Remove helm

.github/workflows/knative-e2e-tests.yaml

@@ -74,6 +74,11 @@ jobs:
 
     - uses: azure/setup-helm@v1
 
+    - name: RBAC rules for helm
+      run: |
+        export ITER8=$(pwd)
+        kubectl apply -f ${ITER8}/samples/knative/canaryprogressive/helm-rbac.yaml
+
     - name: create Knative app with canary
       run: |
         export ITER8=$(pwd)

mkdocs/docs/getting-started/install.md

@@ -15,7 +15,7 @@ title: Installation
 Install Iter8 in your Kubernetes cluster as follows.
 
 ```shell
-export TAG=v0.3.0
+export TAG=v0.3.2
 curl -s https://raw.githubusercontent.com/iter8-tools/iter8-install/main/install.sh | bash
 ```
 
@@ -26,7 +26,7 @@ curl -s https://raw.githubusercontent.com/iter8-tools/iter8-install/main/install
     set -e
 
     # Step 0: Export TAG
-    export TAG="${TAG:-v0.3.0}"
+    export TAG="${TAG:-v0.3.2}"
 
     # Step 1: Install Iter8
     echo "Installing Iter8"
@@ -45,7 +45,7 @@ curl -s https://raw.githubusercontent.com/iter8-tools/iter8-install/main/install
 Install Iter8's Prometheus add-on in your cluster as follows. This step assumes you have installed Iter8 following Step 1 above.
 
 ```shell
-export TAG=v0.3.0
+export TAG=v0.3.2
 curl -s https://raw.githubusercontent.com/iter8-tools/iter8-install/main/install-prom-add-on.sh | bash
 ```
 
@@ -56,7 +56,7 @@ curl -s https://raw.githubusercontent.com/iter8-tools/iter8-install/main/install
     set -e
 
     # Step 0: Export TAG
-    export TAG="${TAG:-v0.3.0}"
+    export TAG="${TAG:-v0.3.2}"
 
     # Step 1: Install Prometheus add-on
     # This step assumes you have installed Iter8 using install.sh

mkdocs/docs/getting-started/quick-start/with-knative.md

@@ -56,6 +56,8 @@ export ITER8=$(pwd)
 ## 3. Install Knative and Iter8
 Knative can work with multiple networking layers. So can Iter8's Knative extension. Choose a networking layer for Knative.
 
+This also installs sample metrics for Knative and Iter8's Prometheus add-on. These optional components are used by the sample experiment below.
+
 === "Contour"
 
     ```shell

mkdocs/docs/tutorials/knative/canary-fixedsplit.md

@@ -19,7 +19,7 @@ You will create the following resources in this tutorial.
     - eventually replaces `baseline` with `candidate` using Kustomize
 
 ???+ warning "Before you begin, you will need... "
-    **Kubernetes cluster:** Ensure that you have Kubernetes cluster with Iter8 and Knative installed. You can do this by following Steps 1, 2, and 3 of the [quick start tutorial for Knative](../../../getting-started/quick-start/with-knative/).
+    **Kubernetes cluster:** Ensure that you have a Kubernetes cluster with Iter8, Knative, Iter8 sample metrics for Knative, and Prometheus installed. You can do this by following Steps 1, 2, and 3 of the [quick start tutorial for Knative](../../../getting-started/quick-start/with-knative/).
 
     **Cleanup:** If you ran an Iter8 tutorial earlier, run the associated cleanup step.
 

mkdocs/docs/tutorials/knative/canary-progressive.md

@@ -19,15 +19,23 @@ You will create the following resources in this tutorial.
     - eventually replaces `baseline` with `candidate` using Helm
 
 ???+ warning "Before you begin, you will need... "
-    **Kubernetes cluster:** Ensure that you have Kubernetes cluster with Iter8 and Knative installed. You can do this by following Steps 1, 2, and 3 of the [quick start tutorial for Knative](../../../getting-started/quick-start/with-knative/).
+    **Kubernetes cluster:** Ensure that you have a Kubernetes cluster with Iter8, Knative, Iter8 sample metrics for Knative, and Prometheus installed. You can do this by following Steps 1, 2, and 3 of the [quick start tutorial for Knative](../../../getting-started/quick-start/with-knative/).
 
     **Cleanup:** If you ran an Iter8 tutorial earlier, run the associated cleanup step.
 
     **ITER8:** Ensure that `ITER8` environment variable is set to the root directory of your cloned Iter8 repo. See [Step 2 of the quick start tutorial for Knative](../../../getting-started/quick-start/with-knative/#2-clone-iter8-repo) for example.
 
     **[Helm v3](https://helm.sh/) and [`iter8ctl`](../../../getting-started/install/#optional-step-3-iter8ctl):** This tutorial uses Helm v3 and `iter8ctl`.
 
-## 1. Create versions
+## 1. Give Permission to Iter8 to Call `helm upgrade`
+
+Helm uses secrets to record information about releases. This tutorial uses an experiment that invokes Helm. Enable this experiment using the following RBAC.
+
+```shell
+kubectl apply -f ${ITER8}/samples/knative/canaryprogressive/helm-rbac.yaml
+```
+
+## 2. Create versions
 ```shell
 helm install --repo https://raw.githubusercontent.com/iter8-tools/iter8/master/samples/knative/canaryprogressive/helm-repo sample-app sample-app --namespace=iter8-system
 kubectl wait ksvc/sample-app --for condition=Ready --timeout=120s
@@ -60,7 +68,7 @@ helm upgrade --install --repo https://raw.githubusercontent.com/iter8-tools/iter
       percent: 0
     ```
 
-## 2. Generate requests
+## 3. Generate requests
 ```shell
 kubectl wait --for=condition=Ready ksvc/sample-app
 URL_VALUE=$(kubectl get ksvc sample-app -o json | jq .status.address.url)
@@ -98,7 +106,7 @@ sed "s+URL_VALUE+${URL_VALUE}+g" $ITER8/samples/knative/canaryprogressive/fortio
           restartPolicy: Never    
     ```
 
-## 3. Create Iter8 experiment
+## 4. Create Iter8 experiment
 ```shell
 kubectl apply -f $ITER8/samples/knative/canaryprogressive/experiment.yaml
 ```
@@ -169,7 +177,7 @@ kubectl apply -f $ITER8/samples/knative/canaryprogressive/experiment.yaml
             value: candidate   
     ```
 
-## 4. Observe experiment
+## 5. Observe experiment
 Observe the experiment in realtime. Paste commands from the tabs below in separate terminals.
 
 === "iter8ctl"
@@ -203,7 +211,7 @@ Observe the experiment in realtime. Paste commands from the tabs below in separa
 
     As the experiment progresses, you should see traffic progressively shift from `sample-app-v1` to `sample-app-v2`. When the experiment completes, all of the traffic will be sent to the winner, `sample-app-v2`.
 
-## 5. Cleanup
+## 6. Cleanup
 ```shell
 kubectl delete -f $ITER8/samples/knative/canaryprogressive/experiment.yaml
 kubectl delete -f $ITER8/samples/knative/canaryprogressive/fortio.yaml

mkdocs/docs/tutorials/knative/conformance.md

@@ -16,7 +16,7 @@ You will create the following resources in this tutorial.
 3. An **Iter8 experiment** that verifies that `baseline` satisfies mean latency, 95th percentile tail latency, and error rate `objectives`.
 
 ???+ warning "Before you begin, you will need... "
-    **Kubernetes cluster:** Ensure that you have Kubernetes cluster with Iter8 and Knative installed. You can do this by following Steps 1, 2, and 3 of the [quick start tutorial for Knative](../../../getting-started/quick-start/with-knative/).
+    **Kubernetes cluster:** Ensure that you have a Kubernetes cluster with Iter8, Knative, Iter8 sample metrics for Knative, and Prometheus installed. You can do this by following Steps 1, 2, and 3 of the [quick start tutorial for Knative](../../../getting-started/quick-start/with-knative/).
 
     **Cleanup:** If you ran an Iter8 tutorial earlier, run the associated cleanup step.
 

mkdocs/docs/tutorials/knative/mirroring.md

@@ -17,7 +17,7 @@ You will create the following resources in this tutorial.
 4. An **Iter8 experiment** that verifies that the dark version satisfies mean latency, 95th percentile tail latency, and error rate `objectives`.
 
 ???+ warning "Before you begin, you will need... "
-    **Kubernetes cluster with Iter8, Knative and Istio:** Ensure that you have Kubernetes cluster with Iter8 and Knative installed, and that Knative uses the Istio networking layer. You can do so by following Steps 1, 2, and 3 of the [quick start tutorial for Knative](../../../getting-started/quick-start/with-knative/), and selecting Istio during Step 3.
+    **Kubernetes cluster with Iter8, Knative and Istio:** Ensure that you have a Kubernetes cluster with Iter8, Knative with the Istio networking layer, Iter8 sample metrics for Knative, and Prometheus installed. You can do so by following Steps 1, 2, and 3 of the [quick start tutorial for Knative](../../../getting-started/quick-start/with-knative/), and selecting Istio during Step 3.
 
     **Cleanup:** If you ran an Iter8 tutorial earlier, run the associated cleanup step.
 

mkdocs/docs/tutorials/knative/traffic-segmentation.md

@@ -17,7 +17,7 @@ You will create the following resources in this tutorial.
 4. An **Iter8 experiment** which verifies that the `candidate` satisfies mean latency, 95th percentile tail latency, and error rate `objectives`, and progressively increases the proportion of traffic with `country: wakanda` header that is routed to the `candidate`.
 
 ???+ warning "Before you begin, you will need... "
-    **Kubernetes cluster with Iter8, Knative and Istio:** Ensure that you have Kubernetes cluster with Iter8 and Knative installed, and that Knative uses the Istio networking layer. You can do this by following Steps 1, 2, and 3 of the [quick start tutorial for Knative](../../../getting-started/quick-start/with-knative/), and selecting Istio during Step 3.
+    **Kubernetes cluster with Iter8, Knative and Istio:** Ensure that you have a Kubernetes cluster with Iter8, Knative with the Istio networking layer, Iter8 sample metrics for Knative, and Prometheus installed. You can do this by following Steps 1, 2, and 3 of the [quick start tutorial for Knative](../../../getting-started/quick-start/with-knative/), and selecting Istio during Step 3.
 
     **Cleanup:** If you ran an Iter8 tutorial earlier, run the associated cleanup step.
 

samples/knative/canaryprogressive/helm-rbac.yaml

@@ -0,0 +1,53 @@
+# This role enables writing secrets; 
+# Iter8 handler uses this role during Helm release tasks
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  name: secret-writer
+rules:
+- apiGroups:
+  - ""
+  resources:
+  - secrets
+  verbs: ["create", "update", "patch", "delete"]
+---
+# Helm v3 uses secrets to store Helm release information.
+# 
+# By default, when Helm is used within Iter8 experiments, secrets 
+# will be located in the Iter8 namespace.
+#
+# This role binding enables Iter8 handler to read 
+# secrets in the namespace where Iter8 is installed
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+  name: secret-reader-handler
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: secret-reader
+subjects:
+- kind: ServiceAccount
+  name: handlers
+  namespace: iter8-system
+---
+# Helm v3 uses secrets to store Helm release information.
+# 
+# By default, when Helm is used within Iter8 experiments, secrets 
+# will be located in the Iter8 namespace.
+#
+# This role binding enables Iter8 handler to write 
+# secrets in the namespace where Iter8 is installed
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+  name: secret-writer-handler
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: secret-writer
+subjects:
+- kind: ServiceAccount
+  name: handlers
+  namespace: iter8-system
+---

samples/knative/quickstart/platformsetup.sh

@@ -30,6 +30,7 @@ if [[ ! " ${NETWORK_LAYERS[@]} " =~ " ${1} " ]]; then
 fi
 
 # Step 1: Export correct tags for install artifacts
+export GIT_ACCOUNT="${GIT_ACCOUNT:-iter8-tools}"
 export TAG="${TAG:-v0.3.0}"
 export KNATIVE_TAG="${KNATIVE_TAG:-v0.21.0}"
 echo "TAG = $TAG"
@@ -114,12 +115,14 @@ fi
 ### Note: the preceding steps perform domain install; following steps perform Iter8 install
 
 # Step 5: Install Iter8
-echo "Installing Iter8"
-curl -s https://raw.githubusercontent.com/iter8-tools/iter8-install/main/install.sh | bash
+echo "Installing Iter8 with Knative support"
+curl -s https://raw.githubusercontent.com/${GIT_ACCOUNT}/iter8-install/${TAG}/install.sh | bash
 
-# Step 6: Install Iter8's Prometheus add-on
+# Step 6: Install sample metrics for Knative and Iter8's Prometheus add-on
+echo "Installing sample metrics"
+kubectl apply -f https://raw.githubusercontent.com/${GIT_ACCOUNT}/iter8-install/${TAG}/metrics/build.yaml
 echo "Installing Iter8's Prometheus add-on"
-curl -s https://raw.githubusercontent.com/iter8-tools/iter8-install/main/install-prom-add-on.sh | bash
+curl -s https://raw.githubusercontent.com/${GIT_ACCOUNT}/iter8-install/${TAG}/install-prom-add-on.sh | bash
 
 # Step 7: Verify Iter8 installation
 echo "Verifying installation"