Skip to content

Commit

Permalink
docs: add Azure load balancer migration
Browse files Browse the repository at this point in the history
  • Loading branch information
@3u13r
3u13r committed Oct 7, 2024
1 parent 661b779 commit 7d586f1
Showing 1 changed file with 13 additions and 1 deletion.
14 changes: 13 additions & 1 deletion docs/docs/reference/migration.md
View file
Original file line number Diff line number Diff line change
Expand Up @@ -3,7 +3,19 @@
This document describes breaking changes and migrations between Constellation releases.
Use [`constellation config migrate`](./cli.md#constellation-config-migrate) to automatically update an old config file to a new format.

## Migrating from Azure's service principal authentication to managed identity authentication

## Migrations to v2.19.0

### Azure

* To allow seamless upgrades on Azure when Kubernetes services of type `LoadBalancer` are deployed, we changed the target

Check warning on line 11 in docs/docs/reference/migration.md

View workflow job for this annotation

GitHub Actions / vale 

[vale] reported by reviewdog 🐶
[Microsoft.We] Try to avoid using first-person plural like 'we'.

Raw Output:
{"message": "[Microsoft.We] Try to avoid using first-person plural like 'we'.", "location": {"path": "docs/docs/reference/migration.md", "range": {"start": {"line": 11, "column": 101}}}, "severity": "WARNING"}
load balancer in which the `cloud-controller-maanger` create the load balancing rules. Instead of using the load balancer we

Check warning on line 12 in docs/docs/reference/migration.md

View workflow job for this annotation

GitHub Actions / vale 

[vale] reported by reviewdog 🐶
[Microsoft.We] Try to avoid using first-person plural like 'we'.

Raw Output:
{"message": "[Microsoft.We] Try to avoid using first-person plural like 'we'.", "location": {"path": "docs/docs/reference/migration.md", "range": {"start": {"line": 12, "column": 124}}}, "severity": "WARNING"}
create and maintain in the CLI's Terraform code, the `cloud-controller-mananger` now creates its own load balancer in Azure.
If inside your Constellation there are services of type `LoadBalancer`, please remove them before the upgrade and re-apply them
afterwards.

Check warning on line 15 in docs/docs/reference/migration.md

View workflow job for this annotation

GitHub Actions / vale 

[vale] reported by reviewdog 🐶
[Microsoft.Terms] Prefer 'afterward' over 'afterwards'.

Raw Output:
{"message": "[Microsoft.Terms] Prefer 'afterward' over 'afterwards'.", "location": {"path": "docs/docs/reference/migration.md", "range": {"start": {"line": 15, "column": 2}}}, "severity": "WARNING"}


## Migrating from Azure's service principal authentication to managed identity authentication (during the upgrade to Constellation v2.8.0)

- The `provider.azure.appClientID` and `provider.azure.appClientSecret` fields are no longer supported and should be removed.
- To keep using an existing UAMI, add the `Owner` permission with the scope of your `resourceGroup`.
Expand Down

0 comments on commit 7d586f1

Please sign in to comment.