cap_kub.sh

#!/bin/bash

# Loop over all pods in all namespaces
kubectl get pods --all-namespaces -o json | jq -r '.items[] | .metadata.namespace + " " + .metadata.name + " " + (.spec.containers[].name)' | while read line; do
    # Extract the namespace, pod name, and container name
    namespace=$(echo $line | cut -d' ' -f1)
    pod=$(echo $line | cut -d' ' -f2)
    container=$(echo $line | cut -d' ' -f3)
    
    # Print information about the pod/container being processed
    echo "Running capsh --print for namespace $namespace, pod $pod, container $container..."
    
    # Execute capsh --print inside the container with a shell (new kubectl exec syntax)
    kubectl exec $pod -n $namespace -c $container -- capsh --print
    
    # Add a separator for readability
    echo "------------------------------------------------------------"
done