chore(workflow): add CERT_MANAGER_ENABLED env

Author: duanhongyi

_scripts/install.sh

@@ -199,6 +199,7 @@ EOF
     --set builder.service.type=LoadBalancer \
     --set global.cluster_domain="cluster.local" \
     --set global.platform_domain="${PLATFORM_DOMAIN}" \
+    --set global.cert_manager_enabled=${CERT_MANAGER_ENABLED:-true} \
     --set global.ingress_class=nginx \
     --set fluentd.daemon_environment.CONTAINER_TAIL_PARSER_TYPE="/^(?<time>.+) (?<stream>stdout|stderr)( (?<tags>.))? (?<log>.*)$/" \
     --set controller.app_storage_class=${CONTROLLER_APP_STORAGE_CLASS:-""} \
@@ -242,6 +243,7 @@ function install_helmbroker {
     --set persistence.size=${HELMBROKER_PERSISTENCE_SIZE:-5Gi} \
     --set persistence.storageClass=${HELMBROKER_PERSISTENCE_STORAGE_CLASS:=""} \
     --set platform_domain=${PLATFORM_DOMAIN} \
+    --set cert_manager_enabled=${CERT_MANAGER_ENABLED:-true} \
     --set username=${HELMBROKER_USERNAME} \
     --set password=${HELMBROKER_PASSWORD} \
     --set environment.HELMBROKER_CELERY_BROKER="amqp://${RABBITMQ_USERNAME}:${RABBITMQ_PASSWORD}@drycc-rabbitmq-0.drycc-rabbitmq.drycc.svc.cluster.local:5672/drycc" \
@@ -250,6 +252,11 @@ repositories:
 - name: drycc-helm-broker
   url: ${addons_url}
 EOF
+  if [[ "${CERT_MANAGER_ENABLED:-true}" == "true" ]] ; then
+    BROKER_URL="https://${HELMBROKER_USERNAME}:${HELMBROKER_PASSWORD}@drycc-helmbroker.${PLATFORM_DOMAIN}"
+  else
+    BROKER_URL="http://${HELMBROKER_USERNAME}:${HELMBROKER_PASSWORD}@drycc-helmbroker.${PLATFORM_DOMAIN}"
+  fi
 
   kubectl apply -f - <<EOF
 apiVersion: servicecatalog.k8s.io/v1beta1
@@ -265,7 +272,7 @@ metadata:
 spec:
   relistBehavior: Duration
   relistRequests: 5
-  url: https://${HELMBROKER_USERNAME}:${HELMBROKER_PASSWORD}@drycc-helmbroker.${PLATFORM_DOMAIN}
+  url: ${BROKER_URL}
 EOF
 
   echo -e "\\033[32m---> Helmbroker username: $HELMBROKER_USERNAME\\033[0m"

src/quickstart/install-workflow.md

@@ -124,7 +124,14 @@ $ export PLATFORM_DOMAIN=59.46.3.190.nip.io
 
 ## Install
 
-You can use the installation script available at https://www.drycc.cc/install.sh to install drycc as a service on systemd and openrc based systems.
+Before installation, please make sure whether your installation environment is a public network. 
+If it is an intranet environment and there is no public IP, you need to disable the automatic certificate.
+
+```
+$ export CERT_MANAGER_ENABLED=false
+```
+
+Then you can use the installation script available at https://www.drycc.cc/install.sh to install drycc as a service on systemd and openrc based systems.
 
 ```
 $ curl -sfL https://www.drycc.cc/install.sh | bash -
@@ -186,6 +193,7 @@ ENVIRONMENT VARIABLE                       | DESCRIPTION
 PLATFORM_DOMAIN                            | Required item, specify drycc's domain name
 DRYCC_ADMIN_USERNAME                       | Required item, specify drycc's admin username
 DRYCC_ADMIN_PASSWORD                       | Required item, specify drycc's admin password
+CERT_MANAGER_ENABLED                       | Whether to use automatic certificate. It is `true` by default
 CHANNEL                                    | By default, `stable` channel will be installed. You can also specify `testing`
 USE_HAPROXY                                | Haproxy is enabled by default. If you want to turn it off, this value is false
 METALLB_ADDRESS_POOLS                      | IP pool for LoadBalancer. The default is `172.16.0.0/12`