Shell Scripts

Bash/shell scripts for automation, backup operations, and system administration tasks.

Prerequisites

• Bash 4.0+ or Zsh
• curl for downloading scripts
• kubectl (for Kubernetes scripts)
• jq (optional, for JSON processing)

Quick Start

# Run directly (one-time use)
curl -s https://raw.githubusercontent.com/this-is-tobi/tools/main/shell/<script_name> | bash -s -- --help

# Download and run (repeated use)
curl -fsSL https://raw.githubusercontent.com/this-is-tobi/tools/main/shell/<script_name> -o script.sh
chmod +x script.sh
./script.sh --help

Available Scripts

Script	Description
backup-kube-mariadb.sh	backup / restore mariadb database from / to a kubernetes pod.
backup-kube-pg.sh	backup / restore postgres database from / to a kubernetes pod.
backup-kube-qdrant.sh	backup / restore qdrant raft cluster from / to a kubernetes pod.
backup-kube-vault.sh	backup / restore vault raft cluster from / to a kubernetes pod.
clone-subdir.sh	clone a subdirectory from a git repository.
compose-to-matrix.sh	parse docker-compose file to create github matrix.
delete-ghcr-image.sh	delete image and subsequent manifests from ghcr.
eol-infos.sh	get package end of life infos.
export-argocd-resources.sh	export ready-to-apply argocd resources.
export-kube-resources.sh	export ready-to-apply kubernetes resources.
github-create-app.sh	create a github application.
github-create-ruleset.sh	create a github rulesets for a given repository.
helm-template.sh	generate helm template.
init-env-files.sh	init '.env' and '.yaml' example files by copying them without 'example'.
keycloak-add-clients.sh	add keycloak clients for a given keycloak realm.
keycloak-add-users.sh	add keycloak users for a given keycloak realm.
keycloak-get-token.sh	display keycloak token for the given infos.
keycloak-list-users.sh	list keycloak users for a given keycloak realm.
keycloak-required-tac.sh	add terms and conditions required action to all realm users.
kube-generate-token.sh	generate a kubernetes token / kubeconfig with a given service account / RBAC.
manage-etc-hosts.sh	add or update host ip adress in /etc/hosts.
monitor-kube-cnpg.sh	generate and print cnpg monitoring report.
monitor-kube-qdrant.sh	generate and print qdrant monitoring report.
monitor-kube-redis.sh	generate and print redis monitoring report.
monitor-kube-vault.sh	generate and print vault monitoring report.
purge-ghcr-tags.sh	purge ghcr tags older than a given date.
trivy-report.sh	parse trivy json reports to create a markdown summary.
update-zsh-completions.sh	update zsh-completions sources.

TIP

Using a script directly from a curl command:

curl -s https://raw.githubusercontent.com/this-is-tobi/tools/main/shell/<script_name> | bash -s -- -h

Usage Examples

Backup Operations

PostgreSQL:

./backup-kube-pg.sh backup -n namespace -p pod-name -d database -o backup.sql
./backup-kube-pg.sh restore -n namespace -p pod-name -d database -i backup.sql

Vault:

./backup-kube-vault.sh backup -n vault -p vault-0
./backup-kube-vault.sh restore -n vault -p vault-0 -i vault-backup.snap

Monitoring

# PostgreSQL cluster report
./monitor-kube-cnpg.sh -n database-namespace -o report.md

# Vault health check
./monitor-kube-vault.sh -n vault

# Redis cluster status
./monitor-kube-redis.sh -n redis-namespace

Resource Management

# Export Kubernetes resources
./export-kube-resources.sh -n my-namespace -o ./exported

# Export ArgoCD applications
./export-argocd-resources.sh -n argocd -o ./argocd-backup

# Generate service account token
./kube-generate-token.sh -n default -s my-service-account --kubeconfig

GitHub Container Registry

# Delete image
GITHUB_TOKEN=<token> ./delete-ghcr-image.sh -o owner -r repo -i image-name -t tag

# Purge old tags (dry run)
./purge-ghcr-tags.sh -o owner -r repo -i image-name -d 30 --dry-run

Development Tools

# Clone subdirectory
./clone-subdir.sh -u https://github.com/owner/repo -b main -s path/to/dir -o ./output

# Generate GitHub Actions matrix
./compose-to-matrix.sh -f docker-compose.yml -o matrix.json

# Manage /etc/hosts
sudo ./manage-etc-hosts.sh add example.local 192.168.1.100
sudo ./manage-etc-hosts.sh remove example.local

Troubleshooting

Permission Errors

# Make script executable
chmod +x script.sh

# Some scripts need sudo
sudo ./script.sh

Kubernetes Connection

# Verify kubectl config
kubectl config current-context
kubectl cluster-info

# Check permissions
kubectl auth can-i get pods --all-namespaces

GitHub Token Issues

# Set token as environment variable
export GITHUB_TOKEN=ghp_your_token_here

# Required scopes: repo, write:packages, admin:org (depending on script)

Best Practices

• Always test with --help first
• Log output for audit trails: ./script.sh 2>&1 | tee log.txt
• Use absolute paths in cron jobs
• Never hardcode credentials
• Store tokens securely