Skip to content

Instantly share code, notes, and snippets.

@yashwanth-l

yashwanth-l/step-cli-jwt-inspect.yaml

Last active September 25, 2024 08:17
Show Gist options
  • Save yashwanth-l/ef615c20520918bfb57d816592cc4883 to your computer and use it in GitHub Desktop.
Save yashwanth-l/ef615c20520918bfb57d816592cc4883 to your computer and use it in GitHub Desktop.
Download ZIP
step-cli-jwt-inspect.yaml
Raw
step-cli-jwt-inspect.yaml
---
apiVersion: v1
kind: Pod
metadata:
name: step-cli-jwt-inspect
namespace: ${NAMESPACE}
spec:
serviceAccountName: ${SERVICE_ACCOUNT_NAME}
volumes:
- name: jwt-token
projected:
sources:
- serviceAccountToken:
path: jwt-token
expirationSeconds: 3600
# audience: test
containers:
- image: smallstep/step-cli
name: step-cli
command:
- /bin/sh
- -c
- cat /var/run/secrets/tokens/jwt-token | step crypto jwt inspect --insecure
resources:
requests:
cpu: 250m
memory: 512Mi
ephemeral-storage: 1Gi
securityContext:
capabilities:
drop:
- ALL
allowPrivilegeEscalation: false
volumeMounts:
- mountPath: /var/run/secrets/tokens
name: jwt-token
readOnly: true
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment