27fa2f1ec4
Found by running this command: codespell -S .git,*.png,go.sum -L keypair,iam,ans,unknwon,tage,ths,creater Signed-off-by: Mateusz Gozdek <mgozdekof@gmail.com>
91 lines
3.5 KiB
Bash
Executable File
91 lines
3.5 KiB
Bash
Executable File
#!/usr/bin/env bash
|
|
|
|
# Copyright 2020 The Jetstack cert-manager contributors.
|
|
#
|
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
|
# you may not use this file except in compliance with the License.
|
|
# You may obtain a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
# See the License for the specific language governing permissions and
|
|
# limitations under the License.
|
|
|
|
set -o nounset
|
|
set -o errexit
|
|
set -o pipefail
|
|
|
|
SCRIPT_ROOT="$(dirname "${BASH_SOURCE}")"
|
|
TMP_DIR="$(mktemp -d)"
|
|
|
|
source "${SCRIPT_ROOT}/../lib/lib.sh"
|
|
setup_tools
|
|
|
|
if docker ps | grep "openshift/origin-node:v${OPENSHIFT_VERSION}" &>/dev/null; then
|
|
echo "Existing OpenShift 3 cluster found, skipping creating cluster..."
|
|
exit 0
|
|
fi
|
|
|
|
# Needed for `oc cluster up` as it places files in the current directory
|
|
cd "${TMP_DIR}"
|
|
|
|
mkdir -p "${TMP_DIR}/openshift.local.clusterup/kube-apiserver/"
|
|
|
|
# Let OpenShift generate all certificates and setup for the controller
|
|
echo "Running 'start master'"
|
|
docker run -v $(pwd)/openshift.local.clusterup/kube-apiserver/:/var/lib/origin/openshift.local.config/ \
|
|
"openshift/origin-control-plane:v${OPENSHIFT_VERSION}" start master \
|
|
--write-config=/var/lib/origin/openshift.local.config \
|
|
--master=127.0.0.1 \
|
|
--images="openshift/origin-\${component}:v$OPENSHIFT_VERSION" \
|
|
--dns=0.0.0.0:8053 \
|
|
--public-master=https://127.0.0.1:8443 \
|
|
--etcd-dir=/var/lib/etcd
|
|
|
|
# Let OpenShift generate all certificates and setup for the node
|
|
echo "Running 'adm create-node-config'"
|
|
"${OC3}" adm create-node-config \
|
|
--node-dir="${TMP_DIR}/openshift.local.clusterup/node" \
|
|
--certificate-authority="${TMP_DIR}/openshift.local.clusterup/kube-apiserver/ca.crt" \
|
|
--dns-bind-address=0.0.0.0:8053 \
|
|
--hostnames=localhost \
|
|
--hostnames=127.0.0.1 \
|
|
--images="openshift/origin-\${component}:v${OPENSHIFT_VERSION}" \
|
|
--node=localhost \
|
|
--node-client-certificate-authority="${TMP_DIR}/openshift.local.clusterup/kube-apiserver/ca.crt" \
|
|
--signer-cert="${TMP_DIR}/openshift.local.clusterup/kube-apiserver/ca.crt" \
|
|
--signer-key="${TMP_DIR}/openshift.local.clusterup/kube-apiserver/ca.key" \
|
|
--signer-serial="${TMP_DIR}/openshift.local.clusterup/kube-apiserver/ca.serial.txt"\
|
|
--volume-dir=/var/lib/origin/cluster-up/openshift.local.clusterup/openshift.local.volumes
|
|
|
|
# Patch the node configuration to disable features that do not work with Docker in Docker
|
|
cat << EOF >>"${TMP_DIR}/openshift.local.clusterup/node/node-config.yaml"
|
|
kubeletArguments:
|
|
cgroups-per-qos:
|
|
- "false"
|
|
cgroup-driver:
|
|
- "systemd"
|
|
enforce-node-allocatable:
|
|
- ""
|
|
EOF
|
|
|
|
# Patch for OpenShift using -v ":shared" in Docker
|
|
mount --make-shared /
|
|
# Set up the cluster itself
|
|
echo "Running 'cluster up'"
|
|
"${OC3}" cluster up --enable="-automation-service-broker,-centos-imagestreams,-persistent-volumes,-registry,-rhel-imagestreams,-router,-sample-templates,-service-catalog,-template-service-broker,-web-console"
|
|
|
|
# Set kubeconfig to be sysadmin
|
|
"${OC3}" login -u system:admin
|
|
|
|
# Disable restrictions for our test dependencies
|
|
"${OC3}" adm policy add-scc-to-group privileged system:authenticated
|
|
|
|
# Replace kube-dns with our patched CoreDNS
|
|
"${KUBECTL}" apply -n=kube-dns -f "${SCRIPT_ROOT}/config/openshift-coredns.yaml"
|
|
"${KUBECTL}" delete -n=kube-dns ds kube-dns
|
|
"${KUBECTL}" rollout -n=kube-dns status deploy/coredns
|