Skip to main content
100%

patch all deployments and stateful sets containers in your kubernetes cluster for log4shell CVE-2021-44228 by appending environment variable that prevents the exploit. .

✓ Published0🌍 Public
Aaharonh
Last edited Dec 15, 2021
Created on Dec 15, 2021

This example demonstrates a Kubernetes remediation script that scans all deployments and stateful sets across every namespace, appending the `LOG4J_FORMAT_MSG_NO_LOOKUPS=true` environment variable to any container lacking it, thereby mitigating the log4shell CVE-2021-44228 exploit. The code uses the official `kubernetes` Python client, loading the kubeconfig via `config.load_kube_config()` and leveraging `AppsV1Api` to list and patch resources with `list_deployment_for_all_namespaces()` and `patch_namespaced_deployment()`. It iterates through each app, checks existing environment variables for the marker, and only applies patches when changes are required, printing progress and error messages for each modified workload.

AI-generated description

Similar vizzes

Loading thumbnail…

check if any JVMs in kubernetes cluster are vulnerable to log4shell CVE-2021-44228. only checks java versions for those exploitable using the initial exploit. be aware that there are other exploits that can work on any java version.

This visualization scans every pod in a Kubernetes cluster to determine whether its JVM version is vulnerable to CVE-2021-44228 (Log4Shell). It shows a tabular output of pod namespace, name, container, Java version, and a boolean vulnerability flag, skipping pods that have succeeded or lack the Java executable. The script uses the Kubernetes Python client’s `CoreV1Api` to list pods and `connect_get_namespaced_pod_exec` with a streaming response to run `java -version` in each container, parsing the stderr with regex to extract version numbers. It applies a hard-coded threshold check for Java 6, 7, 8, and 11 versions, explicitly noting that only the initial exploit vector is covered.

Aaharonh
65% match
Loading thumbnail…

Gist 682c0ed12e0006118fb5287146247844

This example shows a Bash script that automates the migration of Kubernetes deployment configurations and Argo CD application manifests for a service across multiple environments. It creates new cluster directories by copying existing ones, generates an ingress DNS patch file, and updates the kustomization.yaml with the new patch reference. The script also writes a kustomization file for the Argo application that points to the newly created deployment path. It uses the `gsed` command for in-place text replacement and `echo` to generate YAML content, operating on files within a specified current working directory.

Aamazingandyyy
52% match
Loading thumbnail…

Gist 22232677b43d0904992cd489d2aafdf0

This example demonstrates a shell script that automates the setup of a Linux scavenger hunt lab environment. It creates a directory, clones a Git repository from GitLab, initializes submodules, and uses Vagrant to launch a virtual machine. The script then runs a PowerShell reprovisioner script and fixes line endings with `dos2unix` before executing the reprovisioning process. The visualization—if any—is not present; the code focuses purely on environment provisioning using Git, Vagrant, and PowerShell APIs.

PPeleke
49% match
Loading thumbnail…

Gist 63ef47e94685d3929913be63c1e2fe2d

The visualization demonstrates a shell script that repairs a security flaw in the Pico-8 binary by removing a hardcoded RPATH pointing to `/usr/local/lib`, which is inappropriate for Arch Linux. It shows the `fix-rpath.sh` file using the `chrpath` command with the `--delete` flag to strip the insecure path. The example highlights a command-line data-processing task rather than graphical rendering, relying on the system's `chrpath` utility to inspect and modify ELF binary metadata. No JavaScript libraries or charting APIs are involved; the focus is on the script's logic and the specific tool invocation.

Aadamscott
47% match
Loading thumbnail…

Gist 0711211684d6b9f38dc69fe06a29d844

This example shows a shell script that automates the setup of a Linux scavenger hunt lab environment by downloading a deploy key, cloning a GitLab repository, and running Vagrant to provision the machine. The script uses `curl` to fetch an SSH key, `git clone` with submodules to pull the lab definitions, and `vagrant up` to launch the virtual machine. It then extracts the SSH hostname and port from `vagrant ssh-config` using `grep` and `awk`, printing connection instructions for the student user.

PPeleke
46% match
Loading thumbnail…

Kubernetes cheat sheet

This cheat sheet shows operational commands for debugging a Kubernetes cluster, organized by component such as K8s cluster, etcd, networking, and worker nodes. It lists shell commands and kubectl invocations for retrieving cluster info, viewing logs, and inspecting DNS or node status, with links to official documentation. The plain-text markdown file uses code blocks and headings to group commands by topic, relying on Kubernetes APIs like `kubectl get`, `kubectl logs`, and `journalctl`. It does not include charts or interactive elements; the rendering is static text.

Aankuagar
46% match
Loading thumbnail…

Gist 79abf411748d1f79ce072fdc8d879407

This example scripts the automated deployment of a Linux scavenger-hunt lab environment. It downloads a private SSH key from a gist, clones a GitLab repository with submodules, and provisions the machine with Vagrant. It then parses `vagrant ssh-config` output to extract the hostname and port, printing the final SSH connection command for the student.

PPeleke
46% match
Loading thumbnail…

Copy kubernetes secrets between namespaces

This example demonstrates a shell one-liner that copies Kubernetes secrets from one namespace to another. It uses `kubectl get secrets` with JSON output to retrieve the source secrets, then pipes the result through `jq` to rewrite the `metadata.namespace` field to the target namespace. The transformed JSON is applied directly with `kubectl apply -f -`. The visualization highlights the command pipeline’s data flow, relying on the Kubernetes CLI and jq for JSON manipulation, with no additional charting or rendering libraries involved.

TThanad
46% match