-
Notifications
You must be signed in to change notification settings - Fork 27
docs(operator): migration guide from kgo 1.6.x to ko 2.0 #2796
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Conversation
Signed-off-by: Aldo Lacuku <[email protected]>
✅ Deploy Preview for kongdeveloper ready!
To edit notification comments on pull requests, go to your Netlify project configuration. |
Signed-off-by: Aldo Lacuku <[email protected]>
5. **Verify cert-manager is installed** (required for conversion webhooks): | ||
|
||
{:.info} | ||
> **Note**: Kong Operator 2.0.0 uses conversion webhooks that require TLS certificates managed by cert-manager. If cert-manager is not installed, follow the [cert-manager installation guide](https://cert-manager.io/docs/installation/) before proceeding. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
This is not required anymore. By default we use helm generated certs.
Users can opt in for cert-manager generated certificates if they want to using https://github.com/Kong/kong-operator/blob/f62c3e4c2052036f95afd654f3a4ff200e1f10d5/charts/kong-operator/values.yaml#L123-L131
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
This is not required anymore. By default we use helm generated certs.
Helm-generated certificates are fine for development and testing, but for production environments, it’s recommended to use cert-manager. Unless you have a specific reason, I wouldn’t advise dropping cert-manager and relying solely on Helm-generated certs in the migration guide.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Both are self signed certs, the only difference is that cert-manager provides the rotation for the certs, while helm generated ones are valid for 10y.
Tagging @justindavies to get his view on what should land in the docs.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Left some feedback on formatting! I also ran into an issue while I was testing the 1.6.x to 2.0 migration. I've left the error I got as a comment. Thanks for adding these docs!
app/operator/migrate/konnectextension-konnectid-to-konnectgatewaycontrolplane.md
Outdated
Show resolved
Hide resolved
app/operator/migrate/konnectextension-konnectid-to-konnectgatewaycontrolplane.md
Outdated
Show resolved
Hide resolved
app/operator/migrate/konnectextension-konnectid-to-konnectgatewaycontrolplane.md
Outdated
Show resolved
Hide resolved
Co-authored-by: Diana <[email protected]>
…waycontrolplane.md Co-authored-by: Diana <[email protected]>
…waycontrolplane.md Co-authored-by: Diana <[email protected]>
…waycontrolplane.md Co-authored-by: Diana <[email protected]>
Co-authored-by: Diana <[email protected]>
Co-authored-by: Diana <[email protected]>
Co-authored-by: Diana <[email protected]>
Co-authored-by: Diana <[email protected]>
Hey @cloudjumpercat, thanks for the review. I accepted your suggestions. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
This looks good to me. Leaving up to @cloudjumpercat to leave a comment or approval on this.
I can still see some suggestions that are pending, @cloudjumpercat if you feel those should be applied let's do that.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM! This can be merged whenever you're ready
Description
Fixes Kong/kong-operator#1984, Kong/kong-operator#1947
Preview Links
https://deploy-preview-2796--kongdeveloper.netlify.app/index/operator/#gateway-deployment--upgrading
https://deploy-preview-2796--kongdeveloper.netlify.app/operator/migrate/
https://deploy-preview-2796--kongdeveloper.netlify.app/operator/migrate/migrate-1.6.x-2.0.0/
https://deploy-preview-2796--kongdeveloper.netlify.app/operator/migrate/konnectextension-konnectid-to-konnectgatewaycontrolplane/
Checklist
description
entry in frontmatter.