helm install service-mesh-operators -n openshift-operators service-mesh-operators/
Manually approve the InstallPlans within the openshift-operators namespace.
-
Navigate the the InstallPlans search page
echo "https://$(oc get route console -o jsonpath={.spec.host} -n openshift-console)/k8s/ns/openshift-operators/operators.coreos.com~v1alpha1~InstallPlan"
-
Select each InstallPlan on the search page. Within each InstallPlan's Overview tab select the Preview Install Plan button, then select the Approve button on the Components tab.
-
Delete the helm chart release:
helm delete service-mesh-operators -n openshift-operators
-
Follow the instructions from https://docs.openshift.com/container-platform/4.3/service_mesh/service_mesh_install/removing-ossm.html
export deploy_namespace=istio-system
oc new-project ${deploy_namespace}
#Note: you may need to wait a moment for the operators to propagate
helm install control-plane -n ${deploy_namespace} control-plane/
export deploy_namespace=istio-system
helm delete control-plane -n ${deploy_namespace}
Follow the steps described within Configuring the OIDC Provider with Okta to create an Okta application & authorization server. Retrieve its client_id
and client_secret
.
Note that the Okta Application needs the login redirect URI to match the ${redirect_url} defined below.
export deploy_namespace=istio-system
export client_id=<my_client_id>
export client_secret=<my_client_secret>
export redirect_url="https://api-istio-system.$(oc get route console -o jsonpath={.status.ingress[0].routerCanonicalHostname} -n openshift-console)/oauth2/callback"
oc new-project ${deploy_namespace}
#Note: you may need to wait a moment for the operators to propagate
helm install control-plane-oauth2 -n ${deploy_namespace} --set client_id=${client_id} --set client_secret=${client_secret} --set redirect_url=${redirect_url} control-plane-oauth2/
export deploy_namespace=istio-system
helm delete control-plane-oauth2 -n ${deploy_namespace}
export deploy_namespace=istio-system
oc new-project ${deploy_namespace}
#Note: you may need to wait a moment for the operators to propagate
helm install control-plane-mongodb -n ${deploy_namespace} control-plane-mongodb/
export deploy_namespace=istio-system
helm delete control-plane-mongodb -n ${deploy_namespace}
export deploy_namespace=istio-system
helm install jaeger-proxy -n ${deploy_namespace} jaeger-proxy/
export deploy_namespace=istio-system
helm delete jaeger-proxy -n ${deploy_namespace}