jonas/dotfiles
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

added ingress validation for private proj

Browse Source
This commit is contained in:
Jonas Forsberg 2022-03-28 08:46:25 +02:00
parent 577295babf
commit 549401d356
No known key found for this signature in database
GPG Key ID: F2E9818C70350CC9
1 changed files with 19 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

19
.functions/kubernetes.sh
View File

@ -33,3 +33,22 @@ function k(){
kubectl "$@" kubectl "$@"
} }
[[ $(type -t __start_kubectl) == function ]] && complete -o default -F __start_kubectl k [[ $(type -t __start_kubectl) == function ]] && complete -o default -F __start_kubectl k
function validate_private_ingress(){
local PRIVATE_PROJECT_ID="${PRIVATE_PROJECT_ID:-p-c5fcj}"
local WHITELIST_SOURCE_RANGE="${WHITELIST_SOURCE_RANGE:-10.0.0.0/8}"
local OK='\e[32m\u2714\e[0m'
local NOT_OK='\u274c'
printf "Validating ingresses in private project (%s}\n" "$PRIVATE_PROJECT_ID"
for NS in $(kubectl get namespaces --selector=field.cattle.io/projectId="$PRIVATE_PROJECT_ID" --template "{{range .items}}{{.metadata.name}}{{\"\n\"}}{{end}}"); do
for INGRESS in $(kubectl --namespace "$NS" get ingress --template "{{range .items}}{{.metadata.name}}{{\"\n\"}}{{end}}"); do
if [[ $(kubectl --namespace "$NS" get ingress "$INGRESS" -o jsonpath='{.metadata.annotations.nginx\.ingress\.kubernetes\.io/whitelist-source-range}') == "$WHITELIST_SOURCE_RANGE" ]];then
echo -n -e "$OK "
else
echo -n -e "$NOT_OK "
fi
printf "%-20s %s\n" "$NS" "$INGRESS"
done
done
}