Skip to content

Backport of docs: update upgrade to consul-dataplane docs on k8s into release/1.14.x #17863

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
hc-github-team-consul-core merged 3 commits into from
Jun 23, 2023
Merged

Backport of docs: update upgrade to consul-dataplane docs on k8s into release/1.14.x #17863

Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
4f9d5cd
backport of commit ad7cbd5c70605da42417caa9a666af1080645eb6
ishustava Jun 23, 2023
7210359
backport of commit 122b50b088828e95d746b16c4bf294a4f09e498f
ishustava Jun 23, 2023
ab390b5
backport of commit fea8da71090c663193cb91addecdb7da2ab722b3
ishustava Jun 23, 2023
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
14 changes: 13 additions & 1 deletion website/content/docs/k8s/upgrade/index.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -219,7 +219,7 @@ In earlier versions, Consul on Kubernetes used client agents in its deployments.

If you upgrade Consul from a version that uses client agents to a version the uses dataplanes, complete the following steps to upgrade your deployment safely and without downtime.

1. Before you upgrade, edit your Helm chart to enable Consul client agents by setting `client.enabled` and `client.updateStrategy`:
1. Before you upgrade, edit your Helm chart configuration to enable Consul client agents by setting `client.enabled` and `client.updateStrategy`:

```yaml filename="values.yaml"
client:
Expand All @@ -228,6 +228,18 @@ If you upgrade Consul from a version that uses client agents to a version the us
type: OnDelete
```

1. Update the `connect-injector` to not log out on restart
to make sure that the ACL tokens used by existing services are still valid during the migration to `consul-dataplane`.
Note that you must remove the token manually after completing the migration.

The following command triggers the deployment rollout. Wait for the rollout to complete before proceeding to next step.

```bash
kubectl config set-context --current --namespace=<consul installation namespace>
INJECTOR_DEPLOYMENT=$(kg deploy -l "component=connect-injector" -o=jsonpath='{.items[0].metadata.name}')
kubectl patch deploy $INJECTOR_DEPLOYMENT --type='json' -p='[{"op": "remove", "path": "/spec/template/spec/containers/0/lifecycle"}]'
```

1. Follow our [recommended procedures to upgrade servers](#upgrade-consul-servers) on Kubernetes deployments to upgrade Helm values for the new version of Consul.

1. Run `kubectl rollout restart` to restart your service mesh applications. Restarting service mesh application causes Kubernetes to re-inject them with the webhook for dataplanes.
Expand Down