@@ -160,25 +160,25 @@ readonly -f os::start::internal::configure_master
160
160
function os::start::internal::patch_master_config() {
161
161
local sudo=${USE_SUDO: +sudo}
162
162
163
- cp " ${SERVER_CONFIG_DIR} /master/master-config.yaml" " ${SERVER_CONFIG_DIR} /master/master-config.orig.yaml"
164
- oc ex config patch " ${SERVER_CONFIG_DIR} /master/master-config.orig.yaml" --patch=" {\" etcdConfig\" : {\" address\" : \" ${API_HOST} :${ETCD_PORT} \" }}" | \
165
- oc ex config patch - --patch=" {\" admissionConfig\" : {\" pluginConfig\" : {\" openshift.io/ImagePolicy\" : {\" configuration\" : {\" apiVersion\" : \" v1\" , \" executionRules\" : [{\" matchImageAnnotations\" : [{\" key\" : \" images.openshift.io/deny-execution\" , \" value\" : \" true\" }], \" name\" : \" execution-denied\" , \" onResources\" : [{\" resource\" : \" pods\" }, {\" resource\" : \" builds\" }], \" reject\" : true, \" skipOnResolutionFailure\" : true }], \" kind\" : \" ImagePolicyConfig\" }, \" location\" : \"\" }}}}" | \
166
- oc ex config patch - --patch=" {\" etcdConfig\" : {\" servingInfo\" : {\" bindAddress\" : \" ${API_HOST} :${ETCD_PORT} \" }}}" | \
167
- oc ex config patch - --type json --patch=" [{\" op\" : \" replace\" , \" path\" : \" /etcdClientInfo/urls\" , \" value\" : [\" ${API_SCHEME} ://${API_HOST} :${ETCD_PORT} \" ]}]" | \
168
- oc ex config patch - --patch=" {\" etcdConfig\" : {\" peerAddress\" : \" ${API_HOST} :${ETCD_PEER_PORT} \" }}" | \
169
- oc ex config patch - --patch=" {\" etcdConfig\" : {\" peerServingInfo\" : {\" bindAddress\" : \" ${API_HOST} :${ETCD_PEER_PORT} \" }}}" | \
170
- oc ex config patch - --patch=" {\" auditConfig\" : {\" enabled\" : true}}" | \
171
- oc ex config patch - --patch=" {\" imagePolicyConfig\" : {\" maxImagesBulkImportedPerRepository\" : ${MAX_IMAGES_BULK_IMPORTED_PER_REPOSITORY:- 5} }}" > " ${SERVER_CONFIG_DIR} /master/master-config.yaml"
172
- if [[ -n " ${ALLOWED_REGISTRIES-} " ]]; then
173
- oc ex config patch " ${SERVER_CONFIG_DIR} /master/master-config.yaml" --patch=" {\" imagePolicyConfig\" :{\" allowedRegistriesForImport\" :${ALLOWED_REGISTRIES} }}" > " ${SERVER_CONFIG_DIR} /master/master-config.yaml.patch"
174
- mv -f " ${SERVER_CONFIG_DIR} /master/master-config.yaml.patch" " ${SERVER_CONFIG_DIR} /master/master-config.yaml"
175
- fi
176
-
177
163
# Make oc use ${MASTER_CONFIG_DIR}/admin.kubeconfig, and ignore anything in the running user's $HOME dir
178
164
export ADMIN_KUBECONFIG=" ${MASTER_CONFIG_DIR} /admin.kubeconfig"
179
165
CLUSTER_ADMIN_CONTEXT=$( oc config view --config=" ${ADMIN_KUBECONFIG} " --flatten -o template --template=' {{index . "current-context"}}' ) ; export CLUSTER_ADMIN_CONTEXT
180
166
${sudo} chmod -R a+rwX " ${ADMIN_KUBECONFIG} "
181
167
os::log::debug " To debug: export KUBECONFIG=$ADMIN_KUBECONFIG "
168
+
169
+ cp " ${SERVER_CONFIG_DIR} /master/master-config.yaml" " ${SERVER_CONFIG_DIR} /master/master-config.orig.yaml"
170
+ oc patch --config=" ${ADMIN_KUBECONFIG} " --local --type=json -o yaml -f " ${SERVER_CONFIG_DIR} /master/master-config.orig.yaml" --patch=" [{\" op\" : " replace" , \" path\" : \" /etcdConfig/address\" , \" value\" : \" ${API_HOST} :${ETCD_PORT} \" }]" | \
171
+ oc patch --config=" ${ADMIN_KUBECONFIG} " --local --type=json -o yaml -f - --patch=" [{\" op\" : \" add\" , \" path\" : \" /admissionConfig/pluginConfig\" , \" value\" : {\" openshift.io/ImagePolicy\" : {\" configuration\" : {\" apiVersion\" : \" v1\" , \" executionRules\" : [{\" matchImageAnnotations\" : [{\" key\" : \" images.openshift.io/deny-execution\" , \" value\" : \" true\" }], \" name\" : \" execution-denied\" , \" onResources\" : [{\" resource\" : \" pods\" }, {\" resource\" : \" builds\" }], \" reject\" : true, \" skipOnResolutionFailure\" : true }], \" kind\" : \" ImagePolicyConfig\" }, \" location\" : \"\" }}}]" | \
172
+ oc patch --config=" ${ADMIN_KUBECONFIG} " --local --type=json -o yaml -f - --patch=" [{\" op\" : \" replace\" , \" path\" : \" /etcdConfig/servingInfo/bindAddress\" , \" value\" : \" ${API_HOST} :${ETCD_PORT} \" }]" | \
173
+ oc patch --config=" ${ADMIN_KUBECONFIG} " --local --type=json -o yaml -f - --patch=" [{\" op\" : \" replace\" , \" path\" : \" /etcdClientInfo/urls\" , \" value\" : [\" ${API_SCHEME} ://${API_HOST} :${ETCD_PORT} \" ]}]" | \
174
+ oc patch --config=" ${ADMIN_KUBECONFIG} " --local --type=json -o yaml -f - --patch=" [{\" op\" : \" replace\" , \" path\" : \" /etcdConfig/peerAddress\" , \" value\" : \" ${API_HOST} :${ETCD_PEER_PORT} \" }]" | \
175
+ oc patch --config=" ${ADMIN_KUBECONFIG} " --local --type=json -o yaml -f - --patch=" [{\" op\" : \" replace\" , \" path\" : \" /etcdConfig/peerServingInfo/bindAddress\" , \" value\" : \" ${API_HOST} :${ETCD_PEER_PORT} \" }]" | \
176
+ oc patch --config=" ${ADMIN_KUBECONFIG} " --local --type=json -o yaml -f - --patch=" [{\" op\" : \" replace\" , \" path\" : \" /auditConfig/enabled\" , \" value\" : true}]" | \
177
+ oc patch --config=" ${ADMIN_KUBECONFIG} " --local --type=json -o yaml -f - --patch=" [{\" op\" : \" replace\" , \" path\" : \" /imagePolicyConfig/maxImagesBulkImportedPerRepository\" , \" value\" : ${MAX_IMAGES_BULK_IMPORTED_PER_REPOSITORY:- 5} }]" > " ${SERVER_CONFIG_DIR} /master/master-config.yaml"
178
+ if [[ -n " ${ALLOWED_REGISTRIES-} " ]]; then
179
+ oc patch --config=" ${ADMIN_KUBECONFIG} " --local --type=json -o yaml -f " ${SERVER_CONFIG_DIR} /master/master-config.yaml" --patch=" [{\" op\" : \" add\" , \" path\" : \" /imagePolicyConfig/allowedRegistriesForImport\" , \" value\" : ${ALLOWED_REGISTRIES} }]" > " ${SERVER_CONFIG_DIR} /master/master-config.yaml.patch"
180
+ mv -f " ${SERVER_CONFIG_DIR} /master/master-config.yaml.patch" " ${SERVER_CONFIG_DIR} /master/master-config.yaml"
181
+ fi
182
182
}
183
183
readonly -f os::start::internal::patch_master_config
184
184
0 commit comments