Installing Che in a restricted environment on OpenShift

[themr0c]

Describe the bug

The script in https://www.eclipse.org/che/docs/stable/administration-guide/installing-che-in-a-restricted-environment/ is not entirely functional:

• The custom catalog source, once deployed, stays in TRANSIENT_FAILURE status.

• The mirroring has errors putting the images into the expected destination.

Che version

7.46

Steps to reproduce

• Install a crc instance with 12 GB RAM and 54 GB disk size.
• Follow the procedure in https://www.eclipse.org/che/docs/stable/administration-guide/installing-che-in-a-restricted-environment/
• Display the status of the restricted-environment-install catalog source
• Browse the script output (for the last command).

Expected behavior

• The restricted-environment-install catalog source status is not TRANSIENT_FAILURE
• No errors during mirroring

Runtime

CodeReady Container

Screenshots

Installation method

other (please specify in additional context)

Environment

Linux

Eclipse Che Logs

No response

Additional context

Followup on eclipse-che/che-docs#2307 and #21284

[nickboldt]

Downstream version in https://red-hat-developers-documentation.pages.redhat.com/red-hat-devtools/devspaces/asciidoctor/administration-guide/#installing-devspaces-in-a-restricted-environment-on-openshift looks like this -- same script, different parameters:

$ bash prepare-restricted-environment.sh \
  --ocp_ver "4.10" \
  --devworkspace_operator_index "registry.redhat.io/redhat/redhat-operator-index:v4.10" \
  --devworkspace_operator_version "v0.14.1" \
  --prod_operator_index "registry.redhat.io/redhat/redhat-operator-index:v4.10" \
  --prod_operator_package_name "devspaces-operator" \
  --prod_operator_version "v3.0.0" \
  --my_registry "<my_registry>"

[themr0c]

Now we have something running.
The mistake was: filter out the old bundles but not the packages list.
But it's still not optimal: we should filter the packages and bundles to have a smaller number of related images to mirror.
See: https://github.com/eclipse-che/che-docs/blob/main/modules/administration-guide/attachments/restricted-environment/prepare-restricted-environment.sh#L46

NOTE: Test on a real cluster with a real external registry. Don't use the internal CRC registry.

[themr0c]

I believe it would make sense to have this feature in chectl rather than in a script in the documentation repository.