search

eclipse-tractusx / sig-infra

Apache License 2.0
2 stars 2 forks source link

Update Kyverno to v1.10 (Helm Chart v3.0) #315

Closed carslen closed 9 months ago

carslen commented 9 months ago

Kyverno needs to be upgraded to implement #105. Kyverno introduced breaking changes with version (AppVersion/Helm Chart Version) 1.10.0/3.0.0 and documentation is based on v1.10.0.

Current deployed Kyverno Version in our envs

Resources

As we've not yet deployed any policies we'll follow the recommended upgrade option 1 (uninstall - reinstall).

carslen commented 9 months ago

According to suggested backup of kyverno policies, we do not have any deployed policies yet in any environment.

carslen commented 9 months ago

I'll first remove and reinstall Kyverno on our devsecop-testing cluster.

carslen commented 9 months ago
  1. Deleted Kyverno ArgoCD Application on CORE ArgoCD
  2. Manually removed CRDs deployed with Kyverno Helm Chart
    • admissionreports.kyverno.io
    • backgroundscanreports.kyverno.io
    • clusteradmissionreports.kyverno.io
    • clusterbackgroundscanreports.kyverno.io
    • clusterpolicies.kyverno.io
    • clusterpolicyreports.wgpolicyk8s.io
    • generaterequests.kyverno.io
    • policies.kyverno.io
    • policyreports.wgpolicyk8s.io
    • updaterequests.kyverno.io
  3. move namespace kyverno for safety reasons. Will be recreated during deployment of Kyverno.

Next up: Update k8s-cluster-stack Helm Chart for Kyverno installation.

carslen commented 9 months ago

Kyverno 1.10.3 using Helm Chart v3.0.5 successful deployed to DevSecOps Cluster.

carslen commented 9 months ago

All Kyverno instances upgraded to Helm Chart v3.05

tomaszbarwicki commented 9 months ago

@carslen I tried to use Kyverno on the devsecops cluster but seems it's not operational. ArgoCD shows it failed to apply HA change.

carslen commented 9 months ago

@carslen I tried to use Kyverno on the devsecops cluster but seems it's not operational. ArgoCD shows it failed to apply HA change.

catenax-ng/k8s-cluster-stack#431

carslen commented 9 months ago

HA deployment on all environments done.

SebastianBezold commented 9 months ago

Dashboards available. LGTM :)