wbsong111
16 lines
635 B
Bash
Executable File
16 lines
635 B
Bash
Executable File
#!/bin/bash
|
|
set -euxo pipefail
|
|
|
|
NAMESPACES=("istio-system" "auth" "cert-manager" "oauth2-proxy" "kubeflow" "knative-serving")
|
|
|
|
for NAMESPACE in "${NAMESPACES[@]}"; do
|
|
if kubectl get namespace "$NAMESPACE" >/dev/null 2>&1; then
|
|
if [ -f "./experimental/security/PSS/static/baseline/patches/${NAMESPACE}-labels.yaml" ]; then
|
|
PATCH_OUTPUT=$(kubectl patch namespace $NAMESPACE --patch-file ./experimental/security/PSS/static/baseline/patches/${NAMESPACE}-labels.yaml 2>&1)
|
|
if echo "$PATCH_OUTPUT" | grep -q "violate the new PodSecurity"; then
|
|
exit 1
|
|
fi
|
|
fi
|
|
fi
|
|
done
|