KubeZero/docs/Upgrade.md

Upgrade to KubeZero V2(Argoless)

ArgoCD prep

• disable all auto-sync and "prune" feature to prevent that namespaces defined in previous apps get removed

  • either remove auto-sync from old values.yaml and run deploy one last time, trigger kubezero sync !
  • or disable manual via Argo UI starting with Kubezero app itself

• uninstall argo helm chart helm uninstall kubezero -n argocd

• remove all "argocd.argoproj.io/instance" labels from namespaces to prevent namespace removal later on scripts/remove_argo_ns.sh

• migrate values.yaml to new structure, adapt as needed & update new central kubezero location in git and merge cluster configs

• Upgrade control plane nodes / worker nodes

• upgrade all crds ./bootstrap.sh crds all clusters/$CLUSTER ../../../kubezero/charts

• upgrade base artifacts ./bootstrap.sh deploy calico,cert-manager,kiam,aws-ebs-csi-driver,aws-efs-csi-driver clusters/$CLUSTER ../../../kubezero/charts

• Istio, due to changes of the ingress namespace we need brief downtime DOWNTIME STARTS !

  • delete istio operators, to remove all pieces, remove operator itself ./scripts/delete_istio_17.sh
  • deploy istio and istio-ingress via bootstrap.sh ./bootstrap.sh deploy all clusters/$CLUSTER ../../../kubezero/charts
  • patch all VirtualServices via script to new namespace ./scripts/patch_vs.sh DOWNTIME ENDS !

• upgrade all artifacts ./bootstrap.sh deploy all clusters/$CLUSTER ../../../kubezero/charts

• push kubezero cluster config

• verify argocd incl. kubezero app

• verify all argo apps

• verify all the things

High level / Admin changes

• ArgoCD is now optional
• ArgoCD is NOT required nor used during initial cluster bootstrap
• the initial bootstrap script now uses the same config as ArgoCD later on
• the initial bootstrap is WAY faster and re-try safe

Individual changes

Cert-manager

• local issuer is now a cluster issuer
• all resources moved to cert-manager namespace

Kiam

• check certs and function due to cert-manager changes
• set priorty class

Logging

• ES/Kibana version bump, new ECK operator

ArgoCD

• version bump, new app of app architecure

Metrics

• version bumps
• all servicemonitor resources are now in the same namespaces as the apps
• check all metrics still work

Calico

• version bump

EBS

• version bump

Istio

• operator removed, deployment migrated to helm, cleanups
• version bump to 1.8
• no more policy pod by default
• all ingress in dedicated new namespace istio-ingress as well as dedicated helm chart
• set priorty class