mirror of https://github.com/knative/docs.git
94 lines
3.8 KiB
Bash
94 lines
3.8 KiB
Bash
#!/usr/bin/env bash
|
|
|
|
# Turn colors in this script off by setting the NO_COLOR variable in your
|
|
# environment to any value:
|
|
#
|
|
# $ NO_COLOR=1 test.sh
|
|
NO_COLOR=${NO_COLOR:-""}
|
|
if [ -z "$NO_COLOR" ]; then
|
|
header=$'\e[1;33m'
|
|
reset=$'\e[0m'
|
|
else
|
|
header=''
|
|
reset=''
|
|
fi
|
|
|
|
function header_text {
|
|
echo "$header$*$reset"
|
|
}
|
|
|
|
header_text "Starting Knative test-drive on OpenShift!"
|
|
|
|
echo "Using oc version:"
|
|
oc version
|
|
|
|
header_text "Writing config"
|
|
oc cluster up --write-config
|
|
sed -i -e 's/"admissionConfig":{"pluginConfig":null}/"admissionConfig": {\
|
|
"pluginConfig": {\
|
|
"ValidatingAdmissionWebhook": {\
|
|
"configuration": {\
|
|
"apiVersion": "v1",\
|
|
"kind": "DefaultAdmissionConfig",\
|
|
"disable": false\
|
|
}\
|
|
},\
|
|
"MutatingAdmissionWebhook": {\
|
|
"configuration": {\
|
|
"apiVersion": "v1",\
|
|
"kind": "DefaultAdmissionConfig",\
|
|
"disable": false\
|
|
}\
|
|
}\
|
|
}\
|
|
}/' openshift.local.clusterup/kube-apiserver/master-config.yaml
|
|
|
|
header_text "Starting OpenShift with 'oc cluster up'"
|
|
oc cluster up --server-loglevel=5
|
|
|
|
header_text "Logging in as system:admin and setting up default namespace"
|
|
oc login -u system:admin
|
|
oc project default
|
|
oc adm policy add-scc-to-user privileged -z default -n default
|
|
oc label namespace default istio-injection=enabled
|
|
|
|
header_text "Setting up security policy for istio"
|
|
oc adm policy add-scc-to-user anyuid -z istio-ingress-service-account -n istio-system
|
|
oc adm policy add-scc-to-user anyuid -z default -n istio-system
|
|
oc adm policy add-scc-to-user anyuid -z prometheus -n istio-system
|
|
oc adm policy add-scc-to-user anyuid -z istio-egressgateway-service-account -n istio-system
|
|
oc adm policy add-scc-to-user anyuid -z istio-citadel-service-account -n istio-system
|
|
oc adm policy add-scc-to-user anyuid -z istio-ingressgateway-service-account -n istio-system
|
|
oc adm policy add-scc-to-user anyuid -z istio-cleanup-old-ca-service-account -n istio-system
|
|
oc adm policy add-scc-to-user anyuid -z istio-mixer-post-install-account -n istio-system
|
|
oc adm policy add-scc-to-user anyuid -z istio-mixer-service-account -n istio-system
|
|
oc adm policy add-scc-to-user anyuid -z istio-pilot-service-account -n istio-system
|
|
oc adm policy add-scc-to-user anyuid -z istio-sidecar-injector-service-account -n istio-system
|
|
oc adm policy add-cluster-role-to-user cluster-admin -z istio-galley-service-account -n istio-system
|
|
|
|
header_text "Installing istio"
|
|
curl -L https://storage.googleapis.com/knative-releases/serving/latest/istio.yaml \
|
|
| sed 's/LoadBalancer/NodePort/' \
|
|
| oc apply -f -
|
|
|
|
header_text "Waiting for istio to become ready"
|
|
sleep 5; while echo && oc get pods -n istio-system | grep -v -E "(Running|Completed|STATUS)"; do sleep 5; done
|
|
|
|
header_text "Setting up security policy for knative"
|
|
oc adm policy add-scc-to-user anyuid -z build-controller -n knative-build
|
|
oc adm policy add-scc-to-user anyuid -z controller -n knative-serving
|
|
oc adm policy add-scc-to-user anyuid -z autoscaler -n knative-serving
|
|
oc adm policy add-scc-to-user anyuid -z kube-state-metrics -n knative-monitoring
|
|
oc adm policy add-scc-to-user anyuid -z node-exporter -n knative-monitoring
|
|
oc adm policy add-scc-to-user anyuid -z prometheus-system -n knative-monitoring
|
|
oc adm policy add-cluster-role-to-user cluster-admin -z build-controller -n knative-build
|
|
oc adm policy add-cluster-role-to-user cluster-admin -z controller -n knative-serving
|
|
|
|
header_text "Installing Knative"
|
|
curl -L https://storage.googleapis.com/knative-releases/serving/latest/release-lite.yaml \
|
|
| sed 's/LoadBalancer/NodePort/' \
|
|
| oc apply -f -
|
|
|
|
header_text "Waiting for Knative to become ready"
|
|
sleep 5; while echo && oc get pods -n knative-serving | grep -v -E "(Running|Completed|STATUS)"; do sleep 5; done
|