Commit cccd05e3 authored by Hordur Freyr Yngvason's avatar Hordur Freyr Yngvason Committed by Alex Pooley

Bump cluster management project template for 14.8

Cert-manager now defaults to 1.7.

Changelog: changed
parent d49156b9
...@@ -69,9 +69,9 @@ See also [video walk-throughs](#video-walk-throughs) with examples. ...@@ -69,9 +69,9 @@ See also [video walk-throughs](#video-walk-throughs) with examples.
1. Copy the output of the following command (it might be big): 1. Copy the output of the following command (it might be big):
```shell ```shell
helm get values runner -n gitlab-managed-apps -a --output yaml helm get values runner -n gitlab-managed-apps -a --output yaml
``` ```
1. Overwrite `applications/gitlab-runner/values.yaml` with the output of the previous command. 1. Overwrite `applications/gitlab-runner/values.yaml` with the output of the previous command.
...@@ -92,15 +92,18 @@ See also [video walk-throughs](#video-walk-throughs) with examples. ...@@ -92,15 +92,18 @@ See also [video walk-throughs](#video-walk-throughs) with examples.
chart version proposed in `applications/vault/values.yaml`. chart version proposed in `applications/vault/values.yaml`.
- Cert-manager: - Cert-manager:
- For users on Kubernetes version 1.20 or above, the deprecated cert-manager v0.10 is no longer valid and - For users on Kubernetes version 1.20 or above, the deprecated cert-manager v0.10 is no longer valid
and the upgrade includes a breaking change. So we suggest that you [backup and uninstall cert-manager v0.10](#backup-and-uninstall-cert-manager-v010) and the upgrade includes a breaking change. So we suggest that you [backup and uninstall cert-manager v0.10](#backup-and-uninstall-cert-manager-v010),
, and install cert-manager v1.4 instead. To install this version, uncomment the `applications/cert-manager-1-4/helmfile.yaml` and install the latest cert-manager instead. To install this version, uncomment `applications/cert-manager/helmfile.yaml`
from the [`./helmfile.yaml`](management_project_template.md#the-main-helmfileyml-file). from [`./helmfile.yaml`](management_project_template.md#the-main-helmfileyml-file).
This triggers a pipeline to install the new version. This triggers a pipeline to install the new version.
- For users on Kubernetes versions lower than 1.20, you can stick to v0.10 by uncommenting - For users on Kubernetes versions lower than 1.20, you can stick to v0.10 by uncommenting
`applications/cert-manager/helmfile.yaml` `applications/cert-manager-legacy/helmfile.yaml`
in your project's main Helmfile ([`./helmfile.yaml`](management_project_template.md#the-main-helmfileyml-file)). in your project's main Helmfile ([`./helmfile.yaml`](management_project_template.md#the-main-helmfileyml-file)).
WARNING:
Cert-manager v0.10 breaks when Kubernetes is upgraded to version 1.20 or later.
1. After following all the previous steps, [run a pipeline manually](../../ci/pipelines/index.md#run-a-pipeline-manually) 1. After following all the previous steps, [run a pipeline manually](../../ci/pipelines/index.md#run-a-pipeline-manually)
and watch the `apply` job logs to see if any of your applications were successfully detected, installed, and whether they got any and watch the `apply` job logs to see if any of your applications were successfully detected, installed, and whether they got any
unexpected updates. unexpected updates.
......
...@@ -8,48 +8,33 @@ info: To determine the technical writer assigned to the Stage/Group associated w ...@@ -8,48 +8,33 @@ info: To determine the technical writer assigned to the Stage/Group associated w
> - [Introduced](https://gitlab.com/gitlab-org/project-templates/cluster-management/-/merge_requests/5) in GitLab 14.0. > - [Introduced](https://gitlab.com/gitlab-org/project-templates/cluster-management/-/merge_requests/5) in GitLab 14.0.
> - Support for cert-manager v1.4 was [introduced](https://gitlab.com/gitlab-org/project-templates/cluster-management/-/merge_requests/69405) in GitLab 14.3. > - Support for cert-manager v1.4 was [introduced](https://gitlab.com/gitlab-org/project-templates/cluster-management/-/merge_requests/69405) in GitLab 14.3.
> - [Upgraded](https://gitlab.com/gitlab-org/project-templates/cluster-management/-/merge_requests/23) to cert-manager 1.7 in GitLab 14.8.
Assuming you already have a [Cluster management project](../../../../../user/clusters/management_project.md) created from a Assuming you already have a [Cluster management project](../../../../../user/clusters/management_project.md) created from a
[management project template](../../../../../user/clusters/management_project_template.md), to install cert-manager you should [management project template](../../../../../user/clusters/management_project_template.md), to install cert-manager you should
uncomment this line from your `helmfile.yaml`: uncomment this line from your `helmfile.yaml`:
```yaml ```yaml
- path: applications/cert-manager-1-4/helmfile.yaml - path: applications/cert-manager/helmfile.yaml
``` ```
NOTE: NOTE:
We kept the `- path: applications/cert-manager/helmfile.yaml` with cert-manager v0.10 to facilitate If your Kubernetes version is earlier than 1.20 and you are [migrating from GitLab
the [migration from GitLab Managed Apps to a cluster management project](../../../../clusters/migrating_from_gma_to_project_template.md). Managed Apps to a cluster management
project](../../../../clusters/migrating_from_gma_to_project_template.md), then
you can instead use `- path: applications/cert-manager-legacy/helmfile.yaml` to
take over an existing release of cert-manager v0.10.
cert-manager: cert-manager:
- Is installed by default into the `gitlab-managed-apps` namespace of your cluster. - Is installed by default into the `gitlab-managed-apps` namespace of your cluster.
- Can be installed with or without a default - Includes a
[Let's Encrypt `ClusterIssuer`](https://cert-manager.io/docs/configuration/acme/), which requires an [Let's Encrypt
email address to be specified. The email address is used by Let's Encrypt to `ClusterIssuer`](https://cert-manager.io/docs/configuration/acme/) enabled by
default. In the `certmanager-issuer` release, the issuer requires a valid email address
for `letsEncryptClusterIssuer.email`. Let's Encrypt uses this email address to
contact you about expiring certificates and issues related to your account. contact you about expiring certificates and issues related to your account.
- Can be customized in `applications/cert-manager/helmfile.yaml` by passing custom
To install cert-manager in your cluster, configure your `applications/cert-manager-1-4/helmfile.yaml` to: `values` to the `certmanager` release. Refer to the
[chart](https://github.com/jetstack/cert-manager) for the available
```yaml configuration options.
certManager:
installed: true
letsEncryptClusterIssuer:
installed: true
email: "user@example.com"
```
Or without the default `ClusterIssuer`:
```yaml
certManager:
installed: true
letsEncryptClusterIssuer:
installed: false
```
You can customize the installation of cert-manager by defining a
`.gitlab/managed-apps/cert-manager/values.yaml` file in your cluster
management project. Refer to the
[chart](https://github.com/jetstack/cert-manager) for the
available configuration options.
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment