From 1b46c2749c6fa85d9366b44b4cdbe1a5fa4f1e6f Mon Sep 17 00:00:00 2001 From: Nelson Roberts Date: Fri, 14 Feb 2020 16:52:02 -0700 Subject: [PATCH] EIO-247 udpate exit code in test helper scripts --- .../v2.x/en/security/benchmark-2.3.5/_index.md | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) diff --git a/content/rancher/v2.x/en/security/benchmark-2.3.5/_index.md b/content/rancher/v2.x/en/security/benchmark-2.3.5/_index.md index 864837cffe3..aef7846d23d 100644 --- a/content/rancher/v2.x/en/security/benchmark-2.3.5/_index.md +++ b/content/rancher/v2.x/en/security/benchmark-2.3.5/_index.md @@ -360,7 +360,7 @@ for file in $(find ${check_dir} -name "*key.pem"); do continue else echo "FAIL: ${file} ${file_permission}" - exit 666 + exit 1 fi done @@ -1996,7 +1996,7 @@ export KUBECONFIG=${KUBECONFIG:-/root/.kube/config} kubectl version > /dev/null if [ $? -ne 0 ]; then echo "fail: kubectl failed" - exit 666 + exit 1 fi accounts="$(kubectl --kubeconfig=${KUBECONFIG} get serviceaccounts -A -o json | jq -r '.items[] | select(.metadata.name=="default") | select((.automountServiceAccountToken == null) or (.automountServiceAccountToken == true)) | "fail \(.metadata.name) \(.metadata.namespace)"')" @@ -2007,7 +2007,7 @@ if [[ "${accounts}" == "" ]]; then fi echo ${accounts} -exit 666 +exit 1 ``` **Audit Execution:** @@ -2123,14 +2123,14 @@ export KUBECONFIG=${KUBECONFIG:-"/root/.kube/config"} kubectl version > /dev/null if [ $? -ne 0 ]; then echo "fail: kubectl failed" - exit 666 + exit 1 fi for namespace in $(kubectl get namespaces -A -o json | jq -r '.items[].metadata.name'); do policy_count=$(kubectl get networkpolicy -n ${namespace} -o json | jq '.items | length') if [ ${policy_count} -eq 0 ]; then echo "fail: ${namespace}" - exit 666 + exit 1 fi done @@ -2169,7 +2169,7 @@ export KUBECONFIG=${KUBECONFIG:-/root/.kube/config} kubectl version > /dev/null if [[ $? -gt 0 ]]; then echo "fail: kubectl failed" - exit 666 + exit 1 fi default_resources=$(kubectl get all -o json | jq --compact-output '.items[] | select((.kind == "Service") and (.metadata.name == "kubernetes") and (.metadata.namespace == "default") | not)' | wc -l)