Check deployed images against built images

After deployment, if any images were built, check that they were used in the deployment. Signed-off-by: Stephen Kitt <[email protected]>
submariner-io · Jun 27, 2023 · ec9cc48 · ec9cc48
1 parent d392f63
commit ec9cc48
Showing 1 changed file with 19 additions and 0 deletions.
diff --git a/scripts/shared/deploy.sh b/scripts/shared/deploy.sh
@@ -130,6 +130,25 @@ fi
 
 run_if_defined post_deploy
 
+# Check that the deployed images match those we built (if any)
+image_mismatch=false
+for image in package/.image.*; do
+    expected="$(docker image inspect "$(cat "$image")" | jq -r '.[0].RepoDigests[0]')"
+    image="${image#package/.image.}"
+    for deployed in $(kubectl get pods -A -o json | jq -r '.items[].status.containerStatuses[].imageID' | grep "$image"); do
+        if [ "$deployed" != "$expected" ]; then
+            printf "Image %s is deployed with %s, expected %s\n" "$image" "$deployed" "$expected"
+            image_mismatch=true
+        else
+            printf "Successfully checked image %s, deployed with %s\n" "$image" "$deployed"
+        fi
+    done
+done
+if [ "$image_mismatch" = true ]; then
+    kubectl get pods -A -o json
+    exit 1
+fi
+
 # Print installed versions for manual validation of CI
 subctl show versions
 print_clusters_message