29f8b0a363
1. Changing nodeselector to use same label and to sync
(openstack-control-plane = enabled) which comes default
with osh deployment.
2. Fix Ceph Deploy script.
3. Updated Apparmor script to remove node-selector.
4. Remove repos cloned not needed for Porthole Project.
Change-Id: Ibb4c98a956347c8487beff90277fe9a88bed9739
Signed-off-by: diwakar thyagaraj <diwakar.chitoor.thyagaraj@att.com>
37 lines
1.4 KiB
Bash
Executable File
37 lines
1.4 KiB
Bash
Executable File
#!/bin/bash
|
|
# Licensed under the Apache License, Version 2.0 (the "License"); you may
|
|
# not use this file except in compliance with the License. You may obtain
|
|
# a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
|
|
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
|
|
# License for the specific language governing permissions and limitations
|
|
# under the License.
|
|
set -xe
|
|
namespace="utility"
|
|
helm dependency update charts/postgresql-utility
|
|
helm upgrade --install postgresql-utility ./charts/postgresql-utility --namespace=$namespace
|
|
|
|
# Wait for Deployment
|
|
: "${OSH_INFRA_PATH:="../openstack-helm-infra"}"
|
|
cd "${OSH_INFRA_PATH}"
|
|
./tools/deployment/common/wait-for-pods.sh $namespace
|
|
|
|
#Validate Apparmor
|
|
pos_pod=$(kubectl get pods --namespace=$namespace -o wide | grep postgresql | awk '{print $1}')
|
|
expected_profile="docker-default (enforce)"
|
|
profile=`kubectl -n $namespace exec $pos_pod -- cat /proc/1/attr/current`
|
|
echo "Profile running: $profile"
|
|
if test "$profile" != "$expected_profile"
|
|
then
|
|
if test "$proc_name" == "pause"
|
|
then
|
|
echo "Root process (pause) can run docker-default, it's ok."
|
|
else
|
|
echo "$profile is the WRONG PROFILE!!"
|
|
return 1
|
|
fi
|
|
fi |