fix: minor upgrade tweaks

admin/migrate_argo_values.py

@@ -10,6 +10,11 @@ def migrate(values):
 
     # 1.32
     values["network"]["enabled"] = True
+
+    try:
+        values["addons"]["enabled"] = True
+    except KeyError:
+        values["addons"] = {}
         values["addons"]["enabled"] = True
 
     try:

admin/upgrade_cluster.sh

@@ -27,9 +27,6 @@ control_plane_phase1() {
 
   # upgrade modules
   admin_job "apply_kubezero, apply_network"
-
-  echo "Checking that all pods in kube-system are running ..."
-  waitSystemPodsRunning
 }
 
 control_plane_phase2() {
@@ -55,20 +52,32 @@ backup() {
   done
 }
 
+
+control_plane_healthy() {
+  echo "Checking control-plane is healthy..."
+  kubectl rollout status ds cilium -n kube-system
+  waitSystemPodsRunning
+}
+
 #####
 
-echo "Checking that all pods in kube-system are running ..."
-waitSystemPodsRunning
+
+control_plane_healthy
 
 [ "$ARGOCD" == "true" ] && disable_argo
 
 control_plane_phase1
 
+control_plane_healthy
+
+echo "Replace controller nodes first to not stall out V1.31 controllers ... <return> to continue"
+read -r
+
 cluster_modules
 
 backup
 
-echo "Once ALL nodes, incl. workers, ALL, are running on $KUBE_VERSION, <return> to continue"
+echo "Once ALL nodes, incl. workers, ALL, are running on $KUBE_VERSION <return> to continue"
 read -r
 
 control_plane_phase2

charts/kubezero-auth/README.md

@@ -1,6 +1,6 @@
 # kubezero-auth
 
-![Version: 0.6.3](https://img.shields.io/badge/Version-0.6.3-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: 26.0.5](https://img.shields.io/badge/AppVersion-26.0.5-informational?style=flat-square)
+![Version: 0.6.4](https://img.shields.io/badge/Version-0.6.4-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: 26.0.5](https://img.shields.io/badge/AppVersion-26.0.5-informational?style=flat-square)
 
 KubeZero umbrella chart for all things Authentication and Identity management
 
@@ -19,7 +19,7 @@ Kubernetes: `>= 1.30.0-0`
 | Repository | Name | Version |
 |------------|------|---------|
 | https://cdn.zero-downtime.net/charts/ | kubezero-lib | 0.2.1 |
-| oci://registry-1.docker.io/bitnamicharts | keycloak | 24.7.1 |
+| oci://registry-1.docker.io/bitnamicharts | keycloak | 24.7.4 |
 
 # Keycloak
    
@@ -64,4 +64,4 @@ https://github.com/keycloak/keycloak-benchmark/tree/main/provision/minikube/keyc
 | keycloak.replicaCount | int | `1` |  |
 | keycloak.resources.limits.memory | string | `"1024Mi"` |  |
 | keycloak.resources.requests.cpu | string | `"100m"` |  |
-| keycloak.resources.requests.memory | string | `"512Mi"` |  |
+| keycloak.resources.requests.memory | string | `"640Mi"` |  |

charts/kubezero-istio/Chart.yaml

@@ -2,7 +2,7 @@ apiVersion: v2
 name: kubezero-istio
 description: KubeZero Umbrella Chart for Istio
 type: application
-version: 0.26.2
+version: 0.26.1
 home: https://kubezero.com
 icon: https://cdn.zero-downtime.net/assets/kubezero/logo-small-64.png
 keywords:
@@ -20,13 +20,13 @@ dependencies:
     repository: https://cdn.zero-downtime.net/charts/
     condition: envoy-ratelimit.enabled
   - name: base
-    version: 1.26.2
+    version: 1.26.1
     repository: https://istio-release.storage.googleapis.com/charts
   - name: istiod
-    version: 1.26.2
+    version: 1.26.1
     repository: https://istio-release.storage.googleapis.com/charts
   - name: kiali-server
-    version: "2.12.0"
+    version: "2.11.0"
     repository: https://kiali.org/helm-charts
     condition: kiali-server.enabled
 kubeVersion: ">= 1.30.0-0"

charts/kubezero/templates/argo.yaml

@@ -45,7 +45,7 @@ argo-cd:
       - name: cmp-kubezero-git-sync
         image: '{{ "{{" }} default .Values.global.image.repository .Values.repoServer.image.repository {{ "}}" }}:{{ "{{" }} default (include "argo-cd.defaultTag" .) .Values.repoServer.image.tag {{ "}}" }}'
         imagePullPolicy: '{{ "{{" }} default .Values.global.image.imagePullPolicy .Values.repoServer.image.imagePullPolicy {{ "}}" }}'
-        command: ["/var/run/argocd/argocd-cmp-server"]
+        command: ["/usr/local/bin/argocd-cmp-server"]
         env:
           {{- include "aws-iam-env" (merge (dict "roleName" "argocd-repo-server") .) | nindent 10 }}
         volumeMounts:

docs/v1.32.md

@@ -6,12 +6,13 @@
 - ArgoCD upgraded to V3 incl. various performance optimizations, eg. ServerSideApply etc.
 
 ## Features and fixes
-- enabled PSI metrics to get better insight on root cause of performance issues
+- considerable performance improvements under load for the control-plane nodes
+- enabled PSI cgroups metrics to get better insight on root cause of performance issues
 
 ## Version upgrades
 - cilium 1.17.4
 - istio 1.26.1
-- ArgoCD 3.0.5
+- ArgoCD 3.0.9
 - Prometheus 3.4.1 / Grafana 12.0.1
 - Nvidia container toolkit 1.17.8, drivers 570.148.08, Cuda 12.8
 - AWS Neuron 2.21.37