Meta-task tracking things needed for helm 3 migration
Pre-Migration tasks
- import and build helm3
- ensure compatibility of helm plugins
- helm-diff supports helm3
-
helm-secrets seems to be compatible to helm 3 (https://github.com/zendesk/helm-secrets/issues/145).(we're not using this anywhere) - helmfile is not a plugin, looks like it supports helm3
- add helm3 stuff to puppet
-
figure a way to gradually migrate helmfile.d/services (this should only be done after k8s has been upgraded to >= 1.16 in all clusters) - alternatively find a way to migrate all services at once (on a depooled cluster), verify success and do so on the second one
- We need an alternative to recreate pods
- We might need additional annotations to helm tests (see comments)
- Find replacement and new workflow for missing Tiller serviceaccount (new RBAC rules and modifications in helmfiles)
- Create and verify plan for migration of codfw and eqiad (see T251305#7492328)
Migration tasks:
- verify migration path on staging-codfw
- re-deploy and verify staging
- re-deploy and verify codfw
- re-deploy and verify eqiad
Post migration tasks:
- remove tiller and tiller service accounts (742989)
- uninstall helm2 from hosts (deploy, releases,contint), make helm3 default (753026)
- Cleanup boilderplate code in helmfiles (737034)
- remove environment state values helmBinary (751067)
- bump charts to v2 api version T295750
- remove helm2 from CI and rake files (746864, 747147, 747487, 747814, 748701)
- remove depricated "helm.sh/hook": test-success annotation (757877 and also related to T276949)