Using a slightly hacked maistra istio operator from Brian Avery

Still some crash-loop errors to work out (with jaeger), but the
kubecon demo seems to work with it

Author: jcrossley3

etc/scripts/install.sh

@@ -37,22 +37,6 @@ mkdir -p "$REPO_DIR"
 # initialize the minishift knative profile
 "$DIR/init-minishift-for-knative.sh"
 
-# istio
-git clone https://github.com/minishift/minishift-addons "$REPO_DIR/minishift-addons"
-minishift addon install "$REPO_DIR/minishift-addons/add-ons/istio"
-until minishift addon apply istio; do sleep 1; done
-timeout 900 'oc get pods -n istio-system && [[ $(oc get pods -n istio-system | grep openshift-ansible-istio-installer | grep -c Completed) -eq 0 ]]'
-
-# Disable mTLS in istio
-oc delete MeshPolicy default
-oc delete DestinationRule default -n istio-system
-
-# Scale down unused services deployed by the istio addon
-oc scale -n istio-system --replicas=0 deployment/grafana
-oc scale -n istio-system --replicas=0 deployment/jaeger-collector
-oc scale -n istio-system --replicas=0 deployment/jaeger-query
-oc scale -n istio-system --replicas=0 statefulset/elasticsearch
-
 # OLM
 git clone https://github.com/operator-framework/operator-lifecycle-manager "$REPO_DIR/olm"
 cat $REPO_DIR/olm/deploy/okd/manifests/latest/*.crd.yaml | oc apply -f -
@@ -64,6 +48,44 @@ oc adm policy add-cluster-role-to-user cluster-admin system:serviceaccount:kube-
 
 # knative catalog source
 oc apply -f "$ROOT_DIR/knative-operators.catalogsource.yaml"
+oc apply -f "$ROOT_DIR/maistra-operators.catalogsource.yaml"
+
+# istio
+oc create ns istio-operator
+cat <<EOF | oc apply -f -
+apiVersion: operators.coreos.com/v1alpha1
+kind: Subscription
+metadata:
+  name: maistra
+  namespace: istio-operator
+spec:
+  channel: alpha
+  name: maistra
+  source: maistra-operators
+EOF
+wait_for_all_pods istio-operator
+
+cat <<EOF | oc apply -f -
+apiVersion: istio.openshift.com/v1alpha1
+kind: Installation
+metadata:
+  namespace: istio-operator
+  name: istio-installation
+spec:
+  istio:
+    authentication: true
+    community: true
+    version: 0.2.0
+  kiali:
+    username: admin
+    password: admin
+    prefix: kiali/
+    version: v0.7.1
+EOF
+timeout 900 'oc get pods -n istio-system && [[ $(oc get pods -n istio-system | grep openshift-ansible-istio-installer | grep -c Completed) -eq 0 ]]'
+# Disable mTLS in istio
+oc delete MeshPolicy default
+oc delete DestinationRule default -n istio-system
 
 # for now, we must install the operators in specific namespaces, so...
 oc create ns knative-build

maistra-operators.catalogsource.yaml

@@ -0,0 +1,143 @@
+kind: ConfigMap
+apiVersion: v1
+metadata:
+  name: maistra-operators
+  namespace: openshift-operator-lifecycle-manager
+
+data:
+  customResourceDefinitions: |-
+    - apiVersion: apiextensions.k8s.io/v1beta1
+      kind: CustomResourceDefinition
+      metadata:
+        name: installations.istio.openshift.com
+      spec:
+        group: istio.openshift.com
+        names:
+          kind: Installation
+          plural: installations
+          singular: installation
+        scope: Namespaced
+        version: v1alpha1
+
+  clusterServiceVersions: |-
+    - apiVersion: operators.coreos.com/v1alpha1
+      kind: ClusterServiceVersion
+      metadata:
+        name: maistra.v0.5.0
+      spec:
+        displayName: Maistra
+        description: "Maistra, otherwise known as OpenShift Service Mesh, is Red Hat's version of Istio."
+        keywords: ['service mesh', 'istio']
+        maintainers:
+        - name: Red Hat
+          email: [email protected]
+        provider:
+          name: Red Hat
+        links:
+        - name: Documentation
+          url: https://maistra.io
+        install:
+          strategy: deployment
+          spec:
+            permissions:
+            - serviceAccountName: istio-operator
+              rules:
+              - apiGroups:
+                - istio.openshift.com
+                resources:
+                - "*"
+                verbs:
+                - "*"
+              - apiGroups:
+                - ""
+                resources:
+                - pods
+                - services
+                - endpoints
+                - persistentvolumeclaims
+                - events
+                - configmaps
+                - secrets
+                - securitycontextconstraints
+                verbs:
+                - "*"
+              - apiGroups:
+                - apps
+                resources:
+                - deployments
+                - daemonsets
+                - replicasets
+                - statefulsets
+                verbs:
+                - "*"
+            clusterPermissions:
+            - serviceAccountName: istio-operator
+              rules:
+              - apiGroups:
+                - '*'
+                resources:
+                - '*'
+                verbs:
+                - '*'
+              - nonResourceURLs:
+                - '*'
+                verbs:
+                - '*'
+            deployments:
+            - name: istio-operator
+              spec:
+                replicas: 1
+                strategy:
+                  type: RollingUpdate
+                selector:
+                  matchLabels:
+                    app: istio-operator
+                template:
+                  metadata:
+                    labels:
+                      app: istio-operator
+                  spec:
+                    containers:
+                    - name: istio-operator
+                      image: maistra/istio-operator-centos7:0.5.0
+                      ports:
+                      - containerPort: 60000
+                        name: metrics
+                      command:
+                      - istio-operator
+                      imagePullPolicy: Always
+                      env:
+                      - name: WATCH_NAMESPACE
+                        valueFrom:
+                          fieldRef:
+                            fieldPath: metadata.namespace
+                      - name: OPERATOR_NAME
+                        value: "istio-operator"
+                    serviceAccountName: istio-operator
+        maturity: alpha
+        version: 0.5.0
+        apiservicedefinitions:
+        customresourcedefinitions:
+          owned:
+          - name: installations.istio.openshift.com
+            version: v1alpha1
+            kind: Installation
+            displayName: Maistra Installation
+            description: CRD representing Maistra installation options
+
+  packages: |-
+    - packageName: maistra
+      channels:
+      - name: alpha
+        currentCSV: maistra.v0.5.0
+---
+apiVersion: operators.coreos.com/v1alpha1
+kind: CatalogSource
+metadata:
+  name: maistra-operators
+  namespace:  openshift-operator-lifecycle-manager
+spec:
+  sourceType: internal
+  configMap: maistra-operators
+  displayName: Maistra Operators
+  publisher: Red Hat