12.9 Configure:Orchestration upgrades
Upgrade manager: @tkuah
(shadow @hfyngvason
)
Preamble
-
Set the title of the issue to X.XX Configure:Orchestration upgrades
checklist -
Set the milestone of the issue
helm-install-image
Used by GitLab
to install GitLab-managed apps and many ~"group::orchestration" projects downstream
- [-] Upgrade
kubectl
minor version -- No new releases (still on Kubernetes 1.13.12)
-
Review v1.13 changelog for any potential breaking changes
-
Upgrade helm
binary-
Review helm releases for any potential breaking changes - MR gitlab-org/cluster-integration/helm-install-image!18 (merged)
-
auto-deploy-app
- (Nothing to upgrade for now)
auto-build-image
Used by the Build stage of Auto DevOps
-
Update the pinned docker version: gitlab-org/cluster-integration/auto-build-image!29 (merged)
auto-deploy-image
Used by the Deploy stages of Auto DevOps
-
Upgrade to use latest version of helm-install-image
-
Upgrade glibc
- Check https://github.com/sgerrand/alpine-pkg-glibc
Auto DevOps
-
Update the pinned version of the docker build images docker:X.Y.Z-dind
anddocker:X.Y.Z
(seedocker
on Dockerhub for the latest tags): -
Update Deploy sub-template to use latest version of auto-deploy-image
. -
In a separate MR, update DAST-Default-Branch-Deploy template to use latest version of auto-deploy-image
GitLab
-
Update helm.rb
to use theHELM_VERSION
andKUBECTL_VERSION
from the latest version ofhelm-install-image
Ingress
-
Review nginx-ingress history for any potential breaking changes. (NB: There is no changelog) -
Upgrade the VERSION
in https://gitlab.com/gitlab-org/gitlab/blob/master/app/models/clusters/applications/ingress.rb- An update to
1.29.7
was already in progress this release cycle, and is now done: gitlab-org/gitlab!25949 (merged)
- An update to
Cert-Manager
-
Read and understand the upgrade guide for the version - https://cert-manager.io/docs/installation/upgrading/ -
Bump the VERSION
in cert_manager.rb. For some versions, the cert manager CRDs may need to be updated as well. If there are changes to the CRDs, only append new CRDs to the post delete script. Do not remove CRDs from the post delete list as this will break uninstalls for older versions of cert-manager.
cluster-applications
Ingress
-
Upgrade the version
in https://gitlab.com/gitlab-org/cluster-integration/cluster-applications/blob/master/src/default-data/ingress/helmfile.yaml. This should match theVERSION
in GitLab. Check that thevalues.yaml
matches GitLab'svalues.yaml
- cluster-applications are already on 1.29.7
cert-manager
-
Bump the version
in https://gitlab.com/gitlab-org/cluster-integration/cluster-applications/blob/master/src/default-data/cert-manager/helmfile.yaml. This should match theVERSION
in GitLab. Also:- Check that the
values-default-issuer.yaml
matches GitLab'svalue.yaml
. - Check that the
ClusterIssuer
template matches GitLab'sClusterIssuer
template. - For some versions, the cert manager CRDs may need to be updated as well.
Update the CRDs inside https://gitlab.com/gitlab-org/cluster-integration/cluster-applications/tree/master/src/default-data/cert-manager-crds (This should be the same CRDs referred to in
CRD_VERSION
), taking care to preserve backwards compatibility.
- Check that the
Release a new version
-
Ask a maintainer to tag a new version of cluster-applications
-
Bump the image tag in https://gitlab.com/gitlab-org/gitlab/blob/master/lib/gitlab/ci/templates/Managed-Cluster-Applications.gitlab-ci.yml to the new version
Administration
-
Before, closing this issue, create next month's issue using template Orchestration upgrade checklist
Edited by Hordur Freyr Yngvason