set -euo pipefail

logmein() {

}

SMALL_INSTALL=false

case "${1:-}" in

-h|--help)

echo -e "Usage:\n\tquick-helm-install.sh [options]"

echo " "

echo "Installs StackRox via Helm charts."

echo " "

echo "options:"

echo "-h, --help show brief help"

echo "-s, --small reduce StackRox resource requirements for small clusters"

exit 0

;;

-s|--small)

SMALL_INSTALL=true

;;

echo "Adding the stackrox/helm-charts/opensource repository to Helm."

helm repo add stackrox https://raw.githubusercontent.com/stackrox/helm-charts/main/opensource/

echo "Generating ROX_ADMIN_PASSWORD"

ROX_ADMIN_PASSWORD="$(openssl rand -base64 20 | tr -d '/=+')"

echo "Installing stackrox-central-services"

installflags=('--set' 'central.persistence.none=true')

if [[ "$SMALL_INSTALL" == "true" ]]; then

installflags+=('--set' 'central.resources.requests.memory=1Gi')

installflags+=('--set' 'central.resources.requests.cpu=1')

installflags+=('--set' 'central.resources.limits.memory=4Gi')

installflags+=('--set' 'central.resources.limits.cpu=1')

installflags+=('--set' 'central.db.resources.requests.memory=1Gi')

installflags+=('--set' 'central.db.resources.requests.cpu=500m')

installflags+=('--set' 'central.db.resources.limits.memory=4Gi')

installflags+=('--set' 'central.db.resources.limits.cpu=1')

installflags+=('--set' 'scanner.autoscaling.disable=true')

installflags+=('--set' 'scanner.replicas=1')

installflags+=('--set' 'scanner.resources.requests.memory=500Mi')

installflags+=('--set' 'scanner.resources.requests.cpu=500m')

installflags+=('--set' 'scanner.resources.limits.memory=2500Mi')

installflags+=('--set' 'scanner.resources.limits.cpu=2000m')

helm install -n stackrox --create-namespace stackrox-central-services stackrox/stackrox-central-services \

--set central.adminPassword.value="${ROX_ADMIN_PASSWORD}" \

"${installflags[@]+"${installflags[@]}"}"

kubectl -n stackrox rollout status deploy/central --timeout=3m

echo "Setting up central port-forward"

kubectl -n stackrox port-forward deploy/central --pod-running-timeout=1m0s 8000:8443 > /dev/null 2>&1 &

echo "Generating an init bundle with stackrox-secured-cluster-services provisioning secrets"

echo "$ROX_ADMIN_PASSWORD" | \

kubectl -n stackrox exec -i deploy/central -- bash -c 'ROX_ADMIN_PASSWORD=$(cat) \

central init-bundles generate stackrox-init-bundle --output -' 1> stackrox-init-bundle.yaml

installflags=()

if [[ "$SMALL_INSTALL" == "true" ]]; then

installflags+=('--set' 'sensor.resources.requests.memory=500Mi')

installflags+=('--set' 'sensor.resources.requests.cpu=500m')

installflags+=('--set' 'sensor.resources.limits.memory=500Mi')

installflags+=('--set' 'sensor.resources.limits.cpu=500m')

echo "Installing stackrox-secured-cluster-services"

helm install -n stackrox stackrox-secured-cluster-services stackrox/stackrox-secured-cluster-services \

-f stackrox-init-bundle.yaml --set clusterName="my-secured-cluster" \

"${installflags[@]+"${installflags[@]}"}"

echo "Logging into StackRox in the browser"

logmein

echo -e "