mirror of
https://github.com/samply/bridgehead.git
synced 2026-10-12 22:56:41 +02:00
Pierre DelpyandMartin Lablans
00192eaefc
* cce: Fetch the config repository token via Secret Sync * Keep the Secret Sync GitLab token across reboots and outages * Install site configuration with a one-time enrollment code * Align the itcc and dhki cases in prepare-system.sh * Report an unreachable broker instead of a clock skew during install * Show bridgehead check results as OK, WARN or CRIT and run them during install * Refresh the config repo token before bridgehead check fetches * Skip Secret Sync until the private key and root certificate exist * Indent the case block in prepare-system.sh with tabs only * Hide the config repo URL, token and enrollment code from other local users * remove the unreachable second dhki case --------- Co-authored-by: Martin Lablans <m.lablans@dkfz-heidelberg.de>
96 lines
3.2 KiB
Bash
Executable File
96 lines
3.2 KiB
Bash
Executable File
#!/bin/bash
|
|
source lib/functions.sh
|
|
|
|
if [ -t 1 ]; then
|
|
GREEN=$(printf '\033[32m')
|
|
YELLOW=$(printf '\033[33m')
|
|
RED=$(printf '\033[31m')
|
|
RESET=$(printf '\033[0m')
|
|
else
|
|
GREEN=""
|
|
YELLOW=""
|
|
RED=""
|
|
RESET=""
|
|
fi
|
|
|
|
WORST=0
|
|
|
|
report() {
|
|
local status=$1 message=$2 color level label
|
|
shift 2
|
|
case "$status" in
|
|
OK) color=$GREEN; level=0; label=" OK " ;;
|
|
WARN) color=$YELLOW; level=1; label="WARN" ;;
|
|
*) color=$RED; level=2; label="CRIT" ;;
|
|
esac
|
|
printf '[%s%s%s] %s\n' "$color" "$label" "$RESET" "$message"
|
|
local hint
|
|
for hint in "$@"; do
|
|
printf '%s\n' "$hint" | sed 's/^/ /'
|
|
done
|
|
if [ $level -gt $WORST ]; then
|
|
WORST=$level
|
|
fi
|
|
}
|
|
|
|
GIT_PROXY_ARGS=()
|
|
if [ -n "$HTTPS_PROXY_FULL_URL" ]; then
|
|
GIT_PROXY_ARGS=(-c http.proxy=$HTTPS_PROXY_FULL_URL -c https.proxy=$HTTPS_PROXY_FULL_URL)
|
|
fi
|
|
|
|
echo "Running Bridgehead checks for project $PROJECT ..."
|
|
|
|
if [ -n "$BROKER_URL_FOR_PREREQ" ]; then
|
|
if https_proxy=$HTTPS_PROXY_FULL_URL curl -m 10 -sS -o /dev/null "$BROKER_URL_FOR_PREREQ" 2>/dev/null; then
|
|
report OK "Network connection to $BROKER_URL_FOR_PREREQ"
|
|
else
|
|
report CRIT "Cannot connect to $BROKER_URL_FOR_PREREQ with the configured proxy \"$HTTPS_PROXY_URL\"" \
|
|
"Hint: If your server needs a proxy, HTTPS_PROXY_URL (and, if required, HTTPS_PROXY_USERNAME and HTTPS_PROXY_PASSWORD) must be set in /etc/bridgehead/$PROJECT.conf. Please ask ${SUPPORT_EMAIL:-the support team of your project} to add it to your site configuration."
|
|
fi
|
|
fi
|
|
|
|
for DIR in /srv/docker/bridgehead /etc/bridgehead; do
|
|
if checkOwner $DIR bridgehead &> /dev/null; then
|
|
report OK "Ownership of $DIR"
|
|
else
|
|
report CRIT "Wrong ownership for $DIR" "Hint: Run 'sudo chown -R bridgehead $DIR'."
|
|
fi
|
|
done
|
|
|
|
if [ -d "/etc/bridgehead/.git" ]; then
|
|
if [ -z "$(git -C "/etc/bridgehead" status --porcelain)" ]; then
|
|
report OK "The config repo at /etc/bridgehead is clean"
|
|
else
|
|
report WARN "The config repo at /etc/bridgehead is modified:" \
|
|
"$(git -C /etc/bridgehead status -s)" \
|
|
"Hint: Review your changes with git diff if they are already upstreamed use git stash and git pull to update the repo"
|
|
fi
|
|
fi
|
|
if [ -z "$(git -C "$(pwd)" status --porcelain)" ]; then
|
|
report OK "$(pwd) is clean"
|
|
else
|
|
report WARN "$(pwd) is modified:" \
|
|
"$(git -C "$(pwd)" status -s)" \
|
|
"Hint: If these are site specific changes to docker compose files consider moving them to $PROJECT/docker-compose.override.yml which is ignored by git." \
|
|
" If they are already upstreamed use git stash and git pull to update the repo"
|
|
fi
|
|
|
|
secret_sync_gitlab_token &> /dev/null
|
|
|
|
for DIR in /etc/bridgehead "$(pwd)"; do
|
|
if [ -d "$DIR/.git" ]; then
|
|
if git "${GIT_PROXY_ARGS[@]}" -C "$DIR" fetch --dry-run >/dev/null 2>&1; then
|
|
report OK "Git remote connection for $DIR"
|
|
else
|
|
report CRIT "Cannot connect to the Git remote for $DIR" "Hint: Check your network connection and Git remote configuration for $DIR."
|
|
fi
|
|
fi
|
|
done
|
|
|
|
case $WORST in
|
|
0) echo "All checks passed." ;;
|
|
1) echo "Some checks reported warnings. Please review the hints." ;;
|
|
*) echo "Some checks failed. Please review the hints and fix the issues. Without fixing these issues bridgehead updates may not work correctly." ;;
|
|
esac
|
|
exit $WORST
|