public/rancher-docs
1
0
Fork 0
mirror of https://github.com/rancher/rancher-docs.git synced 2026-09-26 13:08:11 +00:00
Code Issues Packages Projects Releases Wiki Activity

EIO-247 udpate exit code in test helper scripts

Browse Source
This commit is contained in:
Nelson Roberts
2020-02-14 16:52:02 -07:00
parent 4fcf9abdee
commit 1b46c2749c
1 changed files with 6 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files
content/rancher/v2.x/en/security/benchmark-2.3.5/_index.md
+6 -6
View File
@@ -360,7 +360,7 @@ for file in $(find ${check_dir} -name "*key.pem"); do
continue continue
else else
echo "FAIL: ${file} ${file_permission}" echo "FAIL: ${file} ${file_permission}"
exit 666 exit 1
fi fi
done done
@@ -1996,7 +1996,7 @@ export KUBECONFIG=${KUBECONFIG:-/root/.kube/config}
kubectl version > /dev/null kubectl version > /dev/null
if [ $? -ne 0 ]; then if [ $? -ne 0 ]; then
echo "fail: kubectl failed" echo "fail: kubectl failed"
exit 666 exit 1
fi fi
accounts="$(kubectl --kubeconfig=${KUBECONFIG} get serviceaccounts -A -o json | jq -r '.items[] | select(.metadata.name=="default") | select((.automountServiceAccountToken == null) or (.automountServiceAccountToken == true)) | "fail \(.metadata.name) \(.metadata.namespace)"')" accounts="$(kubectl --kubeconfig=${KUBECONFIG} get serviceaccounts -A -o json | jq -r '.items[] | select(.metadata.name=="default") | select((.automountServiceAccountToken == null) or (.automountServiceAccountToken == true)) | "fail \(.metadata.name) \(.metadata.namespace)"')"
@@ -2007,7 +2007,7 @@ if [[ "${accounts}" == "" ]]; then
fi fi
echo ${accounts} echo ${accounts}
exit 666 exit 1
``` ```
**Audit Execution:** **Audit Execution:**
@@ -2123,14 +2123,14 @@ export KUBECONFIG=${KUBECONFIG:-"/root/.kube/config"}
kubectl version > /dev/null kubectl version > /dev/null
if [ $? -ne 0 ]; then if [ $? -ne 0 ]; then
echo "fail: kubectl failed" echo "fail: kubectl failed"
exit 666 exit 1
fi fi
for namespace in $(kubectl get namespaces -A -o json | jq -r '.items[].metadata.name'); do for namespace in $(kubectl get namespaces -A -o json | jq -r '.items[].metadata.name'); do
policy_count=$(kubectl get networkpolicy -n ${namespace} -o json | jq '.items | length') policy_count=$(kubectl get networkpolicy -n ${namespace} -o json | jq '.items | length')
if [ ${policy_count} -eq 0 ]; then if [ ${policy_count} -eq 0 ]; then
echo "fail: ${namespace}" echo "fail: ${namespace}"
exit 666 exit 1
fi fi
done done
@@ -2169,7 +2169,7 @@ export KUBECONFIG=${KUBECONFIG:-/root/.kube/config}
kubectl version > /dev/null kubectl version > /dev/null
if [[ $? -gt 0 ]]; then if [[ $? -gt 0 ]]; then
echo "fail: kubectl failed" echo "fail: kubectl failed"
exit 666 exit 1
fi fi
default_resources=$(kubectl get all -o json | jq --compact-output '.items[] | select((.kind == "Service") and (.metadata.name == "kubernetes") and (.metadata.namespace == "default") | not)' | wc -l) default_resources=$(kubectl get all -o json | jq --compact-output '.items[] | select((.kind == "Service") and (.metadata.name == "kubernetes") and (.metadata.namespace == "default") | not)' | wc -l)