pre-upgrade job to verify function references and restricted privileges for fetcher and builder SA (#717)

It is mandatory (from this release onwards) for function to refer to secrets, config-maps and packages in its own namespace to ensure isolation of users sharing the same cluster.
This change runs a pre-upgrade job to verify function references for all functions created prior to this release and fails the upgrade by printing a list of functions that violate this restriction.

This commit is contained in:

smruthi2187

2018-06-04 19:30:27 -07:00

committed by

GitHub

parent 0057270551

commit 2e37611da8

12 changed files with 417 additions and 4 deletions

									
										preupgradechecks/Dockerfile
									
		+3
		
												View File
												
				@@ -0,0 +1,3 @@

				FROM alpine:3.4

				RUN apk add --update ca-certificates

				ADD pre-upgrade-checks /