AWS : jq

bogotobogo.com site search:

In this post, we'll see some of the jq samples with AWS.

jq samples : #1

$ aws cloudformation describe-stacks --stack-name "$STACK_NAME"
{
    "Stacks": [
        {
            "StackId": "arn:aws:cloudformation:us-east-1:526262051452:stack/eksctl-eks-fargate-alb-bogo-cluster/fee05810-b8bc-11eb-930e-12878b97cc21",
            "StackName": "eksctl-eks-fargate-alb-bogo-cluster",
            "Description": "EKS cluster (dedicated VPC: true, dedicated IAM: true) [created and managed by eksctl]",
            "CreationTime": "2021-05-19T16:12:23.699000+00:00",
            "RollbackConfiguration": {},
            "StackStatus": "CREATE_COMPLETE",
            "DisableRollback": false,
            "NotificationARNs": [],
            "Capabilities": [
                "CAPABILITY_IAM"
            ],
            "Outputs": [
                {
                    "OutputKey": "SubnetsPrivate",
                    "OutputValue": "subnet-0de433a237d674ccd,subnet-0a5bc2ccb56833993",
                    "ExportName": "eksctl-eks-fargate-alb-bogo-cluster::SubnetsPrivate"
                },
                {
                    "OutputKey": "SubnetsPublic",
                    "OutputValue": "subnet-0076d3dcec303c8f1,subnet-0bf2f1d8a7677eeab",
                    "ExportName": "eksctl-eks-fargate-alb-bogo-cluster::SubnetsPublic"
                },
                {
                    "OutputKey": "ServiceRoleARN",
                    "OutputValue": "arn:aws:iam::526262051452:role/eksctl-eks-fargate-alb-bogo-cluster-ServiceRole-DQFROGF2NVMS",
                    "ExportName": "eksctl-eks-fargate-alb-bogo-cluster::ServiceRoleARN"
                },
                {
                    "OutputKey": "VPC",
                    "OutputValue": "vpc-0cc69def2e81ac1c9",
                    "ExportName": "eksctl-eks-fargate-alb-bogo-cluster::VPC"
                },
                {
                    "OutputKey": "ClusterStackName",
                    "OutputValue": "eksctl-eks-fargate-alb-bogo-cluster"
                },
                {
                    "OutputKey": "CertificateAuthorityData",
                    "OutputValue": "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"
                },
                {
                    "OutputKey": "SecurityGroup",
                    "OutputValue": "sg-00d64c4d55565b5e3",
                    "ExportName": "eksctl-eks-fargate-alb-bogo-cluster::SecurityGroup"
                },
                {
                    "OutputKey": "FeatureNATMode",
                    "OutputValue": "Single"
                },
                {
                    "OutputKey": "Endpoint",
                    "OutputValue": "https://62CA4123A8495432655F46B2EFE83DC2.gr7.us-east-1.eks.amazonaws.com",
                    "ExportName": "eksctl-eks-fargate-alb-bogo-cluster::Endpoint"
                },
                {
                    "OutputKey": "SharedNodeSecurityGroup",
                    "OutputValue": "sg-0dc51b1fb6c3c5ca9",
                    "ExportName": "eksctl-eks-fargate-alb-bogo-cluster::SharedNodeSecurityGroup"
                },
                {
                    "OutputKey": "ClusterSecurityGroupId",
                    "OutputValue": "sg-0311b879a633cdcb4",
                    "ExportName": "eksctl-eks-fargate-alb-bogo-cluster::ClusterSecurityGroupId"
                },
                {
                    "OutputKey": "ARN",
                    "OutputValue": "arn:aws:eks:us-east-1:526262051452:cluster/eks-fargate-alb-bogo",
                    "ExportName": "eksctl-eks-fargate-alb-bogo-cluster::ARN"
                },
                {
                    "OutputKey": "FargatePodExecutionRoleARN",
                    "OutputValue": "arn:aws:iam::526262051452:role/eksctl-eks-fargate-alb-bog-FargatePodExecutionRole-SNQMWZR33SM5",
                    "ExportName": "eksctl-eks-fargate-alb-bogo-cluster::FargatePodExecutionRoleARN"
                }
            ],
            "Tags": [
                {
                    "Key": "alpha.eksctl.io/cluster-name",
                    "Value": "eks-fargate-alb-bogo"
                },
                {
                    "Key": "eksctl.cluster.k8s.io/v1alpha1/cluster-name",
                    "Value": "eks-fargate-alb-bogo"
                },
                {
                    "Key": "alpha.eksctl.io/eksctl-version",
                    "Value": "0.44.0"
                }
            ],
            "EnableTerminationProtection": false,
            "DriftInformation": {
                "StackDriftStatus": "NOT_CHECKED"
            }
        }
    ]
}

$ aws cloudformation describe-stacks --stack-name "$STACK_NAME" | jq -r '[.Stacks[0].Outputs[] | {key: .OutputKey, value: .OutputValue}] | from_entries'
{
  "SubnetsPrivate": "subnet-0de433a237d674ccd,subnet-0a5bc2ccb56833993",
  "SubnetsPublic": "subnet-0076d3dcec303c8f1,subnet-0bf2f1d8a7677eeab",
  "ServiceRoleARN": "arn:aws:iam::526262051452:role/eksctl-eks-fargate-alb-bogo-cluster-ServiceRole-DQFROGF2NVMS",
  "VPC": "vpc-0cc69def2e81ac1c9",
  "ClusterStackName": "eksctl-eks-fargate-alb-bogo-cluster",
  "CertificateAuthorityData": "LS0tL6RUOVZOMmVvMUN0JMNWtLQo=",
  "SecurityGroup": "sg-00d64c4d55565b5e3",
  "FeatureNATMode": "Single",
  "Endpoint": "https://62CA4123A8495432655F46B2EFE83DC2.gr7.us-east-1.eks.amazonaws.com",
  "SharedNodeSecurityGroup": "sg-0dc51b1fb6c3c5ca9",
  "ClusterSecurityGroupId": "sg-0311b879a633cdcb4",
  "ARN": "arn:aws:eks:us-east-1:526262051452:cluster/eks-fargate-alb-bogo",
  "FargatePodExecutionRoleARN": "arn:aws:iam::526262051452:role/eksctl-eks-fargate-alb-bog-FargatePodExecutionRole-SNQMWZR33SM5"
}

$ VPC_ID=$(aws cloudformation describe-stacks --stack-name "$STACK_NAME" | jq -r '[.Stacks[0].Outputs[] | {key: .OutputKey, value: .OutputValue}] | from_entries' | jq -r '.VPC')
$ echo $VPC_ID
vpc-0cc69def2e81ac1c9

jq samples : #2

$ aws sts get-caller-identity
{
    "UserId": "AIDAJIX6NM5BAIKEDHN3W",
    "Account": "526262051452",
    "Arn": "arn:aws:iam::526262051452:user/K"
}

$ AWS_ACCOUNT_ID=$(aws sts get-caller-identity | jq -r '.Account')

$ echo $AWS_ACCOUNT_ID
526262051452

jq samples : #3

$ kubectl get ingress nginx-ingress -o json
{
    "apiVersion": "extensions/v1beta1",
    "kind": "Ingress",
    "metadata": {
        "annotations": {
            "alb.ingress.kubernetes.io/scheme": "internet-facing",
            "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"extensions/v1beta1\",\"kind\":\"Ingress\",\"metadata\":{\"annotations\":{\"alb.ingress.kubernetes.io/scheme\":\"internet-facing\",\"kubernetes.io/ingress.class\":\"alb\"},\"labels\":{\"app\":\"nginx-ingress\"},\"name\":\"nginx-ingress\",\"namespace\":\"default\"},\"spec\":{\"rules\":[{\"http\":{\"paths\":[{\"backend\":{\"serviceName\":\"nginx-service\",\"servicePort\":80},\"path\":\"/*\"}]}}]}}\n",
            "kubernetes.io/ingress.class": "alb"
        },
        "creationTimestamp": "2021-05-19T17:21:09Z",
        "generation": 1,
        "labels": {
            "app": "nginx-ingress"
        },
        "managedFields": [
            {
                "apiVersion": "extensions/v1beta1",
                "fieldsType": "FieldsV1",
                "fieldsV1": {
                    "f:metadata": {
                        "f:annotations": {
                            ".": {},
                            "f:alb.ingress.kubernetes.io/scheme": {},
                            "f:kubectl.kubernetes.io/last-applied-configuration": {},
                            "f:kubernetes.io/ingress.class": {}
                        },
                        "f:labels": {
                            ".": {},
                            "f:app": {}
                        }
                    },
                    "f:spec": {
                        "f:rules": {}
                    }
                },
                "manager": "kubectl",
                "operation": "Update",
                "time": "2021-05-19T17:21:09Z"
            },
            {
                "apiVersion": "extensions/v1beta1",
                "fieldsType": "FieldsV1",
                "fieldsV1": {
                    "f:status": {
                        "f:loadBalancer": {
                            "f:ingress": {}
                        }
                    }
                },
                "manager": "server",
                "operation": "Update",
                "time": "2021-05-19T17:21:15Z"
            }
        ],
        "name": "nginx-ingress",
        "namespace": "default",
        "resourceVersion": "11323",
        "selfLink": "/apis/extensions/v1beta1/namespaces/default/ingresses/nginx-ingress",
        "uid": "a521d23d-e971-4523-986e-d61669de47d7"
    },
    "spec": {
        "rules": [
            {
                "http": {
                    "paths": [
                        {
                            "backend": {
                                "serviceName": "nginx-service",
                                "servicePort": 80
                            },
                            "path": "/*",
                            "pathType": "ImplementationSpecific"
                        }
                    ]
                }
            }
        ]
    },
    "status": {
        "loadBalancer": {
            "ingress": [
                {
                    "hostname": "8c14e961-default-nginxingr-29e9-1292497776.us-east-1.elb.amazonaws.com"
                }
            ]
        }
    }
}

$ kubectl get ingress nginx-ingress -o json | jq -r '.status.loadBalancer.ingress[0].hostname'
8c14e961-default-nginxingr-29e9-1292497776.us-east-1.elb.amazonaws.com

$ LOADBALANCER_PREFIX=$(kubectl get ingress nginx-ingress -o json | jq -r '.status.loadBalancer.ingress[0].hostname' | cut -d- -f1)

$ echo $LOADBALANCER_PREFIX
8c14e961

jq samples : #4

$ aws elbv2 describe-target-groups | jq -r '.TargetGroups[].TargetGroupArn'
arn:aws:elasticloadbalancing:us-east-1:526262051452:targetgroup/8c14e961-f8c4797641154edfb62/c1f40081fd607c40
arn:aws:elasticloadbalancing:us-east-1:526262051452:targetgroup/myTG/ffa4755fabc5ea1c

$ TARGETGROUP_ARN=$(aws elbv2 describe-target-groups | jq -r '.TargetGroups[].TargetGroupArn' | grep $LOADBALANCER_PREFIX)

$ echo TARGETGROUP_ARN
arn:aws:elasticloadbalancing:us-east-1:526262051452:targetgroup/8c14e961-f8c4797641154edfb62/c1f40081fd607c40

jq samples : #5

$ aws elbv2 describe-target-health --target-group-arn $TARGETGROUP_ARN
{
    "TargetHealthDescriptions": [
        {
            "Target": {
                "Id": "192.168.79.53",
                "Port": 80,
                "AvailabilityZone": "us-east-1c"
            },
            "HealthCheckPort": "80",
            "TargetHealth": {
                "State": "healthy"
            }
        },
        {
            "Target": {
                "Id": "192.168.127.30",
                "Port": 80,
                "AvailabilityZone": "us-east-1f"
            },
            "HealthCheckPort": "80",
            "TargetHealth": {
                "State": "healthy"
            }
        },
        {
            "Target": {
                "Id": "192.168.101.8",
                "Port": 80,
                "AvailabilityZone": "us-east-1f"
            },
            "HealthCheckPort": "80",
            "TargetHealth": {
                "State": "healthy"
            }
        }
    ]
}

$ aws elbv2 describe-target-health --target-group-arn $TARGETGROUP_ARN | jq -r '.TargetHealthDescriptions[].TargetHealth.State'
healthy
healthy
healthy