Deprecation of Helm2 support

mdebarros commented 4 years ago

Request:

There are now mature tools for managing the migration of existing Helm deployments from Helm2 to Helm3 --> https://helm.sh/docs/topics/v2_v3_migration/.

As such we should consider deprecating Helm2 support going forward, and set a date a final date for switching over to only supporting Helm3 going forward.

Things that would be required to support this:

update Mojaloop documentation on how to migrate from Helm2 to Helm3
update existing deployment guides for Helm3 (they currently only support Helm2)
identify communication channels to announce the pending, and final deprecation of Helm2

Rationale:

Helm2 is only being maintained for security issues and will be fully deprecated by Helm3 on November 13, 2020, with the final major release for helm2 being 2.15.0
Helm2 is a security risk since it has access to the entire K8s environment due to its reliance on Tiller, Helm3 is more secure as it each helm installation is isolated to a specific namespace

Impact:

Helm2 installations will need to be migrated to Helm3 using the 2to3 plugin.
No impact to existing Mojaloop Helm2 charts as they are supported by Helm3 - https://github.com/mojaloop/project/issues/1070
However, In the future, this will allow us to fully upgrade existing helm2 charts to helm3 to take advantage of helm3's improved capabilities (ref: 1, 2, 3)

Artifacts:

https://helm.sh/docs/topics/v2_v3_migration/

Decision(s):

See @NicoDuvenage comment below.

Follow-up:

[x] Proposed Mojaloop documentation changes for Helm2 deprecation made for #1283: https://github.com/mojaloop/documentation/pull/236

Dependencies: n/a

Accountability:

Owner: @mdebarros

Notes:

NicoDuvenage commented 4 years ago

Closing this discussion with the migration document in place and an agreed approach of migrating over time, as there is backward compatibility in place and currently no urgent and immediate need.

mdebarros commented 3 years ago

@bushjames, I have closed this issue as I believe it was @NicoDuvenage's intent to do so.

Let me know otherwise.

mojaloop / design-authority-project