47a51ec176
All checks were successful
Test and Publish Templates / test-and-publish (push) Successful in 40s
62 lines
2.2 KiB
Bash
Executable File
62 lines
2.2 KiB
Bash
Executable File
#!/bin/bash
|
|
source "${AGENT_PATH}/common.sh"
|
|
SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
|
|
|
|
# Check required environment variables
|
|
_check_required_env_vars "CONTAINER_NAME" "IMAGE_REGISTRY" "IMAGE_REPO" "IMAGE_TAG" "LOGSERVER_HOST" "LOGSERVER_PORT" "AUTH_MODE"
|
|
|
|
# Validate authentication configuration
|
|
case "$AUTH_MODE" in
|
|
mtls)
|
|
_check_required_env_vars "CLIENT_CERT_PATH" "CLIENT_KEY_PATH" "CA_CERT_PATH"
|
|
if [ ! -f "$CLIENT_CERT_PATH" ]; then
|
|
_die "Client certificate not found at $CLIENT_CERT_PATH"
|
|
fi
|
|
if [ ! -f "$CLIENT_KEY_PATH" ]; then
|
|
_die "Client key not found at $CLIENT_KEY_PATH"
|
|
fi
|
|
if [ ! -f "$CA_CERT_PATH" ]; then
|
|
_die "CA certificate not found at $CA_CERT_PATH"
|
|
fi
|
|
;;
|
|
apikey)
|
|
_check_required_env_vars "API_KEY"
|
|
if [ -z "$API_KEY" ]; then
|
|
_die "API_KEY is empty. Please get an API key from the logserver administrator"
|
|
fi
|
|
;;
|
|
basic)
|
|
_check_required_env_vars "USERNAME" "PASSWORD"
|
|
echo "WARNING: Basic authentication is not recommended for production"
|
|
;;
|
|
*)
|
|
_die "Invalid AUTH_MODE: $AUTH_MODE. Must be one of: mtls, apikey, basic"
|
|
;;
|
|
esac
|
|
|
|
# Check Docker is available
|
|
_check_docker_installed || _die "Docker test failed"
|
|
|
|
# Test connectivity to logserver
|
|
echo "Testing connectivity to logserver at ${LOGSERVER_HOST}:${LOGSERVER_PORT}..."
|
|
nc -zv "$LOGSERVER_HOST" "$LOGSERVER_PORT" 2>/dev/null || echo "WARNING: Cannot connect to logserver. Will retry when container starts."
|
|
|
|
# Pull the Docker image
|
|
docker pull "$IMAGE_REGISTRY/$IMAGE_REPO:$IMAGE_TAG" || _die "Failed to pull Filebeat image"
|
|
|
|
# Stop any existing container
|
|
bash ./stop.sh || true
|
|
|
|
# Remove old container
|
|
_remove_container "$CONTAINER_NAME" || true
|
|
|
|
# Generate Filebeat configuration
|
|
echo "Generating Filebeat configuration..."
|
|
bash ./scripts/generate-config.sh || _die "Failed to generate configuration"
|
|
|
|
# Start the new container
|
|
bash ./start.sh || _die "Failed to start Filebeat"
|
|
|
|
echo "Installation of ${CONTAINER_NAME} complete"
|
|
echo "Collecting logs from Docker API and shipping to ${LOGSERVER_HOST}:${LOGSERVER_PORT}"
|
|
echo "Authentication mode: ${AUTH_MODE}" |