Upgrade prod Installation for High Availability

The exact steps required to upgrade a Verrazzano environment to achieve high availability will vary based on the configuration of each environment.

1. Assess whether your Kubernetes configuration must be updated to support the level of high availability that you want to achieve. See Configure High Availability.

2. Upgrade Verrazzano to v1.5.0 or later. See Upgrade Verrazzano.

3. The examples/ha directory contains examples of highly available Verrazzano installations. The following example uses the ha.yaml file as an example of how to upgrade a default prod installation to a highly available Verrazzano environment.

   a. Create a patch file:

   $ cat > patch.yaml <<EOF
   spec:
     components:
       authProxy:
         overrides:
         - values:
             replicas: 2
       certManager:
         overrides:
         - values:
             replicaCount: 2
             cainjector:
               replicaCount: 2
             webhook:
               replicaCount: 2
       console:
         overrides:
         - values:
             replicas: 2
       ingress:
         overrides:
         - values:
             controller:
               autoscaling:
                 enabled: true
                 minReplicas: 2
             defaultBackend:
               replicaCount: 2
       istio:
         overrides:
         - values:
             apiVersion: install.istio.io/v1alpha1
             kind: IstioOperator
             spec:
               components:
                 pilot:
                   k8s:
                     replicaCount: 2
                 ingressGateways:
                   - enabled: true
                     k8s:
                       affinity:
                         podAntiAffinity:
                           preferredDuringSchedulingIgnoredDuringExecution:
                           - podAffinityTerm:
                               labelSelector:
                                 matchExpressions:
                                 - key: app
                                   operator: In
                                   values:
                                   - istio-ingressgateway
                               topologyKey: kubernetes.io/hostname
                             weight: 100
                       replicaCount: 2
                       service:
                         type: LoadBalancer
                     name: istio-ingressgateway
                 egressGateways:
                   - enabled: true
                     k8s:
                       affinity:
                         podAntiAffinity:
                           preferredDuringSchedulingIgnoredDuringExecution:
                           - podAffinityTerm:
                               labelSelector:
                                 matchExpressions:
                                 - key: app
                                   operator: In
                                   values:
                                   - istio-egressgateway
                               topologyKey: kubernetes.io/hostname
                             weight: 100
                       replicaCount: 2
                     name: istio-egressgateway
       keycloak:
         overrides:
         - values:
             replicas: 2
         mysql:
           overrides:
           - values:
               serverInstances: 3
               routerInstances: 2
       opensearchDashboards:
         replicas: 2
       kiali:
         overrides:
         - values:
             deployment:
               replicas: 2
       prometheusOperator:
         overrides:
         - values:
             prometheus:
               prometheusSpec:
                 replicas: 2
       opensearch:
         nodes:
         - name: os-ingest
           replicas: 2
   EOF
   

   b. Apply the patch:

   $ kubectl patch verrazzano verrazzano --patch-file=patch.yaml --type=merge
   

   c. Wait for the patch to be installed:

   $ kubectl wait --timeout=30m --for=jsonpath='{.status.state}'=Ready verrazzano/verrazzano