github/falco
1
0
Fork 0
mirror of https://github.com/falcosecurity/falco.git synced 2025-07-13 14:34:33 +00:00
Code Issues Projects Releases Wiki Activity

chore(examples/k8s_audit_config): shebang + prevent globbing and word splitting

Browse Source
This commit is contained in:
Leonardo Di Donato 2019-05-24 15:59:47 +02:00 committed by Lorenzo Fontana
parent 93d5164efe
commit 8bd98c16e9
1 changed files with 6 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
examples/k8s_audit_config/apiserver-config.patch.sh
View File

@ -1,4 +1,4 @@
#!/bin/sh #!/usr/bin/env bash
set -euo pipefail set -euo pipefail
@ -8,13 +8,13 @@ FILENAME=${1:-/etc/kubernetes/manifests/kube-apiserver.yaml}
VARIANT=${2:-minikube} VARIANT=${2:-minikube}
AUDIT_TYPE=${3:-static} AUDIT_TYPE=${3:-static}
if [ $AUDIT_TYPE == "static" ]; then if [ "$AUDIT_TYPE" == "static" ]; then
if grep audit-webhook-config-file $FILENAME ; then if grep audit-webhook-config-file "$FILENAME" ; then
echo audit-webhook patch already applied echo audit-webhook patch already applied
exit 0 exit 0
fi fi
else else
if grep audit-dynamic-configuration $FILENAME ; then if grep audit-dynamic-configuration "$FILENAME" ; then
echo audit-dynamic-configuration patch already applied echo audit-dynamic-configuration patch already applied
exit 0 exit 0
fi fi
@ -26,12 +26,12 @@ rm -f "$TMPFILE"
APISERVER_PREFIX=" -" APISERVER_PREFIX=" -"
APISERVER_LINE="- kube-apiserver" APISERVER_LINE="- kube-apiserver"
if [ $VARIANT == "kops" ]; then if [ "$VARIANT" == "kops" ]; then
APISERVER_PREFIX=" " APISERVER_PREFIX=" "
APISERVER_LINE="/usr/local/bin/kube-apiserver" APISERVER_LINE="/usr/local/bin/kube-apiserver"
fi fi
while read LINE while read -r LINE
do do
echo "$LINE" >> "$TMPFILE" echo "$LINE" >> "$TMPFILE"
case "$LINE" in case "$LINE" in