From d4012c8b3b719ae51e03b5c8ec94b01808812811 Mon Sep 17 00:00:00 2001 From: Young Bu Park Date: Mon, 16 Nov 2020 09:23:24 -0800 Subject: [PATCH] add upgrade step from 0.11.x to 1.0.0 (#907) * add upgrade step to 1.0.0 * Update kubernetes-production.md * Update kubernetes-production.md * Update kubernetes-production.md * Update kubernetes-production.md * Update daprdocs/content/en/operations/hosting/kubernetes/kubernetes-production.md Co-authored-by: Nghia Tran * Update kubernetes-production.md * Update kubernetes-production.md * Update kubernetes-production.md * Update kubernetes-production.md * Update kubernetes-production.md * Update kubernetes-production.md * Removing explicit mention of .rc1 Co-authored-by: Nghia Tran Co-authored-by: Ori Zohar Co-authored-by: Yaron Schneider --- .../kubernetes/kubernetes-production.md | 55 +++++++++++++++++++ 1 file changed, 55 insertions(+) diff --git a/daprdocs/content/en/operations/hosting/kubernetes/kubernetes-production.md b/daprdocs/content/en/operations/hosting/kubernetes/kubernetes-production.md index 7cfde34c6..4bbe4fc06 100644 --- a/daprdocs/content/en/operations/hosting/kubernetes/kubernetes-production.md +++ b/daprdocs/content/en/operations/hosting/kubernetes/kubernetes-production.md @@ -193,6 +193,61 @@ APP ID APP PORT AGE CREATED nodeapp 3000 16h 2020-07-29 17:16.22 ``` +#### Upgrade from Dapr 0.11.x to 1.0.0 + +Run the below commands first to migrate from 0.11.x placement service safely: + +```sh +kubectl annotate deployment dapr-placement "helm.sh/resource-policy"=keep -n dapr-system +kubectl annotate svc dapr-placement "helm.sh/resource-policy"=keep -n dapr-system +``` + +Then [export certs manually](#exporting-certs-manually). + +```sh +dapr mtls export -o ./certs +``` + +Upgrade Dapr using the below commands; this example upgrades Dapr from 0.11.x to 1.0.0-rc.1 with HA mode. + +```sh +helm repo update +helm upgrade dapr dapr/dapr --version 1.0.0-rc.1 --namespace dapr-system --reset-values --set-file dapr_sentry.tls.root.certPEM=./certs/ca.crt --set-file dapr_sentry.tls.issuer.certPEM=./certs/issuer.crt --set-file dapr_sentry.tls.issuer.keyPEM=./certs/issuer.key --set global.ha.enabled=true --wait +``` + +Once Dapr is installed completely, ensure that 0.11.x dapr-placement is still running and **wait until all pods are running** +```sh +kubectl get pods -n dapr-system -w + +NAME READY STATUS RESTARTS AGE +dapr-dashboard-69f5c5c867-mqhg4 1/1 Running 0 42s +dapr-operator-5cdd6b7f9c-9sl7g 1/1 Running 0 41s +dapr-operator-5cdd6b7f9c-jkzjs 1/1 Running 0 29s +dapr-operator-5cdd6b7f9c-qzp8n 1/1 Running 0 34s +dapr-placement-5dcb574777-nlq4t 1/1 Running 0 76s ---- 0.11.x placement +dapr-placement-server-0 1/1 Running 0 41s +dapr-placement-server-1 1/1 Running 0 41s +dapr-placement-server-2 1/1 Running 0 41s +dapr-sentry-84565c747b-7bh8h 1/1 Running 0 35s +dapr-sentry-84565c747b-fdlls 1/1 Running 0 41s +dapr-sentry-84565c747b-ldnsf 1/1 Running 0 29s +dapr-sidecar-injector-68f868668f-6xnbt 1/1 Running 0 41s +dapr-sidecar-injector-68f868668f-j7jcq 1/1 Running 0 29s +dapr-sidecar-injector-68f868668f-ltxq4 1/1 Running 0 36s +``` + + +Update pods that are running Dapr to pick up the new version of the Dapr runtime. +```sh +kubectl rollout restart deploy/ +``` + +Once the deployment is completed, delete 0.11.x dapr-placement service by following commands: +```sh +kubectl delete deployment dapr-placement -n dapr-system +kubectl delete svc dapr-placement -n dapr-system +``` + ## Recommended security configuration Properly configured, Dapr not only be secured with regards to it's control plane and sidecars communication, but can also make your application more secure with a number of built-in features.