From 7756e6fd160f7ec1706fa42baef49a87abf4910c Mon Sep 17 00:00:00 2001
From: David Jansen <dj@djansen.de>
Date: Wed, 6 Jul 2022 12:57:57 +0200
Subject: [PATCH 1/2] feat: flag to ignore cluster-info check

on OpenShift clusters it is common to have users/developers accounts
with stripped down permissions. E.g. no access to "kube-system" at all,
no listing of namespaces, ...

kube-dump ns -n mynamespace -r configmap
Error from server (Forbidden): services is forbidden: User
                               "abc" cannot list resource
                               "services" in API group "" in the
                               namespace "kube-system"

Which makes kube-dump not able to dump resources, even if it could
access the resources in the namespace itself.

This commit adds the option to ignore the cluster-info check.
---
 kube-dump | 13 ++++++++++---
 1 file changed, 10 insertions(+), 3 deletions(-)

diff --git a/kube-dump b/kube-dump
index ad27147..953c39c 100755
--- a/kube-dump
+++ b/kube-dump
@@ -98,6 +98,7 @@ Flags:
       --detailed                Do not remove detailed state specific fields
       --output-by-type          Organize output into directories by resource type
       --flat                    Organize all resources of the same type in the same file
+      --ignore-cluster-info     Ignore cluster-info fail (useful for OpenShift w/o full admin permissions)
 
 Kubernetes flags:
   -n, --namespaces              List of kubernetes namespaces
@@ -150,7 +151,7 @@ args=$(
   getopt \
     -l "namespaces:,namespaced-resources:,cluster-resources:" \
     -l "kube-config:,kube-context:,kube-cluster:,kube-insecure-tls" \
-    -l "help,silent,destination:,force-remove,detailed,output-by-type,flat" \
+    -l "help,silent,destination:,force-remove,detailed,output-by-type,flat,ignore-cluster-info" \
     -l "git-commit,git-push,git-branch:,git-commit-user:,git-commit-email:" \
     -l "git-remote-name:,git-remote-url:" \
     -l "archivate,archive-rotate-days:,archive-type:" \
@@ -175,6 +176,7 @@ while [ $# -ge 1 ]; do
        --detailed)              detailed='true';                         shift;;
        --output-by-type)        output_by_type='true';                   shift;;
        --flat)                  output_flat='true';                      shift;;
+       --ignore-cluster-info)   ignore_cluster_info="true";              shift;;
 # Dump opts
     -f|--force-remove)          force_remove='true';                     shift;;
 # Commit opts
@@ -204,6 +206,7 @@ fi
 : "${detailed:=$DETAILED}"
 : "${output_by_type:=$OUTPUT_BY_TYPE}"
 : "${output_flat:=$FLAT}"
+: "${ignore_cluster_info:=$IGONRE_CLUSTER_INFO}"
 : "${kube_config:=$KUBE_CONFIG}"
 : "${kube_context:=$KUBE_CONTEXT}"
 : "${kube_cluster:=$KUBE_CLUSTER}"
@@ -295,8 +298,12 @@ if [ -n "$kube_cluster" ]; then
 fi
 
 # Try get cluster info
-kubectl cluster-info "${k_args[@]}" >/dev/null || \
-  fail "Cluster $kube_api not accessible"
+if [ "$ignore_cluster_info" != 'true' ]; then
+  kubectl cluster-info "${k_args[@]}" >/dev/null || \
+    fail "Cluster $kube_api not accessible. See --ignore-cluster-info option."
+else
+  warn "Ignoring cluster-info check"
+fi
 
 # Set namespaces list
 if [ -z "${namespaces:-$NAMESPACES}" ]; then

From 0e5522ca9cd089ecc7eaec0d84b9f95dc463a06b Mon Sep 17 00:00:00 2001
From: David Jansen <dj@djansen.de>
Date: Wed, 6 Jul 2022 13:04:41 +0200
Subject: [PATCH 2/2] fix typo

---
 kube-dump | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/kube-dump b/kube-dump
index 953c39c..cbc6aeb 100755
--- a/kube-dump
+++ b/kube-dump
@@ -206,7 +206,7 @@ fi
 : "${detailed:=$DETAILED}"
 : "${output_by_type:=$OUTPUT_BY_TYPE}"
 : "${output_flat:=$FLAT}"
-: "${ignore_cluster_info:=$IGONRE_CLUSTER_INFO}"
+: "${ignore_cluster_info:=$IGNORE_CLUSTER_INFO}"
 : "${kube_config:=$KUBE_CONFIG}"
 : "${kube_context:=$KUBE_CONTEXT}"
 : "${kube_cluster:=$KUBE_CLUSTER}"