Skip to content
Closed
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Original file line number Diff line number Diff line change
Expand Up @@ -74,24 +74,6 @@ cat > /tmp/proxy.ign << EOF
"mode": 420
}
]
},
"systemd": {
"units": [
{
"contents": "[Service]\n\nExecStart=bash /etc/squid.sh\n\n[Install]\nWantedBy=multi-user.target\n",
"enabled": true,
"name": "squid.service"
},
{
"dropins": [
{
"contents": "[Service]\nExecStart=\nExecStart=/usr/lib/systemd/systemd-journal-gatewayd \\\n --key=/opt/openshift/tls/journal-gatewayd.key \\\n --cert=/opt/openshift/tls/journal-gatewayd.crt \\\n --trust=/opt/openshift/tls/root-ca.crt\n",
"name": "certs.conf"
}
],
"name": "systemd-journal-gatewayd.service"
}
]
}
}
EOF
Expand Down Expand Up @@ -308,6 +290,9 @@ EOF
# define squid.sh
SQUID_SH="$(base64 -w0 << EOF
#!/bin/bash

set -x

podman run --entrypoint='["bash", "/squid/proxy.sh"]' --expose=3128 --net host --volume /etc/squid:/squid:Z ${PROXY_IMAGE}
EOF
)"
Expand All @@ -326,6 +311,7 @@ squid -N -f /squid/squid.conf
EOF
)"

# no-op

# create ignition entries for certs and script to start squid and systemd unit entry
# create the proxy stack and then get its IP
Expand Down Expand Up @@ -385,3 +371,5 @@ proxy:
httpsProxy: ${PROXY_URL}
httpProxy: ${PROXY_URL}
EOF

echo "using ignition: $(cat /tmp/proxy.ign)"
Original file line number Diff line number Diff line change
Expand Up @@ -3,6 +3,8 @@ set -o nounset
set -o errexit
set -o pipefail

set -x

trap 'CHILDREN=$(jobs -p); if test -n "${CHILDREN}"; then kill ${CHILDREN} && wait; fi' TERM

export AWS_SHARED_CREDENTIALS_FILE="${CLUSTER_PROFILE_DIR}/.awscred"
Expand Down