ci/jjb/shell/bluval.sh

   1 #!/bin/bash
   2 set -e
   3 set -o errexit
   4 set -o pipefail
   5
   6 echo "[ICN] Downloading EMCO k8s"
   7 git clone "https://gerrit.onap.org/r/multicloud/k8s"
   8 cp ~/aio.sh k8s/kud/hosting_providers/baremetal/aio.sh
   9 cp ~/installer.sh k8s/kud/hosting_providers/vagrant/installer.sh
  10
  11 echo "[ICN] Installing EMCO k8s"
  12 sudo chown root:root /var/lib/jenkins/.netrc
  13 sudo k8s/kud/hosting_providers/baremetal/aio.sh
  14 sudo chown jenkins:jenkins /var/lib/jenkins/.netrc
  15 sudo chown jenkins:jenkins -R /var/lib/jenkins/workspace/icn-bluval-daily-master/k8s/kud/hosting_providers/vagrant
  16 # the .netrc chown is a temporary workaround, needs to be fixed in multicloud-k8s
  17 sleep 5
  18
  19 echo "[ICN] Patching EMCO k8s security vulnerabilities"
  20 kubectl replace -f - << EOF
  21 apiVersion: rbac.authorization.k8s.io/v1
  22 kind: ClusterRole
  23 metadata:
  24   name: pod-reader
  25   annotations:
  26     rbac.authorization.kubernetes.io/autoupdate: "false"
  27   labels:
  28     kubernetes.io/bootstrapping: rbac-defaults
  29   name: system:public-info-viewer
  30 rules:
  31 - nonResourceURLs:
  32   - /livez
  33   - /readyz
  34   - /healthz
  35   verbs:
  36   - get
  37 EOF
  38 kubectl replace -f - << EOF
  39 apiVersion: v1
  40 kind: ServiceAccount
  41 metadata:
  42   name: default
  43 automountServiceAccountToken: false
  44 EOF
  45
  46 echo "[ICN] Downloading run_bluval.sh from upstream ci-management"
  47 wget --read-timeout=10 --timeout=10 --waitretry=10 -t 10 https://raw.githubusercontent.com/akraino-edge-stack/ci-management/master/jjb/shell/run_bluval.sh
  48
  49 echo "[ICN] Patching run_bluval.sh so it doesn't delete .netrc"
  50 sed -i "s/rm -f ~\/.netrc/#rm -f ~\/.netrc/" run_bluval.sh
  51
  52 echo "[ICN] Executing run_bluval.sh"
  53 /bin/bash run_bluval.sh