Kubernetes Reference & Tooling

A quick reference of common kubectl API discoveries, CRD inspections, and secret inspection plugins.

---

🌐 Gateway API Inspection

# Discover Gateway API resources supported by the cluster
kubectl api-resources --api-group gateway.networking.k8s.io

# Inspect GatewayClass, Gateway, and HTTPRoute objects
kubectl get gatewayclasses,gateways,httproutes -A

# Inspect CRDs installed by Envoy Gateway
helm show crds oci://docker.io/envoyproxy/gateway-helm --version v1.2.0

---

🔐 Decoding Kubernetes Secrets

Method 1: Using kubectl-view-secret (Krew Plugin)

# Install view-secret plugin
kubectl krew install view-secret

# View decoded secret values directly
kubectl view-secret -n default my-secret
kubectl view-secret -n argocd argocd-initial-admin-secret

Method 2: Native kubectl JSONPath

# Decode a specific key
kubectl get secret my-secret -n default -o jsonpath="{.data.password}" | base64 -d && echo

# View all decoded keys in a secret
kubectl get secret my-secret -n default -o json \
  | jq '.data | map_values(@base64d)'