Bash scripts

#!/usr/bin/env bash
# pre-deploy-check.sh — run before prod deploy
set -euo pipefail

NS="${1:-apps}"
DEPLOY="${2:-myapp}"

echo "==> Context: $(kubectl config current-context)"
kubectl cluster-info | head -3

echo "==> Nodes ready"
kubectl get nodes | grep -v NotReady || true

echo "==> Current rollout"
kubectl rollout status "deploy/${DEPLOY}" -n "${NS}" --timeout=30s || true

echo "==> Pending pods in namespace"
kubectl get pods -n "${NS}" | grep -vE 'Running|Completed' || echo "All pods OK"

echo "==> Last deployment revision"
kubectl rollout history "deploy/${DEPLOY}" -n "${NS}" | tail -5

echo "==> Dry-run apply (if manifest dir exists)"
if [[ -d k8s ]]; then
  kubectl apply -f k8s/ --dry-run=server -n "${NS}" 2>/dev/null || kubectl apply -f k8s/ --dry-run=client
fi

echo "Pre-deploy checks complete. Proceed with deploy if green."

#!/usr/bin/env bash
# post-deploy-smoke.sh
set -euo pipefail

NS="${1:-apps}"
DEPLOY="${2:-myapp}"
URL="${3:-https://app.example.com/health}"

echo "==> Rollout status"
kubectl rollout status "deploy/${DEPLOY}" -n "${NS}" --timeout=300s

echo "==> Pod readiness"
kubectl get pods -n "${NS}" -l "app=${DEPLOY}" -o wide

echo "==> HTTP smoke"
HTTP_CODE=$(curl -s -o /dev/null -w "%{http_code}" "$URL" || echo "000")
echo "GET $URL => $HTTP_CODE"
[[ "$HTTP_CODE" =~ ^2 ]] || { echo "Smoke test FAILED"; exit 1; }

echo "==> Recent error logs (last 2m)"
kubectl logs -n "${NS}" -l "app=${DEPLOY}" --since=2m 2>/dev/null | grep -iE 'error|fatal|panic' | tail -20 || echo "No errors in tail"

echo "Smoke test PASSED"

#!/usr/bin/env bash
# cluster-health-report.sh
set -euo pipefail

echo "=== Cluster health $(date -u +%Y-%m-%dT%H:%M:%SZ) ==="
echo "Context: $(kubectl config current-context)"
echo

echo "--- Nodes ---"
kubectl get nodes -o wide
echo

echo "--- NotReady / pressure ---"
kubectl get nodes -o json | jq -r '.items[] | select(.status.conditions[] | select(.type=="Ready" and .status!="True")) | .metadata.name' 2>/dev/null || kubectl describe nodes | grep -A3 Conditions
echo

echo "--- CrashLoop / not Running ---"
kubectl get pods -A | grep -vE 'Running|Completed|SUCCEEDED' || echo "All pods Running/Completed"
echo

echo "--- Top restarts (if metrics-server) ---"
kubectl top pods -A --sort-by=cpu 2>/dev/null | head -15 || echo "metrics-server unavailable"
echo

echo "--- Certificates (cert-manager) ---"
kubectl get certificate -A 2>/dev/null || echo "No cert-manager certificates"
echo

echo "=== End report ==="

#!/usr/bin/env bash
# cert-expiry-audit.sh [host:port ...]
set -euo pipefail

echo "=== TLS cert audit $(date -u +%Y-%m-%dT%H:%M:%SZ) ==="

if kubectl get certificate -A &>/dev/null; then
  echo "--- cert-manager Certificates ---"
  kubectl get certificate -A -o custom-columns=NS:.metadata.namespace,NAME:.metadata.name,READY:.status.conditions[0].status,EXPIRY:.status.notAfter 2>/dev/null || kubectl get certificate -A
fi

check_host() {
  local host=$1
  echo "--- $host ---"
  echo | openssl s_client -connect "$host" -servername "${host%%:*}" 2>/dev/null | openssl x509 -noout -dates -subject 2>/dev/null || echo "FAILED: $host"
  echo | openssl s_client -connect "$host" -servername "${host%%:*}" 2>/dev/null | openssl x509 -noout -checkend 604800 && echo "OK: >7 days" || echo "WARN: expires within 7 days"
}

if [[ $# -gt 0 ]]; then
  for h in "$@"; do check_host "$h"; done
else
  echo "Pass hosts: $0 app.example.com:443 api.example.com:443"
fi

echo "=== End audit ==="

#!/usr/bin/env bash
# incident-triage.sh [namespace]
set -euo pipefail

NS="${1:-apps}"

echo "=== Incident triage $(date -u +%Y-%m-%dT%H:%M:%SZ) ==="
echo "Context: $(kubectl config current-context)"
echo "Namespace: $NS"
echo

echo "--- Not Running pods in $NS ---"
kubectl get pods -n "$NS" | grep -vE 'Running|Completed' || echo "All pods OK"
echo

echo "--- Recent events ($NS) ---"
kubectl get events -n "$NS" --sort-by=.lastTimestamp | tail -15
echo

echo "--- Deployments ---"
kubectl get deploy -n "$NS"
echo

echo "--- Ingress ---"
kubectl get ingress -n "$NS" 2>/dev/null || echo "No ingress in $NS"
echo

echo "--- Top restarts ---"
kubectl get pods -n "$NS" -o jsonpath='{range .items[*]}{.metadata.name}{" restarts="}{.status.containerStatuses[0].restartCount}{"\n"}{end}' | sort -t= -k2 -nr | head -5
echo "=== Next: /fix/ or /runbooks/ ==="

#!/usr/bin/env bash
# node-disk-cleanup.sh — review output before destructive steps
set -euo pipefail

echo "=== Disk before ==="
df -h /
echo

echo "--- Largest dirs under /var ---"
sudo du -sh /var/* 2>/dev/null | sort -hr | head -10
echo

echo "--- Docker disk usage ---"
docker system df 2>/dev/null || echo "Docker not available"
echo

read -r -p "Prune unused Docker data? [y/N] " ans
if [[ "$ans" =~ ^[Yy]$ ]]; then
  docker system prune -af --volumes 2>/dev/null || true
fi

read -r -p "Vacuum journal to 7 days? [y/N] " ans2
if [[ "$ans2" =~ ^[Yy]$ ]]; then
  sudo journalctl --vacuum-time=7d
fi

echo "=== Disk after ==="
df -h /

#!/usr/bin/env bash
# server-performance-stats.sh
set -euo pipefail

echo "=== Server stats $(date -u +%Y-%m-%dT%H:%M:%SZ) ==="
echo "Host: $(hostname)"
echo

echo "--- Uptime / load ---"
uptime
echo

echo "--- CPU ---"
nproc
grep 'model name' /proc/cpuinfo | head -1 || true
echo

echo "--- Memory ---"
free -h
echo

echo "--- Disk ---"
df -h /
df -h 2>/dev/null | grep -v tmpfs | head -10
echo

echo "--- Top 5 CPU processes ---"
ps aux --sort=-%cpu 2>/dev/null | head -6 || ps -eo pid,pcpu,pmem,comm --sort=-pcpu | head -6
echo

echo "--- Top 5 memory processes ---"
ps aux --sort=-%mem 2>/dev/null | head -6 || ps -eo pid,pcpu,pmem,comm --sort=-pmem | head -6
echo "=== End ==="

#!/usr/bin/env bash
# nginx-log-analyze.sh /var/log/nginx/access.log
set -euo pipefail

LOG="${1:-/var/log/nginx/access.log}"
[[ -f "$LOG" ]] || { echo "Log not found: $LOG"; exit 1; }

echo "=== Nginx log analysis: $LOG ==="
echo "Lines: $(wc -l < "$LOG")"
echo

echo "--- Status code counts ---"
awk '{print $9}' "$LOG" | sort | uniq -c | sort -rn | head -10
echo

echo "--- 5xx count ---"
awk '$9 ~ /^5/ {c++} END {print c+0 " responses"}' "$LOG"
echo

echo "--- Top 10 client IPs ---"
awk '{print $1}' "$LOG" | sort | uniq -c | sort -rn | head -10
echo

echo "--- Top 10 requested paths ---"
awk '{print $7}' "$LOG" | sort | uniq -c | sort -rn | head -10
echo "=== End ==="