github/falco
1
0
Fork 0
mirror of https://github.com/falcosecurity/falco.git synced 2025-07-12 22:18:30 +00:00
Code Issues Projects Releases Wiki Activity

chore(examples/k8s_audit_config): shebang + prevent globbing and word splitting

Browse Source
This commit is contained in:
Leonardo Di Donato 2019-05-24 15:59:47 +02:00 committed by Lorenzo Fontana
parent 93d5164efe
commit 8bd98c16e9
1 changed files with 6 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
examples/k8s_audit_config/apiserver-config.patch.sh
View File

@ -1,4 +1,4 @@
#!/bin/sh
#!/usr/bin/env bash
set -euo pipefail
@ -8,13 +8,13 @@ FILENAME=${1:-/etc/kubernetes/manifests/kube-apiserver.yaml}
VARIANT=${2:-minikube}
AUDIT_TYPE=${3:-static}
if [ $AUDIT_TYPE == "static" ]; then
if grep audit-webhook-config-file $FILENAME ; then
if [ "$AUDIT_TYPE" == "static" ]; then
if grep audit-webhook-config-file "$FILENAME" ; then
echo audit-webhook patch already applied
exit 0
fi
else
if grep audit-dynamic-configuration $FILENAME ; then
if grep audit-dynamic-configuration "$FILENAME" ; then
echo audit-dynamic-configuration patch already applied
exit 0
fi
@ -26,12 +26,12 @@ rm -f "$TMPFILE"
APISERVER_PREFIX=" -"
APISERVER_LINE="- kube-apiserver"
if [ $VARIANT == "kops" ]; then
if [ "$VARIANT" == "kops" ]; then
APISERVER_PREFIX=" "
APISERVER_LINE="/usr/local/bin/kube-apiserver"
fi
while read LINE
while read -r LINE
do
echo "$LINE" >> "$TMPFILE"
case "$LINE" in