mirror of
https://github.com/goharbor/harbor.git
synced 2024-12-20 23:57:42 +01:00
68 lines
2.0 KiB
Markdown
68 lines
2.0 KiB
Markdown
---
|
|
title: Upgrading Harbor Deployed with Helm
|
|
---
|
|
|
|
This guide is used to upgrade Harbor deployed by chart since version 0.3.0.
|
|
|
|
## Notes
|
|
|
|
- As the database schema may change between different versions of Harbor, there is a progress to migrate the schema during the upgrade and the downtime cannot be avoid
|
|
- The database schema cannot be downgraded automatically, so the `helm rollback` is not supported
|
|
|
|
## Upgrade
|
|
|
|
### 1. Backup database
|
|
|
|
Backup the database used by Harbor in case the upgrade process fails.
|
|
|
|
### 2. Download new chart
|
|
|
|
Download the latest version of Harbor chart.
|
|
|
|
### 3. Configure new chart
|
|
|
|
Configure the new chart to make sure that the configuration items have the same values with the old one.
|
|
|
|
> Note: if TLS is enabled and the certificate is generated by chart automatically, a new certificate will be generated and overwrite the old one during the upgrade, this may cause some issues if you have distributed the certificate. You can follow the below steps to configure the new chart to use the old certificate:
|
|
|
|
1. Get the secret name which certificate is stored in:
|
|
|
|
```bash
|
|
kubectl get secret
|
|
```
|
|
|
|
Find the secret whose name ends with `-harbor-ingress` (expose service via `Ingress`) or `-harbor-nginx`(expose service via `ClusterIP` or `NodePort`)
|
|
|
|
2. Export the secret as yaml file:
|
|
|
|
|
|
```bash
|
|
kubectl get secret <secret-name-from-step-1> -o yaml > secret.yaml
|
|
```
|
|
|
|
3. Rename the secret by setting `metadata.name` in `secret.yaml`
|
|
|
|
4. Create a new secret:
|
|
|
|
```bash
|
|
kubectl create -f secret.yaml
|
|
```
|
|
|
|
5. Configure the chart to use the new secret by setting `expose.tls.secretName` as the value you set in step **3**
|
|
|
|
### 4. Upgrade
|
|
|
|
Run upgrade command:
|
|
|
|
```bash
|
|
helm upgrade release-name --force .
|
|
```
|
|
|
|
{{< note >}}
|
|
The `--force` is necessary if upgrade from version 0.3.0 due to issue [#30](https://github.com/goharbor/harbor-helm/issues/30).
|
|
{{< /note >}}
|
|
|
|
## Known issues
|
|
|
|
- The job logs will be lost if you upgrade from version 0.3.0 as the logs are store in a `emptyDir` in 0.3.0.
|