Steps for Cert-Orchestrator Migration from v1.3 to v1.4

Here are the steps for upgrading AppViewX KUBE+ to leverage the enhanced features introduced in the AppViewX 2024.0.1.0 HFs release:

  1. Update the crypto-mesh helm repo by executing the command helm repo update <REPO_NAME>.
  2. Get v1.4 helm chart by executing the command helm pull <REPO_NAME>/crypto-mesh --version v1.4.
    Note: This command will download the helm chart for crypto-mesh v1.4 and save it as crypto-mesh-v1.4.tgz in the current folder.
  3. Extract the contents of the crypto-mesh-v1.4.tgz file by executing the command tar -xvf crypto-mesh-v1.4.tgz.
    Note: This command will extract the contents of the tarball (tgz file) and create a folder named 'crypto-mesh' with the extracted files in the current directory.
  4. Apply CRDs of v1.4 from the above folder by executing the command kubectl apply -f ./crypto-mesh/crds/cert-orchestrator/
  5. Upgrade cert-orchestrator from v1.3 to v1.4 using "helm upgrade" by executing the following command: 
    helm upgrade <HELM_NAME> <REPO_NAME>/crypto-mesh --version v1.4 --namespace crypto-mesh  --set certOrchestrator.namespace=crypto-mesh  --set certOrchestrator.global.clusterName=dev-cluster.appviewx.net  --set certOrchestrator.global.k8sVendor='Self-ManagedK8s' --set certOrchestrator.discovery.credentialSecretName=appviewx-auth  --set certOrchestrator.discovery.credentialSecretNamespace=crypto-mesh  --set appviewxInfraOrchestrator.enabled=True  --set appviewxCSIProvider.enabled=True  --set appviewxSigner.enabled=True  --set certOrchestrator.discovery.enabled=True  --set certOrchestrator.discovery.isGroupAutoGenerate=True --set certOrchestrator.global.logLevel=7 --set certOrchestrator.image.repository=repos.appviewx.com/integration/appviewx/cert-orchestrator --set appviewxCSIProvider.image.repository=repos.appviewx.com/integration/appviewx/appviewx-csi-provider --set appviewxInfraOrchestrator.image.repository=repos.appviewx.com/integration/appviewx/appviewx-infra-orchestrator --set certOrchestrator.discovery.isPrivateKeyDiscovery=True

    Make sure to replace the placeholders with the actual values:

    1. <HELM_NAME>: Existing Helm name for cert-orchestrator. To get the existing helm name, execute the command helm ls -A | grep crypto-mesh-v1.4.
    2. <REPO_NAME>: Name of the Helm repository.