-
Notifications
You must be signed in to change notification settings - Fork 98
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Feature Request: Workload Runtime Security - installation wrapper script draft - Issue-#4115 #4148
base: master
Are you sure you want to change the base?
Conversation
Issue open-horizon#4115 - Workload Runtime Security - installation wrapper script Signed-off-by: Adhishree Kadam <[email protected]>
Issue open-horizon#4115- added steps 1 and 2 Signed-off-by: Adhishree Kadam <[email protected]>
Signed-off-by: Sze Yan <[email protected]>
Issue open-horizon#4115- added steps 3-6 Signed-off-by: Adhishree Kadam <[email protected]>
Signed-off-by: Sze Yan <[email protected]>
Signed-off-by: Adhishree Kadam <[email protected]>
Signed-off-by: adhishreekadam <[email protected]>
Signed-off-by: Sze Yan <[email protected]>
Signed-off-by: Adhishree Kadam <[email protected]>
Signed-off-by: Adhishree Kadam <[email protected]>
Signed-off-by: Adhishree Kadam <[email protected]>
Signed-off-by: Adhishree Kadam <[email protected]>
Signed-off-by: Adhishree Kadam <[email protected]>
Signed-off-by: Adhishree Kadam <[email protected]>
Signed-off-by: Adhishree Kadam <[email protected]>
Signed-off-by: Sze Yan <[email protected]>
|
||
# Step 13: Check if the operator is up in the cluster | ||
echo "Checking if the operator is up in the cluster" | ||
kubectl get pods -n openhorizon-agent |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
you should not hard code that the namespace is openhorizon-agent. You should provide a way to provide an environment variable.. Something like
export AGENT_NAMESPACE=${AGENT_NAMESPACE:-openhorizon-agent}
|
||
# Step 2: Create a new working directory for a new horizon project | ||
echo "Create a new working directory for a new horizon project" | ||
hzn dev service new -V 1.0.0 -s kubearmor-operator -c cluster |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
you are assuming the hzn
executable is installed without checking for it.. I think you check for it and for jq
|
||
# Step 7: Publish operator service | ||
echo "Publishing operator service" | ||
hzn exchange service publish -f horizon/service.definition.json |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Think you should use $SERVICE_DEF_JSON env variable on the publish command
|
||
# Step 11: Register your edge cluster with your new node policy | ||
echo "Registering edge cluster with new node policy" | ||
hznpod register -u $HZN_EXCHANGE_USER_AUTH |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
What is hznpod ? That needs to be defined somewhere
{ "name": "example", "value": "kubearmor-operator" } | ||
] | ||
} | ||
EOF |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
This is setting the property as a top level property. You should use the new deployment properties instead
Pull Request Template
Description
Kube armor installation wrapper script draft
Fixes #4115
Type of change
How Has This Been Tested?
Please describe the tests that you ran to verify your changes. Provide instructions so we can reproduce. Please also list any relevant details for your test configuration
Additional Context (Please include any Screenshots/gifs if relevant)
...
Checklist: