csrwng / hypershift-ops

HyperShift team operational code and configuration

Creating a HyperShift CI cluster

Prerequisites

• OpenShift CLI
• Helm
• An OCP cluster (ROSA instructions)

Update the hypershift manifest

hypershift install render \
  --oidc-storage-provider-s3-bucket-name hypershift-ci-1-oidc \
  --oidc-storage-provider-s3-region us-east-1 \
  --oidc-storage-provider-s3-secret oidc-s3-creds \
  --hypershift-image hypershift-operator:ci > clusters/hypershift-ci-1/manifests/hypershift-operator.yaml

make kustomize

Update the hypershift operator image

Edit the ci tag in clusters/hypershift-ci-1/manifests/hypershift-imagestream.yaml

  - name: ci
    from:
      kind: DockerImage
      name: quay.io/hypershift/hypershift-operator:xxxx   <- THIS
    referencePolicy:
      type: Local
    importPolicy:
      scheduled: true

Install

Install HyperShift:

install.sh --cluster $CLUSTER --aws-creds $AWS_CREDS

After initial installation or as part of a credentials rotation, create a kubeconfig from the admin SA token which can be injected into CI jobs:

oc serviceaccounts --namespace hypershift-ops create-kubeconfig admin > /tmp/$CLUSTER.kubeconfig

Store the kubeconfig in Vault under the clusters directory in a secret named $CLUSTER with the following schema:

{
  "hypershift-ops-admin.kubeconfig": "<kubeconfig contents>",
  "secretsync/target-name": "$CLUSTER",
  "secretsync/target-namespace": "test-credentials"
}

Uninstall

To uninstall everything and start over, run:

uninstall.sh