mirror of
https://github.com/kerberos-io/deployment.git
synced 2026-11-06 20:20:26 +00:00
Cédric VerstraetenandCopilot
913706fe3f
Pin the signed multiarchitecture digest, route unchanged external ports to HTTP 8080, enforce restricted security context and mount writable config/tmp volumes. Exercise a legacy upgrade and ConfigMap-backed settings after pod replacement on kind. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
20 lines
687 B
Bash
20 lines
687 B
Bash
#!/usr/bin/env bash
|
|
set -uo pipefail
|
|
|
|
kubectl get pods,pvc -A -o wide
|
|
kubectl get events -A --sort-by=.lastTimestamp
|
|
for namespace in garage mongodb rabbitmq vernemq kerberos-vault kerberos-agent kerberos-hub kerberos-factory; do
|
|
if ! pods="$(kubectl -n "$namespace" get pods -o name)"; then
|
|
echo "::warning::Could not list pods in $namespace."
|
|
continue
|
|
fi
|
|
for pod in $pods; do
|
|
if ! kubectl -n "$namespace" describe "$pod"; then
|
|
echo "::warning::Could not describe $namespace/$pod."
|
|
fi
|
|
if ! kubectl -n "$namespace" logs "$pod" --all-containers=true --tail=80 --prefix; then
|
|
echo "::warning::Logs unavailable for $namespace/$pod."
|
|
fi
|
|
done
|
|
done
|