Install our knative operators on minikube

We can't use the Maistra operator, since it's dependent on OpenShift,
so we install the istio.yaml released with knative-serving instead.

We do install OLM and the knative operators, of course.

Author: jcrossley3

etc/scripts/install-on-minikube.sh

@@ -0,0 +1,30 @@
+#!/usr/bin/env bash
+
+# WARNING: this totally destroys and recreates your `knative` profile,
+# thereby guaranteeing (hopefully) a clean environment upon successful
+# completion.
+
+if minikube status | grep "host: Running" >/dev/null; then
+  echo "Please stop your running minikube to acknowledge this script will destroy it."
+  exit 1
+fi
+
+set -x
+
+# blow away everything in the knative profile
+minikube delete --profile knative
+
+# configure knative profile
+minikube profile knative
+minikube config set kubernetes-version v1.11.5 -p knative
+minikube config set memory 10240 -p knative
+minikube config set cpus 4 -p knative
+minikube config set disk-size 50g -p knative
+
+# Start minikube
+minikube start -p knative --extra-config=apiserver.enable-admission-plugins="LimitRanger,NamespaceExists,NamespaceLifecycle,ResourceQuota,ServiceAccount,DefaultStorageClass,MutatingAdmissionWebhook"
+
+#oc login -u admin -p admin
+
+DIR="$( cd "$( dirname "${BASH_SOURCE[0]}" )" >/dev/null && pwd )"
+"$DIR/install.sh" -q

etc/scripts/install.sh

@@ -1,16 +1,18 @@
 #!/usr/bin/env bash
 
-# Installs OLM first, and then istio and knative using OLM operators
+# Attempts to install istio, knative, and OLM, ideally not in that order.
 
 if [ "$1" != "-q" ]; then
   echo
-  echo "  WARNING: This script will blindly attempt to install OLM, istio, and knative"
-  echo "  on your OpenShift cluster, so if any are already there, hijinks may ensue."
+  echo "  This script will attempt to install istio, knative, and OLM in your "
+  echo "  Kubernetes/OpenShift cluster."
+  echo
+  echo "  A recent version of the `oc` CLI should be in your PATH"
   echo
   echo "  If using OpenShift 3.11 and your cluster isn't minishift, ensure"
   echo "  \$KUBE_SSH_KEY and \$KUBE_SSH_USER are set"
   echo
-  echo "  Pass -q to disable this warning"
+  echo "  Pass -q to disable this prompt"
   echo
   read -p "Enter to continue or Ctrl-C to exit: "
 fi
@@ -37,16 +39,22 @@ wait_for_all_pods knative-serving
 # the two hostnames here
 oc -n knative-serving get cm config-controller -oyaml | sed "s/\(^ *registriesSkippingTagResolving.*$\)/\1,docker-registry.default.svc:5000,image-registry.openshift-image-registry.svc:5000/" | oc apply -f -
 
-# Add Golang imagestreams to be able to build go based images
-oc import-image -n openshift golang --from=centos/go-toolset-7-centos7 --confirm
-oc import-image -n openshift golang:1.11 --from=centos/go-toolset-7-centos7 --confirm
-
-# these perms are required by istio
-if ! oc project myproject 2>/dev/null; then
-  oc new-project myproject
+if oc get ns openshift 2>/dev/null; then
+  # Add Golang imagestreams to be able to build go based images
+  oc import-image -n openshift golang --from=centos/go-toolset-7-centos7 --confirm
+  oc import-image -n openshift golang:1.11 --from=centos/go-toolset-7-centos7 --confirm
+
+  if ! oc project myproject 2>/dev/null; then
+    oc new-project myproject
+  fi
+  # these perms are required by istio
+  oc adm policy add-scc-to-user privileged -z default
+  oc adm policy add-scc-to-user anyuid -z default
+else
+  oc create namespace myproject
+  oc label namespace myproject istio-injection=enabled
+  oc project myproject
 fi
-oc adm policy add-scc-to-user privileged -z default
-oc adm policy add-scc-to-user anyuid -z default
 
-# show all the pods
+# show all the running pods
 oc get pods --all-namespaces

etc/scripts/installation-functions.sh

@@ -26,7 +26,17 @@ function wait_for_all_pods {
 }
 
 function check_minishift {
-  (hash minishift && oc whoami --show-server | grep "$(minishift ip)") >/dev/null 2>&1
+  (hash minishift &&
+     minishift ip | grep -oE "\b([0-9]{1,3}\.){3}[0-9]{1,3}\b" &&
+     oc whoami --show-server | grep "$(minishift ip)"
+  ) >/dev/null 2>&1
+}
+
+function check_minikube {
+  (hash minikube &&
+     minikube ip | grep -oE "\b([0-9]{1,3}\.){3}[0-9]{1,3}\b" &&
+     oc whoami --show-server | grep "$(minikube ip)"
+  ) >/dev/null 2>&1
 }
 
 function check_openshift_4 {
@@ -40,6 +50,8 @@ function check_operatorgroups {
 function enable_admission_webhooks {
   if check_openshift_4; then
     echo "Detected OpenShift 4 - skipping enabling admission webhooks."
+  elif check_minikube; then
+    echo "Detected minikube - skipping enabling admission webhooks."
   elif check_minishift; then
     echo "Detected minishift - checking if admission webhooks are enabled."
     if ! minishift openshift config view --target=kube | grep ValidatingAdmissionWebhook >/dev/null; then
@@ -121,7 +133,7 @@ function install_olm {
   if check_openshift_4; then
     echo "Detected OpenShift 4 - skipping OLM installation."
     OLM_NS="openshift-operator-lifecycle-manager"
-  elif oc get ns "$OLM_NS"; then
+  elif oc get ns "$OLM_NS" 2>/dev/null; then
     echo "Detected OpenShift 3 with OLM already installed."
     # we'll assume this is v3.11.0, which doesn't support
     # OperatorGroups, or ClusterRoles in the CSV, so...
@@ -150,18 +162,23 @@ function install_olm {
 }
 
 function install_istio {
-  # istio
-  oc create ns istio-operator
-  if check_operatorgroups; then
-    cat <<-EOF | oc apply -f -
+  if check_minikube; then
+    echo "Detected minikube - incompatible with Maistra operator, so installing upstream istio."
+    oc apply -f "https://github.com/knative/serving/releases/download/${KNATIVE_SERVING_VERSION}/istio.yaml"
+    oc label namespace default istio-injection=enabled
+    wait_for_all_pods istio-system
+  else
+    oc create ns istio-operator
+    if check_operatorgroups; then
+      cat <<-EOF | oc apply -f -
 	apiVersion: operators.coreos.com/v1alpha2
 	kind: OperatorGroup
 	metadata:
 	  name: istio-operator
 	  namespace: istio-operator
 	EOF
-  fi
-  cat <<-EOF | oc apply -f -
+    fi
+    cat <<-EOF | oc apply -f -
 	apiVersion: operators.coreos.com/v1alpha1
 	kind: Subscription
 	metadata:
@@ -172,9 +189,9 @@ function install_istio {
 	  name: maistra
 	  source: maistra-operators
 	EOF
-  wait_for_all_pods istio-operator
+    wait_for_all_pods istio-operator
 
-  cat <<-EOF | oc apply -f -
+    cat <<-EOF | oc apply -f -
 	apiVersion: istio.openshift.com/v1alpha1
 	kind: Installation
 	metadata:
@@ -191,18 +208,19 @@ function install_istio {
 	    prefix: kiali/
 	    version: v0.7.1
 	EOF
-  timeout 900 'oc get pods -n istio-system && [[ $(oc get pods -n istio-system | grep openshift-ansible-istio-installer | grep -c Completed) -eq 0 ]]'
+    timeout 900 'oc get pods -n istio-system && [[ $(oc get pods -n istio-system | grep openshift-ansible-istio-installer | grep -c Completed) -eq 0 ]]'
 
-  # Scale down unused services deployed by the istio operator. The
-  # jaeger pods will fail anyway due to the elasticsearch pod failing
-  # due to "max virtual memory areas vm.max_map_count [65530] is too
-  # low, increase to at least [262144]" which could be mitigated on
-  # minishift with:
-  #  minishift ssh "echo 'echo vm.max_map_count = 262144 >/etc/sysctl.d/99-elasticsearch.conf' | sudo sh"
-  oc scale -n istio-system --replicas=0 deployment/grafana
-  oc scale -n istio-system --replicas=0 deployment/jaeger-collector
-  oc scale -n istio-system --replicas=0 deployment/jaeger-query
-  oc scale -n istio-system --replicas=0 statefulset/elasticsearch
+    # Scale down unused services deployed by the istio operator. The
+    # jaeger pods will fail anyway due to the elasticsearch pod failing
+    # due to "max virtual memory areas vm.max_map_count [65530] is too
+    # low, increase to at least [262144]" which could be mitigated on
+    # minishift with:
+    #  minishift ssh "echo 'echo vm.max_map_count = 262144 >/etc/sysctl.d/99-elasticsearch.conf' | sudo sh"
+    oc scale -n istio-system --replicas=0 deployment/grafana
+    oc scale -n istio-system --replicas=0 deployment/jaeger-collector
+    oc scale -n istio-system --replicas=0 deployment/jaeger-query
+    oc scale -n istio-system --replicas=0 statefulset/elasticsearch
+  fi
 }
 
 function install_knative_build {