We're currently on Calico 3.14, which supports k8s 1.16-1.18, latest Calico (3.18) supports k8s 1.18-1.20. Once we're on 1.18 we need to upgrade to a later Calico version.
Last upgrade T250863 suggests that this can be done with no impact to network traffic, which is nice.
| Subject | Repo | Branch | Lines +/- | |
|---|---|---|---|---|
| kubeadm: Upgrade Calico to v3.18.4 | operations/puppet | production | +3 K -283 |
| Status | Subtype | Assigned | Task | ||
|---|---|---|---|---|---|
| Resolved | Raymond_Ndibe | T359641 [infra,k8s] Upgrade Toolforge Kubernetes to version 1.27 | |||
| Restricted Task | |||||
| Resolved | Slst2020 | T327025 [infra,k8s] Upgrade Toolforge Kubernetes to version 1.26 | |||
| Resolved | • aborrero | T316107 [infra,k8s] Upgrade Toolforge Kubernetes to version 1.25 | |||
| Resolved | • aborrero | T307651 Upgrade Toolforge Kubernetes to version 1.24 | |||
| Resolved | taavi | T298005 Upgrade Toolforge Kubernetes to version 1.23 | |||
| Resolved | taavi | T286856 Upgrade Toolforge Kubernetes to latest 1.22 | |||
| Resolved | • rook | T308172 Upgrade PAWS to Kubernetes 1.21 | |||
| Resolved | taavi | T282942 Upgrade Toolforge Kubernetes to latest 1.21 | |||
| Resolved | • rook | T291913 Upgrade PAWS kubernetes to 1.20 | |||
| Resolved | • rook | T280402 Upgrade Toolforge Kubernetes to latest 1.20 | |||
| Resolved | taavi | T280340 Upgrade Toolforge Kubernetes to latest 1.19 | |||
| Resolved | taavi | T280342 Upgrade Calico to 3.18 |
The upstream manifest (https://docs.projectcalico.org/manifests/calico-typha.yaml) has had some changes, we should upgrade ours (operations/puppet/modules/kubeadm/templates/calico.yaml.erb) to match upstream before updating.
Calico 3.19 dropped support for Kubernetes 1.18, so let's upgrade to Calico 3.18 while we're on k8s 1.18 and look at upgrading to Calico 3.19 at a later date. 3.18 officially supports 1.18-1.20.
Change 703061 had a related patch set uploaded (by Majavah; author: Majavah):
[operations/puppet@production] kubeadm: Upgrade Calico to v3.18.4
Change 703061 merged by Bstorm:
[operations/puppet@production] kubeadm: Upgrade Calico to v3.18.4
Mentioned in SAL (#wikimedia-cloud) [2021-07-14T09:05:53Z] <majavah> testing calico 3.18 upgrade - T280342
Mentioned in SAL (#wikimedia-cloud) [2021-07-14T09:17:36Z] <majavah> copying calico 3.18.4 images from docker hub to docker-registry.tools.wmflabs.org T280342
I deployed the upgraded version to toolsbeta. Didn't experience any problems, and the update had no effect on live network traffic.
Mentioned in SAL (#wikimedia-cloud) [2021-07-21T16:59:15Z] <majavah> deploying calico v3.18.4 T280342
Mentioned in SAL (#wikimedia-cloud) [2021-07-21T17:10:26Z] <majavah> deploying calico v3.18.4 T280342