Merge pull request aquasecurity#563 from zivshits/2022.4

SLK-77315 - Support AKS 1.28

Author: semyonmor

enforcers/windows_enforcer/kubernetes/004_aqua_windows_enforcer_daemonset.yaml

@@ -39,11 +39,24 @@ spec:
         command:
         - powershell.exe
         - -command
-        - $argList=@("/I","AquaAgentWindowsInstaller.msi","/qn","/L AquaAgentWindowsInstaller.install.log");
+        - $Installation = Get-WmiObject -Class Win32_Product | Where-Object {$_.Vendor -eq "Aqua Security"};
+        - if ($Installation -ne $null) {
+            Get-ChildItem -Path "C:\Program Files\AquaSec\log";
+            Write-Output "Backing up Aqua-Enforcer logs to $Env:TEMP\Aquasec\";
+            Copy-Item -Path "C:\Program Files\AquaSec\log" -Destination "$Env:TEMP\Aquasec" -Recurse -Force -ErrorAction SilentlyContinue;
+            Write-Output "Removing $Installation.Name...";
+            $argList=@("/X",$Installation.IdentifyingNumber,"/qn","/L $Env:TEMP\Aquasec\AquaAgentWindowsInstaller.remove.log","/norestart","MSIRESTARTMANAGERCONTROL=Disable");
+            $Process=Start-Process -FilePath msiexec.exe -ArgumentList $argList -NoNewWindow -PassThru -Wait;
+          };
+        - Write-Output "List $Env:CONTAINER_SANDBOX_MOUNT_POINT";
+        - Get-ChildItem -Path $Env:CONTAINER_SANDBOX_MOUNT_POINT;
+        - Copy-Item -Path $(Join-Path -Path "$Env:CONTAINER_SANDBOX_MOUNT_POINT" -ChildPath "\AquaAgentWindowsInstaller.msi") -Destination $(Join-Path -Path "$Env:TEMP" -ChildPath "\AquaAgentWindowsInstaller.msi") -Force;
+        - $argList=@("/I","$Env:TEMP\AquaAgentWindowsInstaller.msi","/qn","/L*V AquaAgentWindowsInstaller.install.log");
         - $sysEnv=@(Get-ChildItem -Path Env:) | ForEach { $argList+=$_.Name+'="'+$_.Value+'"' };
+        - Write-Output "Running Start-Process -FilePath msiexec.exe -ArgumentList " $argList " -NoNewWindow -PassThru -Wait";
         - $Process=Start-Process -FilePath msiexec.exe -ArgumentList $argList -NoNewWindow -PassThru -Wait;
         - Get-Content AquaAgentWindowsInstaller.install.log;
-        - While (Get-Service slkd | Where-Object {$_.Status -eq "Running"}){ Start-Sleep -s 30 }
+        - While ( $true ){ Start-Sleep -s 30 }
         imagePullPolicy: Always
 #        resources:
 #          limits:
@@ -65,15 +78,23 @@ spec:
             command: 
             - powershell.exe
             - -c
-            - Get-Service -Name slkd
+            - Get-Service -Name slkd | Where-Object {$_.Status -eq "Running"}
+          timeoutSeconds: 5
           initialDelaySeconds: 15
           periodSeconds: 15
         readinessProbe:
           exec:
             command: 
             - powershell.exe
             - -c
-            - Get-Service -Name slkd  | Where-Object {$_.Status -eq "Running"}
+            - Start-Process -FilePath "C:\Program Files\AquaSec\slk.exe" -ArgumentList @("health","check") -Wait -NoNewWindow -RedirectStandardOutput "$Env:TEMP\aqua-enforcer-health.check";
+            - $connection = Get-Content -Path "$Env:TEMP\aqua-enforcer-health.check" | Select-String "connection to management server";
+            - Get-Content -Path "$Env:TEMP\aqua-enforcer-health.check";
+            - if ($connection | Select-String "PASSED" -Quiet) {
+                  Exit 0;
+              };
+            - Exit 1;
+          timeoutSeconds: 15
           initialDelaySeconds: 15
           periodSeconds: 15
         lifecycle:
@@ -82,8 +103,15 @@ spec:
               command: 
               - powershell.exe
               - -command
-              - $argList=@("/X","AquaAgentWindowsInstaller.msi","/qn","/L c:\c\AquaAgentWindowsInstaller.remove.log","/norestart","MSIRESTARTMANAGERCONTROL=Disable");
-              - $Process=Start-Process -FilePath msiexec.exe -ArgumentList $argList -NoNewWindow -PassThru -Wait;
+              - $Installation = Get-WmiObject -Class Win32_Product | Where-Object {$_.Vendor -eq "Aqua Security"};
+              - if ($Installation -ne $null) {
+                  Get-ChildItem -Path "C:\Program Files\AquaSec\log";
+                  Write-Output "Backing up Aqua-Enforcer logs to $Env:TEMP\Aquasec\";
+                  Copy-Item -Path "C:\Program Files\AquaSec\log" -Destination "$Env:TEMP\Aquasec\" -Recurse -Force -ErrorAction SilentlyContinue;
+                  Write-Output "Removing $Installation.Name...";
+                  $argList=@("/X",$Installation.IdentifyingNumber,"/qn","/L $Env:TEMP\Aquasec\AquaAgentWindowsInstaller.remove.log","/norestart","MSIRESTARTMANAGERCONTROL=Disable");
+                  $Process=Start-Process -FilePath msiexec.exe -ArgumentList $argList -NoNewWindow -PassThru -Wait;
+                };
         name: aqua-windows-agent
         securityContext:
           windowsOptions: