treasuremap/tools/deployment/40_deploy_network_policies.sh
Manoj Alva(ma257n) f61bfd70a8 Added support for failsafe rules
- Global policies placed under type/airship-code/network-policies
- site level policies/modifications placed under
  <site>/network-policies

Change-Id: Ic8245d3263a867babd29773540175f8646e193e0
2021-03-26 15:26:38 +00:00

31 lines
1.1 KiB
Bash
Executable File

#!/usr/bin/env bash
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
set -ex
TMP=$(mktemp -d)
MANIFEST_FILE="$TMP/network-policy.yaml"
export SITE=${SITE:="test-site"}
export KUBECONFIG=${KUBECONFIG:="$HOME/.airship/kubeconfig"}
export KUBECONFIG_TARGET_CONTEXT=${KUBECONFIG_TARGET_CONTEXT:="target-cluster"}
: ${TREASUREMAP_PROJECT:="${PWD}"}
#Generate all of the policies and deploy using calicoctl
kustomize build --enable_alpha_plugins $TREASUREMAP_PROJECT/manifests/site/$SITE/target/network-policies -o ${MANIFEST_FILE}
#What about per node basis. Also usage of calico apply/replace
DATASTORE_TYPE=kubernetes calicoctl apply -f ${MANIFEST_FILE}