toolbox
Docker image with useful tools for troubleshooting purposes in Kubernetes
⚠️ Running scripts directly from a URL or docker images from a container registry is a big security no-no: that's the reason why the source of the project is hosted on gitHub, so you can review it.
users
As a best practice, Kubernetes clusters should not allow running containers as root, therefore the toolbox image uses a "toolbox" (UID=1100) user and a "toolbox" group (GID=1100)
packages
Please find hereunder the list of packages on top of the alpine base image:
- bind-tools
- bash
- tcpdump
- curl
- jq
- kubectl
- aws-cli
- tshark
- py3-jwt
custom tool
The image comes with a custom tool in golang. The purpose of the tool is to create a simple webservice and print the following information:
- Version
- Hostname
- Environment variables
- HTTP request headers
Runtime (locally)
# Simple test, running the custom tool:
$ docker run -it --rm mattiaperi/toolbox:latest # and visit http://localhost:8080
# Simple test, opening a shell:
$ docker run -it --rm mattiaperi/toolbox:latest /bin/bash
# Simple test, running the custom tool on a specific port and testing the custom header:
$ PORT="8090"; docker run -it --rm -p 8080:${PORT} --env PORT=${PORT} mattiaperi/toolbox:latest
$ curl -XGET -H'Custom-Header: true' http://localhost:8080Runtime (Kubernetes)
$ kubectl run -it --rm --restart=Never --image=mattiaperi/toolbox:latest toolbox -n kube-system -- /bin/bash
# Example of commands:
$ nc -vz -w1 google.com 443
$ curl -XGET -H'Custom-Header: true' https://google.com:443
$ ./main # to start the custom tool