mirror of https://github.com/lework/script
lework
4 years ago
13 changed files with 3546 additions and 33 deletions
@ -0,0 +1,375 @@
@@ -0,0 +1,375 @@
|
||||
#!/bin/bash |
||||
set -u |
||||
|
||||
LOG_DIR=/var/log/diagnostic |
||||
LOG_FILE_NAME="i-uf63gv6j947wbfm1zodq20201104165109" |
||||
LOG_FILE=${LOG_DIR}/${LOG_FILE_NAME} |
||||
OSS_URL="" |
||||
OS_RELEASE="aliyun" |
||||
OS_BIG_VERSION='2' |
||||
|
||||
function check_fs() { |
||||
echo "###fs-state" |
||||
IFS_old=$IFS |
||||
IFS=$'\n' |
||||
for i in $(blkid) |
||||
do |
||||
blk=$(echo $i | awk -F: '{print $1}') |
||||
fs_type=$(echo $i | egrep -o "TYPE=\"ext[0-9]\"|TYPE=\"xfs\"" | egrep -o "ext[0-9]|xfs") |
||||
if [[ "${fs_type}" =~ "ext" ]] |
||||
then |
||||
echo ${blk} |
||||
fsck -n /dev/vda1 > /dev/null 2>&1; echo $? |
||||
elif [[ "${fs_type}" =~ "xfs" ]] |
||||
then |
||||
echo ${blk} |
||||
xfs_repair -n ${blk} > /dev/null 2>&1 ; echo $? |
||||
fi |
||||
done |
||||
IFS=$IFS_old |
||||
} |
||||
|
||||
function get_os() { |
||||
if ! test -f "/etc/os-release"; then |
||||
if test -f "/etc/redhat-release"; then |
||||
OS_RELEASE="centos" |
||||
else |
||||
OS_RELEASE="freebsd" |
||||
fi |
||||
|
||||
|
||||
match=$(awk -F'=' '/^VERSION_ID/ {gsub("\"","",$NF); print $NF}' /etc/os-release) |
||||
OS_BIG_VERSION=${match%%.*} |
||||
fi |
||||
|
||||
if grep "Ubuntu" "/etc/os-release"; then |
||||
OS_RELEASE="ubuntu" |
||||
fi |
||||
|
||||
if grep "Debian" "/etc/os-release"; then |
||||
OS_RELEASE="debian" |
||||
fi |
||||
|
||||
if grep "CentOS" "/etc/os-release"; then |
||||
OS_RELEASE="centos" |
||||
fi |
||||
|
||||
if grep "SLES" "/etc/os-release"; then |
||||
OS_RELEASE="suse" |
||||
fi |
||||
|
||||
if grep -i "CoreOS" "/etc/os-release"; then |
||||
OS_RELEASE="coreos" |
||||
fi |
||||
|
||||
if grep "Aliyun" "/etc/os-release"; then |
||||
OS_RELEASE="aliyun" |
||||
fi |
||||
} |
||||
|
||||
|
||||
function eth0_network_dhcp(){ |
||||
|
||||
network_service_array=("Networking" "NetworkManager" "systemd-networkd" "netplan" "wicked" "others") |
||||
network_service='${network_service[5]}' |
||||
net_process_exit=false |
||||
net_proto='static' |
||||
|
||||
#echo "***default" |
||||
#mac=$(curl -s --connect-timeout 2 --fail 100.100.100.200/latest/meta-data/network/interfaces/macs/) |
||||
#gateway=$(curl -s --connect-timeout 2 --fail 100.100.100.200/latest/meta-data/network/interfaces/macs/$mac/gateway) |
||||
|
||||
if [ "$OS_RELEASE"X == "centos"X ]; then |
||||
echo "***centos" |
||||
if [ "$OS_BIG_VERSION" == "7" ];then |
||||
if [[ $(systemctl is-active network.service) == 'active' ]];then |
||||
network_service=${network_service_array[0]} |
||||
elif [[ $(systemctl is-active NetworkManager) == 'active' ]];then |
||||
network_service=${network_service_array[1]} |
||||
elif [[ $(systemctl is-active systemd-networkd) == 'active' ]];then |
||||
network_service=${network_service_array[2]} |
||||
else |
||||
network_service=${network_service_array[5]} |
||||
fi |
||||
elif [ "$OS_BIG_VERSION" == "8" ];then |
||||
network_service=${network_service_array[1]} |
||||
else |
||||
network_service=${network_service_array[0]} |
||||
fi |
||||
|
||||
net_proto=$(grep "^BOOTPROTO=" /etc/sysconfig/network-scripts/ifcfg-eth0 | awk -F'=' '{print $2}') |
||||
elif [ "$OS_RELEASE"X == "aliyun"X ];then |
||||
echo "***aliyun" |
||||
network_service=${network_service_array[2]} |
||||
systemd_dir=/etc/systemd/network/*.network |
||||
for inet in `ls $systemd_dir`; |
||||
do |
||||
if grep -q "eth0" $inet && grep -q "DHCP=yes" $inet;then |
||||
net_proto="dhcp" |
||||
break |
||||
fi |
||||
done |
||||
|
||||
elif [ "$OS_RELEASE"X == "ubuntu"X ];then |
||||
echo "***ubuntu" |
||||
network_service=${network_service_array[2]} |
||||
net_proto="static" |
||||
if [ "$OS_BIG_VERSION" -ge 18 ];then |
||||
net_dir=/etc/netplan/*.yaml |
||||
for inet in `ls $netplan_dir`; |
||||
do |
||||
if grep -q "eth0" $inet && grep -q "dhcp4:[[:space:]]*yes" $inet;then |
||||
net_proto="dhcp" |
||||
break |
||||
fi |
||||
done |
||||
else |
||||
interface_cfg=/etc/network/interfaces |
||||
if grep -q "eth0[[:space:]]*inet[[:space:]]*dhcp" $interface_cfg;then |
||||
net_proto="dhcp" |
||||
fi |
||||
fi |
||||
elif [ "$OS_RELEASE"X == "debian"X ];then |
||||
echo "***debian" |
||||
network_service=${network_service_array[2]} |
||||
net_proto='static' |
||||
interface_cfg=/etc/network/interfaces |
||||
if grep -q "eth0[[:space:]]*inet[[:space:]]*dhcp" $interface_cfg;then |
||||
net_proto="dhcp" |
||||
fi |
||||
elif [ "$OS_RELEASE"X == "suse"X ];then |
||||
echo "***suse" |
||||
network_service=${network_service_array[4]} |
||||
net_proto='static' |
||||
sysconfig_cfg=/etc/sysconfig/network/ifcfg-eth0 |
||||
if grep -qE "^BOOTPROTO='dhcp4'|^BOOTPROTO='dhcp'" $sysconfig_cfg;then |
||||
net_proto='dhcp' |
||||
fi |
||||
else |
||||
echo "network_service:unknow" |
||||
echo "net_proto:unknow" |
||||
echo "net_process:unknow" |
||||
return |
||||
|
||||
fi |
||||
|
||||
if [[ $network_service == ${network_service_array[0]} ]];then |
||||
process="dhclient" |
||||
elif [[ $network_service == ${network_service_array[1]} ]];then |
||||
process="NetworkManager" |
||||
elif [[ $network_service == ${network_service_array[2]} ]];then |
||||
process="systemd-networkd" |
||||
elif [[ $network_service == ${network_service_array[4]} ]];then |
||||
process="wickedd" |
||||
fi |
||||
|
||||
ps aux |grep $process |grep -v grep >/dev/null |
||||
if [[ $? == 0 ]];then |
||||
net_process_exit=true |
||||
fi |
||||
|
||||
echo "network_service:$network_service" |
||||
echo "net_proto:$net_proto" |
||||
echo "net_process_exit:$net_process_exit" |
||||
} |
||||
|
||||
function get_configs() { |
||||
echo "##*problem_total_analyse" |
||||
|
||||
# check osinfo |
||||
echo "###osinfo" |
||||
if test -f "/etc/os-release"; then |
||||
cat /etc/os-release | egrep "^NAME=|^VERSION=" |
||||
else |
||||
echo "no os-release" |
||||
echo "no os-release" |
||||
fi |
||||
if test -f "/etc/redhat-release" ; then |
||||
echo "redhat-release:" $(cat /etc/redhat-release) |
||||
else |
||||
echo "no redhat-release" |
||||
fi |
||||
echo "uname: " $(uname -a) |
||||
echo "uname short\: " $(uname -r) |
||||
|
||||
# check the passwd format |
||||
echo "###dos-ff" |
||||
elf_pas="`cat /etc/passwd | hexdump |head -n 2|head -n 1 |awk '{print $NF}'|cut -c 1-2`" |
||||
elf_sha="`cat /etc/shadow | hexdump |head -n 2|head -n 1 |awk '{print $NF}'|cut -c 1-2`" |
||||
#elf_pam="`cat /etc/pam.d/* | hexdump |head -n 2|head -n 1 |awk '{print $NF}'|cut -c 1-2`" |
||||
if [ "elf_pas" != "3a" ];then |
||||
echo "/etc/passwd: ASCII text" |
||||
else |
||||
echo "/etc/passwd: ASCII text, with no line terminators" |
||||
fi |
||||
if [ "elf_sha" != "3a" ];then |
||||
echo "/etc/shadow: ASCII text" |
||||
else |
||||
echo "/etc/shadow: ASCII text, with no line terminators" |
||||
fi |
||||
|
||||
# check the limits |
||||
echo "###limits" |
||||
cat /etc/security/limits.conf | grep -Ev "^$|[#;]" |
||||
|
||||
# check the virtio driver exists |
||||
echo "###virtio-net-multiqueue" |
||||
for i in $(ip link | grep -E "^[0-9]+: .*:" -o | cut -d ":" -f 2 | grep -v lo); do |
||||
echo $i |
||||
ethtool -l $i 2>/dev/null | grep Combined |
||||
done |
||||
|
||||
# check eth0 newtork dhcp |
||||
echo "###eth0-network-dhcp" |
||||
eth0_network_dhcp |
||||
|
||||
|
||||
# check passwd only |
||||
echo "###passwd" |
||||
cat /etc/passwd |
||||
|
||||
echo "###cpu-top-5" |
||||
top -b -n 1 | grep "%Cpu(s):" |
||||
ps -eT -o%cpu,pid,tid,ppid,comm | grep -v CPU | sort -n -r | head -5 |
||||
|
||||
# check ssh permission format |
||||
echo "###ssh-perm" |
||||
if [ "$OS_RELEASE"X == "centos"X ]; then |
||||
echo "***centos" |
||||
ls -l /etc/passwd /etc/shadow /etc/group /etc/gshadow /var/empty/* /etc/securetty* /etc/security/* /etc/ssh/* |
||||
fi |
||||
|
||||
if [ "$OS_RELEASE"X == "ubuntu"X ]; then |
||||
echo "***ubuntu" |
||||
ls -l /etc/passwd /etc/shadow /etc/group /etc/gshadow /etc/securetty* /etc/security/* /etc/ssh/* |
||||
fi |
||||
|
||||
if [ "$OS_RELEASE"X == "debian"X ]; then |
||||
echo "***debian" |
||||
ls -l /etc/passwd /etc/shadow /etc/group /etc/gshadow /etc/securetty* /etc/security/* /etc/ssh/* |
||||
fi |
||||
if [ "$OS_RELEASE"X == "coreos"X ]; then |
||||
echo "***coreos" |
||||
ls -l /etc/passwd /etc/shadow /etc/group /etc/gshadow /var/empty/* /etc/securetty* /etc/security/* /etc/ssh/* |
||||
fi |
||||
|
||||
# check blkid |
||||
echo "###blkid" |
||||
blkid |
||||
|
||||
# check the softlink |
||||
echo "###softlink" |
||||
ls -l / | grep "\->" |
||||
|
||||
# check iptables |
||||
echo "###iptables" |
||||
|
||||
echo "***centos-5" |
||||
service iptables status |
||||
|
||||
echo "***centos-6" |
||||
service iptables status |
||||
|
||||
echo "***centos-7" |
||||
firewall-cmd --state |
||||
|
||||
echo "***centos-8" |
||||
firewall-cmd --state |
||||
|
||||
echo "***ubuntu" |
||||
ufw status |
||||
|
||||
echo "***coreos" |
||||
status="`systemctl status iptables 2>&1`" |
||||
echo "$status" |
||||
|
||||
echo "***default" |
||||
iptables -L |
||||
|
||||
# check the sysctl configuration |
||||
echo "###sysctl" |
||||
cat /etc/sysctl.conf | grep nr_hugepages |
||||
echo -n "net.ipv4.tcp_tw_recycle=" |
||||
cat /proc/sys/net/ipv4/tcp_tw_recycle |
||||
echo -n "net.ipv4.tcp_timestamps=" |
||||
cat /proc/sys/net/ipv4/tcp_timestamps |
||||
echo -n "fs.nr_open=" |
||||
cat /proc/sys/fs/nr_open |
||||
echo -n "net.ipv4.tcp_sack=" && cat /proc/sys/net/ipv4/tcp_sack |
||||
|
||||
# check fstab configuration |
||||
echo "###fstab" |
||||
if [ "$OS_RELEASE"X == "coreos"X ]; then |
||||
cat /etc/mtab | grep -v 'proc\|sys\|tmpfs\|securityfs\|cgroup\|devpts\|selinux\|debug\|mqueue\|huge\|pstore\|bpf' |
||||
else |
||||
cat /etc/fstab | grep -Ev "^$|[#;]" |
||||
fi |
||||
|
||||
|
||||
# check dmesg info |
||||
echo "###dmesg" |
||||
cat /proc/uptime |
||||
dmesg | grep "invoked oom-killer" | tail -n 1 |
||||
|
||||
# check the port usage |
||||
# echo "###port-usage" |
||||
# echo "***default" |
||||
# netstat -tapn | grep LISTEN | grep -E 'sshd' |
||||
# netstat -tapn | grep LISTEN | grep -E '0.0.0.0:80' |
||||
# netstat -tapn | grep LISTEN | grep -E '0.0.0.0:443' |
||||
# echo "***coreos" |
||||
# #coreos sshd hosts by systemd |
||||
# netstat -tapn | grep LISTEN | grep -E 'systemd' |
||||
# netstat -tapn | grep LISTEN | grep -E '0.0.0.0:80' |
||||
# netstat -tapn | grep LISTEN | grep -E '0.0.0.0:443' |
||||
|
||||
# check if the selinux on |
||||
echo "###selinux" |
||||
echo "***default" |
||||
getenforce |
||||
|
||||
echo "***ubuntu" |
||||
service selinux status > /dev/null; echo $? |
||||
echo "***debian-8" |
||||
service selinux status > /dev/null; echo $? |
||||
echo "***debian-9" |
||||
sestatus | grep "SELinux status" |
||||
echo "***debian-10" |
||||
sestatus | grep "SELinux status" |
||||
|
||||
# check the memroy info |
||||
echo "###meminfo" |
||||
cat /proc/meminfo | grep Hugepagesize |
||||
cat /proc/meminfo | grep MemTotal |
||||
|
||||
# check fs state |
||||
check_fs |
||||
|
||||
# check sshd-config |
||||
echo "###sshd-config" |
||||
cat /etc/ssh/sshd_config | egrep "PermitRootLogin|AllowUsers|AllowGroups|DenyUsers|DenyGroups" | egrep -v "^$|[#;]" |
||||
|
||||
# check inode usage |
||||
echo "###disk-inode" |
||||
df -i | egrep "/dev/x?vd" |
||||
} |
||||
|
||||
|
||||
# upload logs to OSS |
||||
function upload() { |
||||
cd $LOG_DIR |
||||
curl -i -q -X PUT -T ${LOG_FILE} ${OSS_URL} |
||||
} |
||||
|
||||
function rmlog() { |
||||
test -f ${LOG_FILE} && rm -f ${LOG_FILE} |
||||
} |
||||
|
||||
function main() { |
||||
test -e ${LOG_DIR} || mkdir -p ${LOG_DIR} |
||||
get_os |
||||
get_configs >${LOG_FILE} 2>&1 |
||||
upload |
||||
} |
||||
|
||||
main "$@" |
||||
@ -0,0 +1,189 @@
@@ -0,0 +1,189 @@
|
||||
#!/usr/bin/env bash |
||||
################################################################### |
||||
#Script Name : k8s_app_info.sh |
||||
#Description : get app info. |
||||
#Create Date : 2020-11-19 |
||||
#Author : lework |
||||
#Email : lework@yeah.net |
||||
################################################################### |
||||
|
||||
|
||||
[[ -n $DEBUG ]] && set -x || true |
||||
set -o errtrace # Make sure any error trap is inherited |
||||
set -o nounset # Disallow expansion of unset variables |
||||
set -o pipefail # Use last non-zero exit code in a pipeline |
||||
|
||||
|
||||
###################################################################################################### |
||||
# environment configuration |
||||
###################################################################################################### |
||||
|
||||
NAMESPACE="${NAMESPACE:-default}" |
||||
APPNAME="${APPNAME:-}" |
||||
SELECTOR="${SELECTOR:-}" |
||||
INFO_FILE="k8s-app-info_$(date +%s).md" |
||||
|
||||
###################################################################################################### |
||||
# function |
||||
###################################################################################################### |
||||
|
||||
function log::echo { |
||||
local code=$1 |
||||
local space=$2 |
||||
local text=$3 |
||||
[[ "$code" == "0" ]] && code=32 || { code=31; text="ERROR"; } |
||||
echo -e "\033[0;${code}m $(head -c $((12-${space})) /dev/zero |tr '\0' '.')........................ ${text}\033[0m" |
||||
|
||||
} |
||||
|
||||
function file::write { |
||||
printf "%s\n" "$*" >> $INFO_FILE |
||||
} |
||||
|
||||
function exec::kubectl { |
||||
local result |
||||
local code |
||||
|
||||
result="$(kubectl -n $NAMESPACE $* 2>/dev/null)" |
||||
code="$?" |
||||
if [[ "$code" == "0" ]]; then |
||||
file::write " |
||||
\`\`\`bash |
||||
# kubectl -n $NAMESPACE $* |
||||
${result} |
||||
\`\`\`" |
||||
fi |
||||
return "$code" |
||||
} |
||||
|
||||
|
||||
function get::selector { |
||||
echo -ne "Get Selector" |
||||
if [[ "${SELECTOR}" == "" ]]; then |
||||
selflink=$(kubectl -n $NAMESPACE get deployment $APPNAME -o yaml --ignore-not-found 2>/dev/null | awk '/selfLink:/ {print $2}') |
||||
SELECTOR=$(kubectl get --raw "${selflink}/scale" 2>/dev/null | sed 's/.*selector":"\(.*\)".*/\1/g') |
||||
fi |
||||
|
||||
if [[ "${SELECTOR}" == "" ]]; then |
||||
echo -e "\033[0;31m[Error] not found $APPNAME selector\033[0m" |
||||
exit 1 |
||||
fi |
||||
file::write " |
||||
# [INFO] |
||||
namespace: \`${NAMESPACE}\`$(if [[ "$APPNAME" != "" ]];then echo -e "\nname: \`${APPNAME}\`";fi) |
||||
selector: \`${SELECTOR}\` |
||||
" |
||||
log::echo "0" "8" "OK" |
||||
} |
||||
|
||||
function get::describe { |
||||
control=$1 |
||||
|
||||
echo -ne "Get ${control^}" |
||||
file::write "# [${control^}]" |
||||
names=$(kubectl -n $NAMESPACE get $control -l "$SELECTOR" --no-headers --ignore-not-found 2>/dev/null | awk '{print $1}') |
||||
|
||||
[[ "$names" == "" && "$APPNAME" != "" ]] && names=$(kubectl -n $NAMESPACE get $control $APPNAME --no-headers --ignore-not-found 2>/dev/null | awk '{print $1}') |
||||
|
||||
for i in $names; do |
||||
file::write "## $i" |
||||
exec::kubectl describe $control $i |
||||
exec::kubectl get $control $i -o yaml |
||||
done |
||||
log::echo "$?" "${#control}" "$(echo $names | wc -w)" |
||||
} |
||||
|
||||
function get::pods_log { |
||||
echo -ne "Get Pod log" |
||||
file::write "# [Pod Log]" |
||||
names=$(kubectl -n $NAMESPACE get pods -l "$SELECTOR" --no-headers --ignore-not-found 2>/dev/null | awk '{print $1}' 2>/dev/null) |
||||
log::echo "$?" "7" "$(echo $names | wc -w)" |
||||
for i in $names; do |
||||
echo "Get Pod: $i" |
||||
file::write "## $i" |
||||
exec::kubectl logs --tail 200 $i --all-containers |
||||
done |
||||
} |
||||
|
||||
function get::k8s_event { |
||||
echo -ne "Get k8s Event" |
||||
file::write "# [Event]" |
||||
exec::kubectl get event |
||||
log::echo "$?" "9" "OK" |
||||
} |
||||
|
||||
function get::cluster { |
||||
echo -ne "Get Cluster" |
||||
file::write "# [Cluster]" |
||||
exec::kubectl top node |
||||
log::echo "$?" "7" "OK" |
||||
} |
||||
|
||||
|
||||
function get::info { |
||||
get::selector |
||||
|
||||
get::describe ingress |
||||
get::describe service |
||||
get::describe endpoints |
||||
get::describe deployment |
||||
get::describe replicaset |
||||
get::describe daemonset |
||||
get::describe cronjob |
||||
get::describe job |
||||
get::describe pod |
||||
get::describe configmaps |
||||
get::describe secrets |
||||
get::pods_log |
||||
get::k8s_event |
||||
get::cluster |
||||
|
||||
} |
||||
|
||||
function help::usage { |
||||
# 使用帮助 |
||||
|
||||
cat << EOF |
||||
|
||||
Get k8s app info. |
||||
|
||||
Usage: |
||||
$(basename $0) [flag] |
||||
|
||||
Flag: |
||||
-ns,--namespace namespace |
||||
-n,--name name |
||||
-l,--selector selector |
||||
EOF |
||||
|
||||
exit 1 |
||||
} |
||||
|
||||
###################################################################################################### |
||||
# main |
||||
###################################################################################################### |
||||
|
||||
|
||||
[ "$#" == "0" ] && help::usage || true |
||||
|
||||
while [ "${1:-}" != "" ]; do |
||||
case $1 in |
||||
-ns | --namespace ) shift |
||||
NAMESPACE=${1:-$NAMESPACE} |
||||
;; |
||||
-n | --name ) shift |
||||
APPNAME=${1:-$APPNAME} |
||||
;; |
||||
-l | --selector ) shift |
||||
SELECTOR=${1:-$SELECTOR} |
||||
;; |
||||
* ) help::usage |
||||
esac |
||||
shift |
||||
done |
||||
|
||||
[[ "${APPNAME}" == "" && "${SELECTOR}" == "" ]] && help::usage |
||||
[ -f "${INFO_FILE}" ] && rm -f "${INFO_FILE}" |
||||
|
||||
get::info |
||||
echo -e "\nFile: ${INFO_FILE}" |
||||
@ -0,0 +1,44 @@
@@ -0,0 +1,44 @@
|
||||
#!/usr/bin/env bash |
||||
################################################################### |
||||
#Script Name : k8s-backup.sh |
||||
#Description : backup k8s resources. |
||||
#Create Date : 2020-11-19 |
||||
#Author : lework |
||||
#Email : lework@yeah.net |
||||
################################################################### |
||||
# https://github.com/pieterlange/kube-backup/blob/master/entrypoint.sh |
||||
|
||||
resources_path="./backup-$(date +%s)" |
||||
|
||||
function getall { |
||||
ns=$1 |
||||
for r in $(kubectl api-resources --verbs=list --namespaced -o name | grep -v "events.events.k8s.io" | grep -v "events" | sort | uniq); do |
||||
echo "Resource:" $r |
||||
for l in $(kubectl -n ${ns} get --ignore-not-found ${r} -o jsonpath="{$.items[*].metadata.name}");do |
||||
kubectl -n ${ns} get --ignore-not-found ${r} ${l} -o yaml \ |
||||
| sed -n "/ managedFields:/{p; :a; N; / name: ${l}/!ba; s/.*\\n//}; p" \ |
||||
| sed -e 's/ uid:.*//g' \ |
||||
-e 's/ resourceVersion:.*//g' \ |
||||
-e 's/ selfLink:.*//g' \ |
||||
-e 's/ creationTimestamp:.*//g' \ |
||||
-e 's/ managedFields:.*//g' \ |
||||
-e '/^\s*$/d' > "$resources_path/${n}/${l}.${r}.yaml" |
||||
done |
||||
done |
||||
} |
||||
|
||||
for n in $(kubectl get ns -o jsonpath="{$.items[*].metadata.name}");do |
||||
echo "Namespace:" $n |
||||
[ -d "$resources_path/$n" ] || mkdir -p "$resources_path/$n" |
||||
kubectl get ns ${n} --ignore-not-found -o yaml \ |
||||
| sed -n "/ managedFields:/{p; :a; N; / name: ${n}/!ba; s/.*\\n//}; p" \ |
||||
| sed -e 's/ uid:.*//g' \ |
||||
-e 's/ resourceVersion:.*//g' \ |
||||
-e 's/ selfLink:.*//g' \ |
||||
-e 's/ creationTimestamp:.*//g' \ |
||||
-e 's/ managedFields:.*//g' \ |
||||
-e '/^\s*$/d' > "$resources_path/${n}/namespace.yaml" |
||||
getall $n |
||||
done |
||||
|
||||
echo "File: ${resources_path}" |
||||
@ -0,0 +1,27 @@
@@ -0,0 +1,27 @@
|
||||
#!/usr/bin/env bash |
||||
|
||||
|
||||
train=""" |
||||
_-====-__-____-============-__ |
||||
_( _) |
||||
OO( Hello, Baby! )_ |
||||
0 (_ _) |
||||
o0 (_ _) |
||||
o \`=-___-===-_____-========-__) |
||||
.o _________ |
||||
. ______ ______________ | | _____ |
||||
_()_||__|| ________ | | |_________| __||___||__ |
||||
( | | | | | |Y_____00_| |_ _| |
||||
/-OO----OO**=*OO--OO*=*OO--------OO*=*OO-------OO*=*OO-------OO*=P |
||||
""" |
||||
|
||||
i=$(( $(stty size | cut -d" " -f2) - 67 )) |
||||
|
||||
while [ $i -gt 1 ]; do |
||||
clear |
||||
tput setaf $(( $i % 7 + 1 )) |
||||
printf "$train" | pr -tro $i |
||||
sleep 0.5 |
||||
tput setf 0 |
||||
(( i = i - 1 )) |
||||
done |
||||
@ -0,0 +1,50 @@
@@ -0,0 +1,50 @@
|
||||
#!/usr/bin/env bash |
||||
|
||||
set -e |
||||
|
||||
ROOT_DOMAIN=$1 |
||||
SYS_DOMAIN=sys.$ROOT_DOMAIN |
||||
APPS_DOMAIN=apps.$ROOT_DOMAIN |
||||
|
||||
DOMAIN_DIR="${ROOT_DOMAIN}_cert" |
||||
SSL_FILE=sslconf-${ROOT_DOMAIN}.conf |
||||
|
||||
[ ! -d "${DOMAIN_DIR}" ] && mkdir "${DOMAIN_DIR}" |
||||
cd "${DOMAIN_DIR}" |
||||
|
||||
#Generate SSL Config with SANs |
||||
if [ ! -f $SSL_FILE ]; then |
||||
cat > $SSL_FILE <<EOF |
||||
[req] |
||||
distinguished_name = req_distinguished_name |
||||
req_extensions = v3_req |
||||
[req_distinguished_name] |
||||
countryName_default = CN |
||||
stateOrProvinceName_default = ShangHai |
||||
localityName_default = ShangHai |
||||
organizationalUnitName_default = Devops |
||||
[ v3_req ] |
||||
# Extensions to add to a certificate request |
||||
basicConstraints = CA:FALSE |
||||
keyUsage = nonRepudiation, digitalSignature, keyEncipherment |
||||
subjectAltName = @alt_names |
||||
[alt_names] |
||||
DNS.1 = ${ROOT_DOMAIN} |
||||
DNS.2 = *.${ROOT_DOMAIN} |
||||
DNS.3 = *.${SYS_DOMAIN} |
||||
DNS.4 = *.${APPS_DOMAIN} |
||||
EOF |
||||
fi |
||||
|
||||
openssl genrsa -out RootCA.key 4096 |
||||
openssl req -new -x509 -days 3650 -key RootCA.key -out RootCA.pem -subj "/C=CN/O=ShangHai/OU=IT/CN=ROOT-CN" |
||||
|
||||
openssl genrsa -out ${ROOT_DOMAIN}.key 2048 |
||||
openssl req -new -out ${ROOT_DOMAIN}.csr -subj "/CN=*.${ROOT_DOMAIN}/O=Devops/C=CN" -key ${ROOT_DOMAIN}.key -config ${SSL_FILE} |
||||
openssl x509 -req -days 3650 -CA RootCA.pem -CAkey RootCA.key -set_serial 01 -in ${ROOT_DOMAIN}.csr -out ${ROOT_DOMAIN}.crt -extensions v3_req -extfile ${SSL_FILE} |
||||
openssl x509 -in ${ROOT_DOMAIN}.crt -text -noout |
||||
|
||||
cat ${ROOT_DOMAIN}.crt RootCA.pem > ${ROOT_DOMAIN}_fullchain.pem |
||||
openssl dhparam -out dhparam.pem 2048 |
||||
|
||||
rm ${ROOT_DOMAIN}.csr |
||||
@ -0,0 +1,28 @@
@@ -0,0 +1,28 @@
|
||||
#!/bin/sh |
||||
|
||||
parse_yaml() { |
||||
local prefix=$2 |
||||
local s='[[:space:]]*' w='[a-zA-Z0-9_]*' fs=$(echo @|tr @ '\034') |
||||
sed -ne "s|^\($s\)\($w\)$s:$s\"\(.*\)\"$s\$|\1$fs\2$fs\3|p" \ |
||||
-e "s|^\($s\)\($w\)$s:$s\(.*\)$s\$|\1$fs\2$fs\3|p" $1 | |
||||
awk -F$fs '{ |
||||
indent = length($1)/2; |
||||
vname[indent] = $2; |
||||
for (i in vname) {if (i > indent) {delete vname[i]}} |
||||
if (length($3) > 0) { |
||||
vn=""; for (i=0; i<indent; i++) {vn=(vn)(vname[i])("_")} |
||||
printf("%s%s%s=\"%s\"\n", "'$prefix'",vn, $2, $3); |
||||
} |
||||
}' |
||||
} |
||||
|
||||
|
||||
|
||||
# include parse_yaml function |
||||
#. parse_yaml.sh |
||||
|
||||
# read yaml file |
||||
#eval $(parse_yaml zconfig.yml "config__") |
||||
|
||||
# access yaml content |
||||
#echo $config__development__database |
||||
Loading…
Reference in new issue