e3d78a5 to your computer and use it in GitHub Desktop.

Select an option

Learn more about clone URLs
Save ryran/f0a0da3df85df228068de2b06e3d78a5 to your computer and use it in GitHub Desktop.
Download ZIP

Revisions

  1. ryran created this gist Jun 20, 2019.
    19 changes: 19 additions & 0 deletions check-etcd-secret-certs.sh
    View file
    Original file line number Diff line number Diff line change
    @@ -0,0 +1,19 @@
    #!/bin/bash

    tmp=$(mktemp -d)
    trap "cd - >/dev/null; rm -rf $tmp" EXIT
    cd $tmp

    echo >&2
    echo "Checking expiration dates for all certs in all namespaces ..." >&2
    echo "(Pipe to 'sort' to see soonest-to-expire at the top)" >&2
    echo >&2

    for ns in $(oc get ns --no-headers | awk '{print $1}'); do
    for secret in $(oc get secrets -n $ns | awk 'BEGIN{IGNORECASE=1}; $2~/tls/ {print $1}'); do
    oc -n $ns extract secret/$secret --confirm --keys tls.crt >/dev/null || continue
    [[ -f tls.crt ]] || continue
    enddate=$(openssl x509 -noout -enddate -in tls.crt | cut -d= -f2)
    echo -e "$(date --date="$enddate" +"%F %R %Z")\t$ns / $secret"
    done
    done