# hypershift-ops

**Repository Path**: mirrors_openshift/hypershift-ops

## Basic Information

- **Project Name**: hypershift-ops
- **Description**: HyperShift team operational code and configuration
- **Primary Language**: Unknown
- **License**: Apache-2.0
- **Default Branch**: main
- **Homepage**: None
- **GVP Project**: No

## Statistics

- **Stars**: 0
- **Forks**: 0
- **Created**: 2022-02-05
- **Last Updated**: 2026-03-29

## Categories & Tags

**Categories**: Uncategorized

**Tags**: None

## README

# Creating a HyperShift CI cluster

## Prerequisites

- OpenShift CLI
- [Helm](https://helm.sh/)
- An OCP cluster ([ROSA instructions](https://www.rosaworkshop.io/rosa/2-deploy/#automatic-mode))

## Update the hypershift manifest
```shell
hypershift install render \
  --oidc-storage-provider-s3-bucket-name hypershift-ci-1-oidc \
  --oidc-storage-provider-s3-region us-east-1 \
  --oidc-storage-provider-s3-secret oidc-s3-creds \
  --hypershift-image hypershift-operator:ci > clusters/hypershift-ci-1/manifests/hypershift-operator.yaml

make kustomize
```

## Update the hypershift operator image

Edit the `ci` tag in clusters/hypershift-ci-1/manifests/hypershift-imagestream.yaml

```yaml
  - name: ci
    from:
      kind: DockerImage
      name: quay.io/hypershift/hypershift-operator:xxxx   <- THIS
    referencePolicy:
      type: Local
    importPolicy:
      scheduled: true
```

## Install

Install HyperShift:

```shell
install.sh --cluster $CLUSTER --aws-creds $AWS_CREDS
```

After initial installation or as part of a credentials rotation, create a
kubeconfig from the admin SA token which can be injected into CI jobs:

```shell
oc serviceaccounts --namespace hypershift-ops create-kubeconfig admin > /tmp/$CLUSTER.kubeconfig
```

Store the kubeconfig in Vault [under the clusters directory](https://vault.ci.openshift.org/ui/vault/secrets/kv/list/selfservice/hypershift-team/ops/clusters/) in a secret named `$CLUSTER` with the following schema:

```json
{
  "hypershift-ops-admin.kubeconfig": "<kubeconfig contents>",
  "secretsync/target-name": "$CLUSTER",
  "secretsync/target-namespace": "test-credentials"
}
```

## Uninstall

To uninstall everything and start over, run:

```shell
uninstall.sh
```