install.sh now renders the checksum-verified upstream assets through kustomize overlays: CRDs first and verbatim, then serving-core and kourier with the six CPU requests lowered live on 2026-09-21, the Kourier Service as ClusterIP and the Envoy image pinned. verify.sh checks the requests read-only, and tests/test_knative_render.py proves the render offline against upstream and rail-knative's declaration. Not run against the cluster. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 63291@bnt-lap001 Assistant-Session: 8bd77868-ca68-4f49-bb1e-d539ecc0d703
28 lines
1.8 KiB
Bash
Executable file
28 lines
1.8 KiB
Bash
Executable file
#!/usr/bin/env bash
|
|
# Read-only checks of the installed Knative substrate.
|
|
set -euo pipefail
|
|
root="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
|
|
source "$root/release-lock.env"
|
|
target="${1:-railiance01}"
|
|
ssh "$target" 'set -e
|
|
test "$(kubectl get namespace knative-serving -o go-template="{{index .metadata.labels \"app.kubernetes.io/version\"}}")" = "1.22.0"
|
|
test "$(kubectl get service kourier -n kourier-system -o jsonpath="{.spec.type}")" = "ClusterIP"
|
|
test "$(kubectl get configmap config-network -n knative-serving -o jsonpath="{.data.ingress-class}")" = "kourier.ingress.networking.knative.dev"
|
|
test "$(kubectl get configmap config-features -n knative-serving -o jsonpath="{.data.kubernetes\\.podspec-init-containers}")" = "enabled"
|
|
test "$(kubectl get deployment 3scale-kourier-gateway -n kourier-system -o jsonpath="{.spec.template.spec.containers[?(@.name==\"kourier-gateway\")].image}")" = "'"$ENVOY_IMAGE"'"
|
|
kubectl wait --for=condition=Available deployment --all -n knative-serving --timeout=120s
|
|
kubectl wait --for=condition=Available deployment --all -n kourier-system --timeout=120s'
|
|
# Declared CPU requests (rail-knative substrate/v1.22.0/cpu-requests.patch.yaml).
|
|
while read -r ns deploy container cpu; do
|
|
got="$(ssh "$target" kubectl get deployment "$deploy" -n "$ns" \
|
|
-o "jsonpath={.spec.template.spec.containers[?(@.name==\"$container\")].resources.requests.cpu}")"
|
|
[ "$got" = "$cpu" ] || { echo "cpu request $ns/$deploy/$container: want $cpu, got ${got:-<none>}" >&2; exit 1; }
|
|
done <<'LIST'
|
|
knative-serving activator activator 50m
|
|
knative-serving autoscaler autoscaler 30m
|
|
knative-serving controller controller 30m
|
|
knative-serving webhook webhook 30m
|
|
knative-serving net-kourier-controller controller 30m
|
|
kourier-system 3scale-kourier-gateway kourier-gateway 50m
|
|
LIST
|
|
echo "knative substrate verified"
|