Skip to content
This repository was archived by the owner on Aug 2, 2019. It is now read-only.

Commit 1e325cd

Browse files
committed
Disable auth (obviates mTLS deletes?) and restore downscaling
1 parent 056fa41 commit 1e325cd

File tree

1 file changed

+12
-4
lines changed

1 file changed

+12
-4
lines changed

etc/scripts/install.sh

Lines changed: 12 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -73,7 +73,7 @@ metadata:
7373
name: istio-installation
7474
spec:
7575
istio:
76-
authentication: true
76+
authentication: false
7777
community: true
7878
version: 0.2.0
7979
kiali:
@@ -83,9 +83,17 @@ spec:
8383
version: v0.7.1
8484
EOF
8585
timeout 900 'oc get pods -n istio-system && [[ $(oc get pods -n istio-system | grep openshift-ansible-istio-installer | grep -c Completed) -eq 0 ]]'
86-
# Disable mTLS in istio
87-
oc delete MeshPolicy default
88-
oc delete DestinationRule default -n istio-system
86+
87+
# Scale down unused services deployed by the istio addon. The jaeger
88+
# pods will fail anyway due to the elasticsearch pod failing due to
89+
# "max virtual memory areas vm.max_map_count [65530] is too low,
90+
# increase to at least [262144]" which could be mitigated on minishift
91+
# with:
92+
# minishift ssh "echo 'echo vm.max_map_count = 262144 >/etc/sysctl.d/99-elasticsearch.conf' | sudo sh"
93+
oc scale -n istio-system --replicas=0 deployment/grafana
94+
oc scale -n istio-system --replicas=0 deployment/jaeger-collector
95+
oc scale -n istio-system --replicas=0 deployment/jaeger-query
96+
oc scale -n istio-system --replicas=0 statefulset/elasticsearch
8997

9098
# for now, we must install the operators in specific namespaces, so...
9199
oc create ns knative-build

0 commit comments

Comments
 (0)