Installing DevOps Loop on IBM Red Hat OpenShift

You can install IBM® DevOps Loop on an IBM Red Hat OpenShift Container Platform (OCP) cluster to automate DevOps workflows, manage continuous integration and deployment pipelines, and monitor application performance across environments. To simplify the deployment, DevOps Loop provides a Helm-based installation script that automates prerequisite configuration and component installation.

You must have completed the following tasks:

Ensured that you have access to a Red Hat OpenShift Container Platform (OCP) 4.15 or later (x86_64) cluster. See OpenShift Container Platform 4.15 document.
Installed and configured OpenShift CLI (oc). See Download and install the Red Hat OpenShift CLI.
Installed the Helm 3 CLI. See Installing Helm.
Ensured that you have access to the IBM Entitled Registry to pull the required images. See Obtaining entitlement key.
Ensured that IBM Common License information is available. See DevOps Loop licensing information.
Ensured that SMTP server configuration details are available.
Ensured that valid TLS certificates (self-signed or CA-signed) are available. See Configuring trusted certificates in DevOps Loop.
Note: DevOps Loop requires a certificate signed by a trusted Certificate Authority (CA) for the fully qualified domain name used by the application. If OpenShift provides TLS termination, then you must use the existing OpenShift ingress certificate secret. To replace the default secret on your OpenShift ingress controller, refer to Understanding the default ingress certificate.

Prepare the cluster environment:
1. Log in to your OpenShift cluster by using the oc CLI.
2. Create or select a project (namespace) for the installation.
3. Ensure that the required storage classes are available (ReadWriteOnce or ReadWriteMany).
4. Verify that the cluster has internet connectivity if you plan to install DevOps Loop using the online method. Internet access is required to download container images and Helm charts directly from IBM repositories.
5. Optional: Prepare a certificate secret if you are using CA-signed certificates.
Optional: Configure Sysdig for IBM Cloud-managed OpenShift clusters:

If you are installing DevOps Loop on an IBM Cloud-managed Red Hat OpenShift cluster, configure Sysdig to prevent RabbitMQ pod restart issues.
1. Open the Sysdig agent config map:
```
oc edit configmap sysdig-agent -n ibm-observe
```
2. Add the following filter configuration, in the dragent.yaml section:
```
use_container_filter: true
container_filter:
  - exclude:
      kubernetes.pod.label.app.kubernetes.io/name: rabbitmq
  - exclude:
      kubernetes.pod.label.service: velocity-rabbitmq
```
3. Save and exit the editor to apply the change.
  
  Wait for few minutes for the configuration to take effect.
Configure access to the IBM Entitled Registry:
1. Retrieve your entitlement key from IBM Container Software Library.
2. Create an image pull secret in your OpenShift namespace to access IBM container images:
```
oc create secret docker-registry ibm-entitlement-key \
  --namespace <namespace> \
  --docker-username=cp \
  --docker-password=<entitlement-key> \
  --docker-server=cp.icr.io
```

Add the IBM Helm repository and download the DevOps Loop Helm chart:

helm repo add ibm-helm https://raw.githubusercontent.com/IBM/charts/master/repo/ibm-helm --force-update
helm pull --untar ibm-helm/ibm-devops-loop --version 2.0.200

Configure the following installation parameters:
- Cluster FQDN (DOMAIN)
- License acceptance (ACCEPT_LICENSE=true)
- License server (LICENSE_SERVER)
- SMTP configuration
- Password seed
- TLS certificate settings
Note: IBM Cloud automatically configures the cluster domain and ingress routing when you set the default domain to the DevOps Automation domain. This ensures that DevOps Loop components are accessible without requiring manual domain or ingress setup.
Run the installation script:
```
sh ./ibm-devops-loop/scripts/IBM-loop-OCP-install.sh
```
The script automates MongoDB provisioning, Configuration secrets, TLS setup and Helm deployment of DevOps Loop components.
Verify the installation by running the following command:
```
oc get pods -n devops-loop
```
Note: For more information, you can refer to the DevOps Loop README file.

You have installed DevOps Loop on IBM Red Hat OpenShift.

You can add users and manage user access by logging in to the Keycloak instance that is installed with DevOps Loop. See User access and administration using Keycloak.