90 lines
3.5 KiB
Bash
Executable File
90 lines
3.5 KiB
Bash
Executable File
#!/bin/bash
|
|
set -eE
|
|
set -o pipefail
|
|
|
|
ARGO_APP=${1:-/tmp/new-kubezero-argoapp.yaml}
|
|
|
|
SCRIPT_DIR=$( cd -- "$( dirname -- "${BASH_SOURCE[0]}" )" &> /dev/null && pwd )
|
|
# shellcheck disable=SC1091
|
|
[ -n "$DEBUG" ] && set -x
|
|
|
|
. "$SCRIPT_DIR"/libhelm.sh
|
|
|
|
echo "Checking that all pods in kube-system are running ..."
|
|
waitSystemPodsRunning
|
|
|
|
argo_used && disable_argo
|
|
|
|
#all_nodes_upgrade ""
|
|
|
|
control_plane_upgrade kubeadm_upgrade
|
|
|
|
#echo "Adjust kubezero values as needed:"
|
|
# shellcheck disable=SC2015
|
|
#argo_used && kubectl edit app kubezero -n argocd || kubectl edit cm kubezero-values -n kube-system
|
|
|
|
# v1.27
|
|
# We need to restore the network ready file as cilium decided to rename it
|
|
control_plane_upgrade apply_network
|
|
|
|
echo "Wait for all CNI agents to be running ..."
|
|
kubectl rollout status ds/cilium -n kube-system --timeout=300s
|
|
|
|
all_nodes_upgrade "cd /host/etc/cni/net.d && ln -s 05-cilium.conflist 05-cilium.conf || true"
|
|
# v1.27
|
|
|
|
# now the rest
|
|
control_plane_upgrade "apply_addons, apply_storage, apply_operators"
|
|
|
|
# v1.27
|
|
# Remove legacy eck-operator as part of logging if running
|
|
kubectl delete statefulset elastic-operator -n logging || true
|
|
# v1.27
|
|
|
|
echo "Checking that all pods in kube-system are running ..."
|
|
waitSystemPodsRunning
|
|
|
|
echo "Applying remaining KubeZero modules..."
|
|
|
|
# v1.27
|
|
### Cleanup of some deprecated Istio Crds
|
|
for crd in clusterrbacconfigs.rbac.istio.io rbacconfigs.rbac.istio.io servicerolebindings.rbac.istio.io serviceroles.rbac.istio.io; do
|
|
kubectl delete crds $crd || true
|
|
done
|
|
|
|
# Cleanup of some legacy node labels and annotations
|
|
controllers=$(kubectl get nodes -l node-role.kubernetes.io/control-plane -o json | jq .items[].metadata.name -r)
|
|
for c in $controllers; do
|
|
for l in projectcalico.org/IPv4VXLANTunnelAddr projectcalico.org/IPv4Address; do
|
|
kubectl annotate node $c ${l}-
|
|
done
|
|
kubectl label node $c topology.ebs.csi.aws.com/zone-
|
|
done
|
|
|
|
# Fix for legacy cert-manager CRDs to be upgraded
|
|
for crd_name in certificaterequests.cert-manager.io certificates.cert-manager.io challenges.acme.cert-manager.io clusterissuers.cert-manager.io issuers.cert-manager.io orders.acme.cert-manager.io; do
|
|
manager_index="$(kubectl get crd "${crd_name}" --show-managed-fields --output json | jq -r '.metadata.managedFields | map(.manager == "cainjector") | index(true)')"
|
|
[ "$manager_index" != "null" ] && kubectl patch crd "${crd_name}" --type=json -p="[{\"op\": \"remove\", \"path\": \"/metadata/managedFields/${manager_index}\"}]"
|
|
done
|
|
# v1.27
|
|
|
|
control_plane_upgrade "apply_cert-manager, apply_istio, apply_istio-ingress, apply_istio-private-ingress, apply_logging, apply_metrics, apply_telemetry, apply_argocd"
|
|
|
|
# Trigger backup of upgraded cluster state
|
|
kubectl create job --from=cronjob/kubezero-backup kubezero-backup-$VERSION -n kube-system
|
|
while true; do
|
|
kubectl wait --for=condition=complete job/kubezero-backup-$VERSION -n kube-system 2>/dev/null && kubectl delete job kubezero-backup-$VERSION -n kube-system && break
|
|
sleep 1
|
|
done
|
|
|
|
# Final step is to commit the new argocd kubezero app
|
|
kubectl get app kubezero -n argocd -o yaml | yq 'del(.status) | del(.metadata) | del(.operation) | .metadata.name="kubezero" | .metadata.namespace="argocd"' | yq 'sort_keys(..) | .spec.source.helm.values |= (from_yaml | to_yaml)' > $ARGO_APP
|
|
|
|
echo "Please commit $ARGO_APP as the updated kubezero/application.yaml for your cluster."
|
|
echo "Then head over to ArgoCD for this cluster and sync all KubeZero modules to apply remaining upgrades."
|
|
|
|
echo "<Return> to continue and re-enable ArgoCD:"
|
|
read -r
|
|
|
|
argo_used && enable_argo
|