Offline Upgrade of Security Management Module¶
This page explains how to install or upgrade the security management module after downloading it from the Download Center.
Info
The term dowl appearing in the following commands or scripts is the internal development codename for the security management module.
Loading Images from the Downloaded Package¶
You can load the images using one of the following two methods. It is recommended to use chart-syncer to sync the images to the image repository when an image repository exists in the environment as it is more efficient and convenient.
Method 1: Syncing Images Using chart-syncer¶
By using chart-syncer, you can upload the charts from the downloaded package along with their dependent image packages to the image repository and Helm repository used by the installer to deploy DCE.
First, find a node that can connect to both the image repository and the Helm repository (such as the spark node). On this node, create a load-image.yaml configuration file and fill in the necessary information like the image repository and Helm repository configurations.
-
Create load-image.yaml
Note
All parameters in this YAML file are mandatory.
If a chart repo has already been installed in the current environment, chart-syncer also supports exporting the chart as a tgz file.
load-image.yamlsource: intermediateBundlesPath: dowl # The path where the .tar.gz package is located after using chart-syncer target: containerRegistry: 10.16.10.111 # Image repository address containerRepository: release.daocloud.io/dowl # Image repository path repo: kind: HARBOR # Helm Chart repository type url: http://10.16.10.111/chartrepo/release.daocloud.io # Helm repository address auth: username: "admin" # Image repository username password: "Harbor12345" # Image repository password containers: auth: username: "admin" # Helm repository username password: "Harbor12345" # Helm repository password
If there is no helm repo added on the current node, chart-syncer also supports exporting the chart as a tgz file and storing it in the specified path.
load-image.yamlsource: intermediateBundlesPath: dowl # The path where the .tar.gz package is located after using chart-syncer target: containerRegistry: 10.16.10.111 # Image repository url containerRepository: release.daocloud.io/dowl # Image repository path repo: kind: LOCAL path: ./local-repo # Local chart path containers: auth: username: "admin" # Image repository username password: "Harbor12345" # Image repository password
-
Run the image sync command.
Method 2: Loading Images Using Docker or containerd¶
Uncompress and load the image files.
-
Uncompress the tar bundle.
After successful decompression, you will have three files:
- hints.yaml
- images.tar
- original-chart
-
Load the images from the local directory into Docker or containerd.
Note
Each node needs to perform the Docker or containerd image loading operation, After loading is complete, tag the images to keep the Registry and Repository consistent with the installation.
Upgrade¶
There are two methods for upgrading. Choose the corresponding upgrade method based on the pre-operation:
-
Check if the security management Helm repository exists.
If the result is empty or shows the following message, proceed to the next step; otherwise, skip to the next step.
-
Add the security management Helm repository.
-
Update the security management Helm repository.
- If the helm version is too low, it may cause a failure. If it fails, try executing helm update repo .
-
Select the security management version you want to install (it is recommended to install the latest version).
-
Back up the
--set
parameters.Before upgrading the security management version, it is recommended to run the following command to back up the
--set
parameters of the old version. -
Update dowl CRDs.
-
Run
helm upgrade
.Before upgrading, it is recommended to replace the global.imageRegistry field in bak.yaml with the image repository address you are currently using.
-
Back up the
--set
parameters.Before upgrading the security management version, it is recommended to run the following command to back up the
--set
parameters of the old version. -
Update dowl CRDs.
-
Run
helm upgrade
.Before upgrading, it is recommended to replace the global.imageRegistry field in bak.yaml with the image repository address you are currently using.