install_ocp.sh

#!/bin/bash

# ====================================================
# Standalone script for deploying syndesis on OCP (including imagestreams)

# Exit if any error occurs
# Fail on a single failed command in a pipeline (if supported)
set -o pipefail

# Fail on error and undefined vars (please don't use global vars, but evaluation of functions for return values)
set -eu

# Save global script args
ARGS=("$@")


# Helper functions:

# Dir where this script is located
basedir() {
    # Default is current directory
    local script=${BASH_SOURCE[0]}

    # Resolve symbolic links
    if [ -L $script ]; then
        if readlink -f $script >/dev/null 2>&1; then
            script=$(readlink -f $script)
        elif readlink $script >/dev/null 2>&1; then
            script=$(readlink $script)
        elif realpath $script >/dev/null 2>&1; then
            script=$(realpath $script)
        else
            echo "ERROR: Cannot resolve symbolic link $script"
            exit 1
        fi
    fi

    local dir=$(dirname "$script")
    local full_dir=$(cd "${dir}" && pwd)
    echo ${full_dir}
}

# Checks if a flag is present in the arguments.
hasflag() {
    filters="$@"

    if [[ ! -z ${ARGS+x} ]]; then
        for var in "${ARGS[@]}"; do
            for filter in $filters; do
              if [ "$var" = "$filter" ]; then
                  echo 'true'
                  return
              fi
            done
        done
    fi
}

# Read the value of an option.
readopt() {
    filters="$@"
    if [[ ! -z ${ARGS+x} ]]; then
        next=false
        for var in "${ARGS[@]}"; do
            if $next; then
                echo $var
                break;
            fi
            for filter in $filters; do
                if [[ "$var" = ${filter}* ]]; then
                    local value="${var//${filter}=/}"
                    if [ "$value" != "$var" ]; then
                        echo $value
                        return
                    fi
                    next=true
                fi
            done
        done
    fi
}

# Getting base dir
BASEDIR=$(basedir)

# Get configuration and other scripts
pushd > /dev/null . && cd "${BASEDIR}"
source "$BASEDIR/base_functions.sh"
source "$BASEDIR/common_config.sh"
source "$BASEDIR/libs/download_functions.sh"
source "$BASEDIR/libs/openshift_functions.sh"
popd > /dev/null

DEFAULT_CR_FILE="$BASEDIR/default-cr.yml"

SYNDESIS_CLI=$(get_syndesis_bin)
check_error $SYNDESIS_CLI

display_usage() {
  cat <<EOT
Fuse Online Installation Tool for OCP

Usage: install_ocp.sh [options]

with options:

-s  --setup                   Install CRDs clusterwide. Use --grant if you want a specific user to be
                              able to install Fuse Online. You have to run this option once as cluster admin.
-u  --grant <user>            Add permissions for the given user so that user can install the operator
                              in her projects. You have to run this as cluster-admin
    --cluster                 Add the permission for all projects in the cluster
                              (only when used together with --grant)
   --force                    Override an existing installation if present
-p --project <project>        Install into this project. The project will be deleted
                              if it already exists. By default, install into the current project (without deleting)
   --skip-pull-secret         Skip the creation of the pull-secret. By default, will create or replace the pull-secret.
-w --watch                    Wait until the installation has completed
-o --open                     Open Fuse Online after installation (implies --watch)
                              (version is optional)
   --help                     This help message
-v --verbose                  Verbose logging

You have to run "--setup --grant <user>" as a cluster-admin before you can install Fuse Online as a user.
If there is no oc command on the PATH and there is minishift, it uses the oc command from the minishift installation.
EOT
}

# ============================================================
open_url() {
    local url=$1
    local cmd="$(probe_commands open xdg-open chrome firefox)"
    if [ -z "$cmd" ]; then
        echo "Cannot find command for opening URL:"
        echo $url
        exit 1
    fi
    exec $cmd $url
}

probe_commands() {
    for cmd in $@; do
      local ret=$(which $cmd 2>/dev/null)
      if [ $? -eq 0 ]; then
          echo $ret
          return
      fi
    done
}

get_route_when_ready() {
    local name="${1}"
    local route=$(get_route $name)
    while [ -z "$route" ]; do
        sleep 10
        route=$(get_route $name)
    done
    echo $route
}

get_route() {
  local name="${1}"
  oc get route $name -o jsonpath="{.spec.host}" 2>/dev/null
}

grant_role() {
  local user_to_prepare="$1"
  if [ -z "$user_to_prepare" ]; then
    check_error "ERROR: Cannot perform grant as no user specified"
  fi

  echo "Grant syndesis-installer role to user $user_to_prepare"

  #
  # Check that the user calling --grant is a cluster-admin
  #
  if [ $(is_cluster_admin) != "OK" ]; then
    check_error "ERROR: Can only execute --grant as cluster-admin."
  fi

  clusterwide=""
  if [ $(hasflag --cluster) ]; then
    clusterwide="--cluster"
  fi

  set +e
  $SYNDESIS_CLI grant --user "$user_to_prepare" $clusterwide
  set -e
}

# ==============================================================

if [ $(hasflag --help -h) ]; then
    display_usage
    exit 0
fi

if [ $(hasflag --verbose -v) ]; then
    export PS4='+($(basename ${BASH_SOURCE[0]}):${LINENO}): ${FUNCNAME[0]:+${FUNCNAME[0]}(): }'
    set -x
fi

#
# Check for oc
#
err=$(setup_oc)
check_error $err

#
# Is the user executing this a cluster-admin?
#
cluster_admin=$(is_cluster_admin)
if [ "${cluster_admin}" == "OK" ]; then
  echo "User $(oc whoami) is a cluster-admin"
fi

#
# If a project is given, only a cluster-admin
# can create it new or recreate it
#
project=$(readopt --project -p)
if [ -n "${project}" ]; then
  if [ "$cluster_admin" == "OK" ]; then
    recreate_project $project
  else
    check_error "ERROR: It is not possible to install into a new (or recreated) project without being a cluster-admin since artifacts required by the install cannot be (re)created."
  fi
fi

prep_only="false"
if [ $(hasflag -s --setup) ]; then
    echo "Installing Syndesis CRD"

    #
    # Check that the user calling --setup is a cluster-admin
    #
    if [ "$cluster_admin" != "OK" ]; then
      check_error "ERROR: Can only execute --setup as cluster-admin."
    fi

    $SYNDESIS_CLI install cluster

    prep_only="true"
fi

user_to_prepare="$(readopt -u --grant)"
if [ -n  "$user_to_prepare" ]; then
    grant_role "$user_to_prepare"
    prep_only="true"
fi

if $prep_only; then
    exit 0
fi

# ===========================
#
# Do some pre-flight install checks
#
# ===========================

#
# make sure pull secret is present (required since 7.3)
#
if [ ! $(hasflag --skip-pull-secret) ]; then
  create_or_replace_secret
fi

#
# If a cluster-admin and the role has not yet been granted
# then ensure it is by grant it to the current user
#
if [ "$cluster_admin" == "OK" ]; then
  if [ "$(is_role_granted)" != "OK" ]; then
    echo "No syndesis-installer role has been granted so installing now"
    grant_role "$(oc whoami)"
  fi
fi

#
# Check that user has syndesis-installer role available
#
result=$(is_role_granted)
check_error "$result"

#
# Check CRD installed
#
set +e
oc get syndesis >/dev/null 2>&1
if [ $? -ne 0 ]; then
    check_error "ERROR: No CRD Syndesis installed or no permissions to read them. Please run --setup and/or --grant as cluster-admin. Please use '--help' for more information."
fi
set -e

# Deploy operator and wait until its up
echo "Deploying Syndesis operator"
$SYNDESIS_CLI install operator --tag 1.9

set +e
oc scale deployment syndesis-operator --replicas 0
result=$(oc secrets link syndesis-operator syndesis-pull-secret --for=pull >$ERROR_FILE 2>&1)
check_error $result
if [ $(is_ocp3) == "true" ]; then
   oc set env deployment/syndesis-operator RELATED_IMAGE_PROMETHEUS='registry.redhat.io/openshift3/prometheus:v3.9'
fi
#Hotfix for ENTESB-
oc set env deployment/syndesis-operator RELATED_IMAGE_UI=registry.redhat.io/fuse7/fuse-online-ui-rhel8:1.9
oc set env deployment/syndesis-operator RELATED_IMAGE_S2I=registry.redhat.io/fuse7/fuse-online-builder-rhel8:1.9
oc set env deployment/syndesis-operator RELATED_IMAGE_UPGRADE=registry.redhat.io/fuse7/fuse-online-upgrade-rhel8:1.9
oc set env deployment/syndesis-operator RELATED_IMAGE_META=registry.redhat.io/fuse7/fuse-online-meta-rhel8:1.9
oc set env deployment/syndesis-operator RELATED_IMAGE_PSQL_EXPORTER=registry.redhat.io/fuse7/fuse-postgres-exporter-rhel8:1.9
oc set env deployment/syndesis-operator RELATED_IMAGE_SERVER=registry.redhat.io/fuse7/fuse-online-server-rhel8:1.9
oc scale deployment syndesis-operator --replicas 1
set -e

# Wait for deployment
wait_for_deployments deployment 1 syndesis-operator

# Check syndesis cr already installed. If force then remove first.
syndesis_installed=$(oc get syndesis -o name | wc -l)
force=$(hasflag --force)
if [ $syndesis_installed -gt 0 ]; then
    echo "Warning ... Syndesis custom resource already installed: '${syndesis_installed}'"
    if [ -n "${force}" ]; then
        echo "Removing already installed Syndesis custom resource"
        oc delete $(oc get syndesis -o name)
    fi
fi

# Create syndesis resource
echo "Creating Syndesis with fuse-online resource"
if [ ! -f "${DEFAULT_CR_FILE}" ]; then
    echo "Cannot custom-resource file '$DEFAULT_CR_FILE' ... exiting."
    exit 1
fi

set +e
result=$($SYNDESIS_CLI install app --custom-resource ${DEFAULT_CR_FILE})
check_error $result
set -e

jaeger_enabled=$(oc get syndesis app -o jsonpath='{.spec.addons.jaeger.enabled}')
check_error $jaeger_enabled
if [ "$jaeger_enabled" == "true" ]; then
    # on OCP 4 the jaeger-operator is installed from operatorhub on openshift-operator namespace
    # in that case there is no need to set secrets for it
    if [ $(is_ocp3) == "true" ]; then
        wait_for sa jaeger-operator
        result=$(oc secrets link jaeger-operator syndesis-pull-secret --for=pull)
        check_error $result
        # workaround as the previous "oc secrets link" doesn't trigger a pod restart
        oc delete `oc get -o name pod -l name=jaeger-operator`

        wait_for sa syndesis-jaeger-ui-proxy
        result=$(oc secrets link syndesis-jaeger-ui-proxy syndesis-pull-secret --for=pull)
        check_error $result
        # workaround as the previous "oc secrets link" doesn't trigger a pod restart
        oc delete `oc get -o name pod -l app.kubernetes.io/name=syndesis-jaeger`
    fi
fi

if [ $(hasflag --watch -w) ] || [ $(hasflag --open -o) ]; then
    wait_for_deployments dc 1 syndesis-server syndesis-ui syndesis-meta
fi

# ==========================================================

echo "Getting Syndesis route"
route=$(get_route_when_ready "syndesis")

cat <<EOT
========================================================
Congratulation, Fuse Online $TAG has been installed successfully !
Open now your browser at the following URL:

https://$route

Enjoy !
EOT

if [ $(hasflag --open -o) ]; then
    open_url "https://$route"
fi