From 930249190d07fa701553031251c3b93ad09a77bd Mon Sep 17 00:00:00 2001 From: Mikhail Klimko Date: Wed, 4 Jun 2025 16:22:44 +0300 Subject: [PATCH 1/5] onprem: 2.8.0-rc.3 --- codefresh/Chart.lock | 40 ++++++++++++------------ codefresh/Chart.yaml | 8 ++--- codefresh/README.md.gotmpl | 13 ++++++++ codefresh/files/postgresSeedJobScript.sh | 9 ++++-- 4 files changed, 42 insertions(+), 28 deletions(-) diff --git a/codefresh/Chart.lock b/codefresh/Chart.lock index 32cdef8747..3c98484d9a 100644 --- a/codefresh/Chart.lock +++ b/codefresh/Chart.lock @@ -64,58 +64,58 @@ dependencies: version: 1.14.22 - name: cfapi repository: oci://quay.io/codefresh/charts - version: 21.279.3 + version: 21.279.4 - name: cfapi repository: oci://quay.io/codefresh/charts - version: 21.279.3 + version: 21.279.4 - name: cfapi repository: oci://quay.io/codefresh/charts - version: 21.279.3 + version: 21.279.4 - name: cfapi repository: oci://quay.io/codefresh/charts - version: 21.279.3 + version: 21.279.4 - name: cfapi repository: oci://quay.io/codefresh/charts - version: 21.279.3 + version: 21.279.4 - name: cfapi repository: oci://quay.io/codefresh/charts - version: 21.279.3 + version: 21.279.4 - name: cfapi repository: oci://quay.io/codefresh/charts - version: 21.279.3 + version: 21.279.4 - name: cfapi repository: oci://quay.io/codefresh/charts - version: 21.279.3 + version: 21.279.4 - name: cfapi repository: oci://quay.io/codefresh/charts - version: 21.279.3 + version: 21.279.4 - name: cfapi repository: oci://quay.io/codefresh/charts - version: 21.279.3 + version: 21.279.4 - name: cfapi repository: oci://quay.io/codefresh/charts - version: 21.279.3 + version: 21.279.4 - name: cfapi repository: oci://quay.io/codefresh/charts - version: 21.279.3 + version: 21.279.4 - name: cfapi repository: oci://quay.io/codefresh/charts - version: 21.279.3 + version: 21.279.4 - name: cfapi repository: oci://quay.io/codefresh/charts - version: 21.279.3 + version: 21.279.4 - name: cfapi repository: oci://quay.io/codefresh/charts - version: 21.279.3 + version: 21.279.4 - name: cfapi repository: oci://quay.io/codefresh/charts - version: 21.279.3 + version: 21.279.4 - name: cfapi repository: oci://quay.io/codefresh/charts - version: 21.279.3 + version: 21.279.4 - name: cfapi repository: oci://quay.io/codefresh/charts - version: 21.279.3 + version: 21.279.4 - name: cfui repository: oci://quay.io/codefresh/charts version: 14.98.27 @@ -167,5 +167,5 @@ dependencies: - name: salesforce-reporter repository: oci://quay.io/codefresh/charts version: 1.30.11 -digest: sha256:657e1a67d919daf178a83ddd81736519ea6bdc9a1c0bfb2364dad583586c1c1b -generated: "2025-06-02T16:12:53.480633+03:00" +digest: sha256:5cfbe090f3f9e0ebf2f99d898635689d1eae3812fb3fbced10651809cb176d13 +generated: "2025-06-04T16:15:07.062564+03:00" diff --git a/codefresh/Chart.yaml b/codefresh/Chart.yaml index 3de8d030d0..c243055a0a 100644 --- a/codefresh/Chart.yaml +++ b/codefresh/Chart.yaml @@ -1,7 +1,7 @@ apiVersion: v2 description: Helm Chart for Codefresh On-Prem name: codefresh -version: 2.8.0-rc.2 +version: 2.8.0-rc.3 keywords: - codefresh home: https://codefresh.io/ @@ -19,11 +19,7 @@ annotations: # supported kinds are added, changed, deprecated, removed, fixed and security. artifacthub.io/changes: | - kind: fixed - description: "Fix dependencies version" - - kind: added - description: "(cf-api): Add ability to assign admin/platform permissions for user for specified group during sync" - - kind: fixed - description: "(platform-analytics/postgresql): Fix pg_partman configuration" + description: "(cf-api): Fix internal feature-flags" dependencies: - name: cf-common repository: oci://quay.io/codefresh/charts diff --git a/codefresh/README.md.gotmpl b/codefresh/README.md.gotmpl index 2fc1306acd..514469301d 100644 --- a/codefresh/README.md.gotmpl +++ b/codefresh/README.md.gotmpl @@ -391,6 +391,19 @@ postgresql: enabled: false ``` +Provide the following env vars to enable SSL connection to Postgres: + +```yaml +global: + env: + PGSSLMODE: "require" + +helm-repo-manager: + env: + POSTGRES_DISABLE_SSL: "false" +``` + + #### External Redis ```yaml diff --git a/codefresh/files/postgresSeedJobScript.sh b/codefresh/files/postgresSeedJobScript.sh index 8ba8852ac4..ff290570bc 100644 --- a/codefresh/files/postgresSeedJobScript.sh +++ b/codefresh/files/postgresSeedJobScript.sh @@ -1,6 +1,11 @@ #!/bin/bash -set -xeuo pipefail +set -euo pipefail + +if [[ $DEBUG == "true" ]]; then + set -xeuo pipefail + echo "Running in debug mode" +fi POSTGRES_DATABASES=( "codefresh" @@ -51,4 +56,4 @@ function runSeed() { done } -runSeed \ No newline at end of file +runSeed From bd2cbb4af7b0bd55af02c1dbc26fc564d7ea3b82 Mon Sep 17 00:00:00 2001 From: mikhail-klimko Date: Mon, 26 May 2025 23:21:59 +0300 Subject: [PATCH 2/5] onprem: 2.7.15 (#62) --- codefresh/.ci/values/mtls-mongodb-redis.yaml | 8 +-- codefresh/README.md | 2 + codefresh/files/mongoSeedJobScript.sh | 54 ++++++++++++++------ codefresh/templates/secrets/secret.yaml | 4 +- codefresh/templates/seed/mongo-seed-job.yaml | 11 ++++ codefresh/values.yaml | 5 ++ 6 files changed, 63 insertions(+), 21 deletions(-) diff --git a/codefresh/.ci/values/mtls-mongodb-redis.yaml b/codefresh/.ci/values/mtls-mongodb-redis.yaml index 6ba0f60cb6..f3b58710c3 100644 --- a/codefresh/.ci/values/mtls-mongodb-redis.yaml +++ b/codefresh/.ci/values/mtls-mongodb-redis.yaml @@ -1,6 +1,8 @@ seed: mongoSeedJob: mongodbRootURI: mongodb://root:XT9nmM8dZDZ@cf-mongodb:27017/?authSource=admin + mongodbRootOptions: authSource=admin + mongodbRootPassword: XT9nmM8dZDZ global: appUrl: "" # placeholder for ${CF_APP_HOST} @@ -86,9 +88,9 @@ mongodb: mongosh ${MONGODB_ROOT_URI} --eval "db.getSiblingDB('${MONGODB_DATABASE}').createCollection('test')" done - mongoimport --uri ${MONGODB_ROOT_URI} --db codefresh --collection idps --type json --legacy --file /usr/share/extras/idps.json - mongoimport --uri ${MONGODB_ROOT_URI} --db codefresh --collection accounts --type json --legacy --file /usr/share/extras/accounts.json - mongoimport --uri ${MONGODB_ROOT_URI} --db codefresh --collection users --type json --legacy --file /usr/share/extras/users.json +# mongoimport --uri ${MONGODB_ROOT_URI} --db codefresh --collection idps --type json --legacy --file /usr/share/extras/idps.json +# mongoimport --uri ${MONGODB_ROOT_URI} --db codefresh --collection accounts --type json --legacy --file /usr/share/extras/accounts.json +# mongoimport --uri ${MONGODB_ROOT_URI} --db codefresh --collection users --type json --legacy --file /usr/share/extras/users.json extraVolumeMounts: - name: extras diff --git a/codefresh/README.md b/codefresh/README.md index 742e464ca6..c6f4393b1c 100644 --- a/codefresh/README.md +++ b/codefresh/README.md @@ -2589,6 +2589,8 @@ After platform upgrade, Consul fails with the error `refusing to rejoin cluster | seed-e2e | object | `{"affinity":{},"backoffLimit":10,"enabled":false,"image":{"registry":"docker.io","repository":"mongo","tag":"latest"},"nodeSelector":{},"podSecurityContext":{},"resources":{},"tolerations":[],"ttlSecondsAfterFinished":300}` | CI | | seed.enabled | bool | `true` | Enable all seed jobs | | seed.mongoSeedJob | object | See below | Mongo Seed Job. Required at first install. Seeds the required data (default idp/user/account), creates cfuser and required databases. | +| seed.mongoSeedJob.env | object | `{}` | Extra env variables for seed job. | +| seed.mongoSeedJob.mongodbRootOptions | string | `""` | Extra options for connection string (e.g. `authSource=admin`). | | seed.mongoSeedJob.mongodbRootPassword | string | `"XT9nmM8dZD"` | Root password in plain text (required ONLY for seed job!). | | seed.mongoSeedJob.mongodbRootPasswordSecretKeyRef | object | `{}` | Root password from existing secret | | seed.mongoSeedJob.mongodbRootUser | string | `"root"` | Root user in plain text (required ONLY for seed job!). | diff --git a/codefresh/files/mongoSeedJobScript.sh b/codefresh/files/mongoSeedJobScript.sh index 53947038fc..bf6878cc0c 100644 --- a/codefresh/files/mongoSeedJobScript.sh +++ b/codefresh/files/mongoSeedJobScript.sh @@ -12,9 +12,12 @@ export MONGODB_ROOT_PASSWORD=... COMMENT -# set -eou pipefail +if [[ -n $DEBUG ]]; then + set -o xtrace +fi ASSETS_PATH=${ASSETS_PATH:-/usr/share/extras/} +MTLS_CERT_PATH=${MTLS_CERT_PATH:-/etc/ssl/mongodb/ca.pem} MONGODB_DATABASES=( "archive" @@ -34,12 +37,12 @@ MONGODB_DATABASES=( ) disableMongoTelemetry() { - mongosh --nodb --eval "disableTelemetry()" + mongosh --nodb --eval "disableTelemetry()" || true } waitForMongoDB() { while true; do - status=$(mongosh ${MONGODB_ROOT_URI} --eval "db.adminCommand('ping')" 2>&1) + status=$(mongosh ${MONGODB_ROOT_URI} ${MONGO_URI_EXTRA_PARAMS} --eval "db.adminCommand('ping')" 2>&1) echo -e "MongoDB status:\n$status" if $(echo $status | grep 'ok: 1' -q); then @@ -56,12 +59,23 @@ parseMongoURI() { local parameters="$(echo $1 | grep '?' | cut -d '?' -f2)"; if [[ -n $parameters ]]; then parameters="?${parameters}"; fi local url="$(echo ${1/$proto/})" local userpass="$(echo $url | grep @ | cut -d@ -f1)" - local hostport="$(echo $url | sed s/$userpass// | sed "s/\/\?$parameters//" | sed -re "s/\/\?|@//g" | sed 's/\/$//')" + if [[ -z $userpass ]]; then + local hostport="$(echo $url | sed "s/\/\?$parameters//" | sed -re "s/\/\?|@//g" | sed 's/\/$//')" + MONGO_URI="$proto$hostport/${MONGODB_DATABASE}$parameters" + else + local hostport="$(echo $url | sed s/$userpass// | sed "s/\/\?$parameters//" | sed -re "s/\/\?|@//g" | sed 's/\/$//')" + MONGODB_PASSWORD="$(echo $userpass | grep : | cut -d: -f2)" + MONGODB_USER="$(echo $userpass | grep : | cut -d: -f1)" + MONGO_URI="$proto$userpass@$hostport/${MONGODB_DATABASE}$parameters" + fi + + + if [[ -z $MONGODB_ROOT_OPTIONS ]]; then + MONGODB_ROOT_URI="$proto${MONGODB_ROOT_USER}:${MONGODB_ROOT_PASSWORD}@$hostport/admin$parameters" + else + MONGODB_ROOT_URI="$proto${MONGODB_ROOT_USER}:${MONGODB_ROOT_PASSWORD}@$hostport/admin?${MONGODB_ROOT_OPTIONS}" + fi - MONGODB_PASSWORD="$(echo $userpass | grep : | cut -d: -f2)" - MONGODB_USER="$(echo $userpass | grep : | cut -d: -f1)" - MONGO_URI="$proto$userpass@$hostport/${MONGODB_DATABASE}$parameters" - MONGODB_ROOT_URI="$proto${MONGODB_ROOT_USER}:${MONGODB_ROOT_PASSWORD}@$hostport/admin$parameters" } getMongoVersion() { @@ -82,6 +96,14 @@ setPacks() { parseMongoURI $MONGO_URI +if [[ -s ${MTLS_CERT_PATH} ]]; then + MONGO_URI_EXTRA_PARAMS="--tls --tlsCertificateKeyFile ${MTLS_CERT_PATH} --tlsAllowInvalidHostnames --tlsAllowInvalidCertificates" + MONGOIMPORT_EXTRA_PARAMS="--ssl --sslPEMKeyFile ${MTLS_CERT_PATH} --sslAllowInvalidHostnames --sslAllowInvalidCertificates" +else + MONGO_URI_EXTRA_PARAMS="" + MONGOIMPORT_EXTRA_PARAMS="" +fi + disableMongoTelemetry waitForMongoDB @@ -90,20 +112,20 @@ getMongoVersion for MONGODB_DATABASE in ${MONGODB_DATABASES[@]}; do waitForMongoDB - mongosh ${MONGODB_ROOT_URI} --eval "db.getSiblingDB(\"${MONGODB_DATABASE}\").createUser({user: \"${MONGODB_USER}\", pwd: \"${MONGODB_PASSWORD}\", roles: [\"readWrite\"]})" 2>&1 || true + mongosh ${MONGODB_ROOT_URI} ${MONGO_URI_EXTRA_PARAMS} --eval "db.getSiblingDB(\"${MONGODB_DATABASE}\").createUser({user: \"${MONGODB_USER}\", pwd: \"${MONGODB_PASSWORD}\", roles: [\"readWrite\"]})" 2>&1 || true waitForMongoDB - mongosh ${MONGODB_ROOT_URI} --eval "db.getSiblingDB(\"${MONGODB_DATABASE}\").changeUserPassword(\"${MONGODB_USER}\",\"${MONGODB_PASSWORD}\")" 2>&1 || true + mongosh ${MONGODB_ROOT_URI} ${MONGO_URI_EXTRA_PARAMS} --eval "db.getSiblingDB(\"${MONGODB_DATABASE}\").changeUserPassword(\"${MONGODB_USER}\",\"${MONGODB_PASSWORD}\")" 2>&1 || true done -mongosh ${MONGODB_ROOT_URI} --eval "db.getSiblingDB(\"codefresh\").grantRolesToUser( \"${MONGODB_USER}\", [ { role: \"readWrite\", db: \"pipeline-manager\" } ] )" 2>&1 || true -mongosh ${MONGODB_ROOT_URI} --eval "db.getSiblingDB(\"codefresh\").grantRolesToUser( \"${MONGODB_USER}\", [ { role: \"readWrite\", db: \"platform-analytics-postgres\" } ] )" 2>&1 || true -mongosh ${MONGODB_ROOT_URI} --eval "db.getSiblingDB(\"codefresh\").changeUserPassword(\"${MONGODB_USER}\",\"${MONGODB_PASSWORD}\")" 2>&1 || true +mongosh ${MONGODB_ROOT_URI} ${MONGO_URI_EXTRA_PARAMS} --eval "db.getSiblingDB(\"codefresh\").grantRolesToUser( \"${MONGODB_USER}\", [ { role: \"readWrite\", db: \"pipeline-manager\" } ] )" 2>&1 || true +mongosh ${MONGODB_ROOT_URI} ${MONGO_URI_EXTRA_PARAMS} --eval "db.getSiblingDB(\"codefresh\").grantRolesToUser( \"${MONGODB_USER}\", [ { role: \"readWrite\", db: \"platform-analytics-postgres\" } ] )" 2>&1 || true +mongosh ${MONGODB_ROOT_URI} ${MONGO_URI_EXTRA_PARAMS} --eval "db.getSiblingDB(\"codefresh\").changeUserPassword(\"${MONGODB_USER}\",\"${MONGODB_PASSWORD}\")" 2>&1 || true if [[ $DEVELOPMENT_CHART == "true" ]]; then setSystemAdmin setPacks fi -mongoimport --uri ${MONGO_URI} --collection idps --type json --legacy --file ${ASSETS_PATH}idps.json -mongoimport --uri ${MONGO_URI} --collection accounts --type json --legacy --file ${ASSETS_PATH}accounts.json -mongoimport --uri ${MONGO_URI} --collection users --type json --legacy --file ${ASSETS_PATH}users.json +mongoimport --uri ${MONGO_URI} ${MONGOIMPORT_EXTRA_PARAMS} --collection idps --type json --legacy --file ${ASSETS_PATH}idps.json +mongoimport --uri ${MONGO_URI} ${MONGOIMPORT_EXTRA_PARAMS} --collection accounts --type json --legacy --file ${ASSETS_PATH}accounts.json +mongoimport --uri ${MONGO_URI} ${MONGOIMPORT_EXTRA_PARAMS} --collection users --type json --legacy --file ${ASSETS_PATH}users.json diff --git a/codefresh/templates/secrets/secret.yaml b/codefresh/templates/secrets/secret.yaml index e0fa81259e..0ea7c521cd 100644 --- a/codefresh/templates/secrets/secret.yaml +++ b/codefresh/templates/secrets/secret.yaml @@ -17,8 +17,8 @@ data: MONGODB_PROTOCOL: {{ coalesce .Values.global.mongodbProtocol | default "mongodb" | b64enc }} # legacy MONGODB_* secrets - MONGODB_ROOT_USER: {{ coalesce .Values.global.mongodbRootUser .Values.seed.mongoSeedJob.mongodbRootUser | b64enc }} - MONGODB_ROOT_PASSWORD: {{ urlquery (coalesce .Values.global.mongodbRootPassword .Values.seed.mongoSeedJob.mongodbRootPassword) | b64enc }} + MONGODB_ROOT_USER: {{ coalesce .Values.seed.mongoSeedJob.mongodbRootUser .Values.global.mongodbRootUser | b64enc }} + MONGODB_ROOT_PASSWORD: {{ urlquery (coalesce .Values.seed.mongoSeedJob.mongodbRootPassword .Values.global.mongodbRootPassword) | b64enc }} MONGO_URI: {{ .Values.global.mongoURI | default "empty" | b64enc}} MONGO_URI_RE_MANAGER: {{ include (printf "%s.classic.calculateMongoUri" $libTemplateName) (dict "dbName" "runtime-environment-manager" "mongoURI" .Values.global.mongoURI) | default "empty" | b64enc }} MONGODB_RE_DATABASE: {{ printf "%s" "runtime-environment-manager" | b64enc }} diff --git a/codefresh/templates/seed/mongo-seed-job.yaml b/codefresh/templates/seed/mongo-seed-job.yaml index a977068599..2cbac34a23 100644 --- a/codefresh/templates/seed/mongo-seed-job.yaml +++ b/codefresh/templates/seed/mongo-seed-job.yaml @@ -52,8 +52,19 @@ spec: {{- include "codefresh.mongodb-root-user-env-var-value" . | indent 12 }} - name: MONGODB_ROOT_PASSWORD {{- include "codefresh.mongodb-root-password-env-var-value" . | indent 12 }} + - name: MONGODB_ROOT_OPTIONS + value: {{ .Values.seed.mongoSeedJob.mongodbRootOptions | quote }} - name: DEVELOPMENT_CHART value: {{ .Values.developmentChart | quote }} + {{- range $env, $val := .Values.seed.mongoSeedJob.env }} + - name: {{ $env }} + value: {{ $val | quote }} + {{ end }} + {{- range $env, $val := .Values.global.env }} + - name: {{ $env }} + value: {{ $val | quote }} + {{ end }} + command: - "/bin/bash" - "-exc" diff --git a/codefresh/values.yaml b/codefresh/values.yaml index 0d46ca0c9d..1464cba698 100644 --- a/codefresh/values.yaml +++ b/codefresh/values.yaml @@ -55,6 +55,11 @@ seed: # name: my-secret # key: mongodb-root-password + # -- Extra options for connection string (e.g. `authSource=admin`). + mongodbRootOptions: "" + # -- Extra env variables for seed job. + env: {} + # -- Postgres Seed Job. Required at first install. Creates required user and databases. # @default -- See below postgresSeedJob: From 74eaf7a1ec05a78e1feba7ef8ae0577463e10846 Mon Sep 17 00:00:00 2001 From: Mikhail Klimko Date: Wed, 4 Jun 2025 16:35:33 +0300 Subject: [PATCH 3/5] onprem: 2.8.0-rc.3 --- codefresh/Chart.yaml | 2 ++ codefresh/README.md | 14 +++++++++++++- codefresh/templates/seed/postgres-seed-job.yaml | 4 ++++ 3 files changed, 19 insertions(+), 1 deletion(-) diff --git a/codefresh/Chart.yaml b/codefresh/Chart.yaml index c243055a0a..4ef32ff828 100644 --- a/codefresh/Chart.yaml +++ b/codefresh/Chart.yaml @@ -20,6 +20,8 @@ annotations: artifacthub.io/changes: | - kind: fixed description: "(cf-api): Fix internal feature-flags" + - kind: fixed + description: "Fix mongo-seed job with Mongo MTLS enabled" dependencies: - name: cf-common repository: oci://quay.io/codefresh/charts diff --git a/codefresh/README.md b/codefresh/README.md index c6f4393b1c..5b63f21af5 100644 --- a/codefresh/README.md +++ b/codefresh/README.md @@ -1,6 +1,6 @@ ## Codefresh On-Premises -![Version: 2.8.0-rc.2](https://img.shields.io/badge/Version-2.8.0--rc.2-informational?style=flat-square) ![AppVersion: 2.7.0](https://img.shields.io/badge/AppVersion-2.7.0-informational?style=flat-square) +![Version: 2.8.0-rc.3](https://img.shields.io/badge/Version-2.8.0--rc.3-informational?style=flat-square) ![AppVersion: 2.7.0](https://img.shields.io/badge/AppVersion-2.7.0-informational?style=flat-square) Helm chart for deploying [Codefresh On-Premises](https://codefresh.io/docs/docs/getting-started/intro-to-codefresh/) to Kubernetes. @@ -389,6 +389,18 @@ postgresql: enabled: false ``` +Provide the following env vars to enable SSL connection to Postgres: + +```yaml +global: + env: + PGSSLMODE: "require" + +helm-repo-manager: + env: + POSTGRES_DISABLE_SSL: "false" +``` + #### External Redis ```yaml diff --git a/codefresh/templates/seed/postgres-seed-job.yaml b/codefresh/templates/seed/postgres-seed-job.yaml index 6ff5366b13..9f66be450b 100644 --- a/codefresh/templates/seed/postgres-seed-job.yaml +++ b/codefresh/templates/seed/postgres-seed-job.yaml @@ -49,6 +49,10 @@ spec: {{- include "codefresh.postgres-seed-user-env-var-value" . | indent 12 }} - name: POSTGRES_SEED_PASSWORD {{- include "codefresh.postgres-seed-password-env-var-value" . | indent 12 }} + {{- range $env, $val := .Values.global.env }} + - name: {{ $env }} + value: {{ $val | quote }} + {{ end }} resources: {{- toYaml .Values.seed.resources | nindent 10 }} command: From 75976d428e8d92d1ad24df1ec5d931eba9f1cfbd Mon Sep 17 00:00:00 2001 From: Mikhail Klimko Date: Wed, 4 Jun 2025 16:41:33 +0300 Subject: [PATCH 4/5] onprem: 2.8.0-rc.3 --- codefresh/README.md.gotmpl | 1 - 1 file changed, 1 deletion(-) diff --git a/codefresh/README.md.gotmpl b/codefresh/README.md.gotmpl index 514469301d..7f815542f2 100644 --- a/codefresh/README.md.gotmpl +++ b/codefresh/README.md.gotmpl @@ -403,7 +403,6 @@ helm-repo-manager: POSTGRES_DISABLE_SSL: "false" ``` - #### External Redis ```yaml From 560da49a815d60a51639d49fc4cbae584834b2de Mon Sep 17 00:00:00 2001 From: Mikhail Klimko Date: Wed, 4 Jun 2025 16:53:02 +0300 Subject: [PATCH 5/5] onprem: 2.8.0-rc.3 --- codefresh/files/postgresSeedJobScript.sh | 2 ++ 1 file changed, 2 insertions(+) diff --git a/codefresh/files/postgresSeedJobScript.sh b/codefresh/files/postgresSeedJobScript.sh index ff290570bc..f5bd6181a4 100644 --- a/codefresh/files/postgresSeedJobScript.sh +++ b/codefresh/files/postgresSeedJobScript.sh @@ -1,5 +1,7 @@ #!/bin/bash +DEBUG="${DEBUG:-false}" + set -euo pipefail if [[ $DEBUG == "true" ]]; then