c. Upgrade Ingress

This section shows how to upgrade the ingress.

To determine if this step is required for the version you are upgrading to, refer to the Release Notes.

Download the latest code repository

Download the latest code repository as follows:

  1. Create a working directory to setup the source code.

    $ mkdir <workdir>
    

    For example:

    $ mkdir /scratch/OAMK8Slatest
    
  2. Download the latest OAM deployment scripts from the OAM repository.

    $ cd <workdir>
    $ git clone https://github.com/oracle/fmw-kubernetes.git --branch release/22.4.1
    

    For example:

    $ cd /scratch/OAMK8Slatest
    $ git clone https://github.com/oracle/fmw-kubernetes.git --branch release/22.4.1
    
  3. Set the $WORKDIR environment variable as follows:

    $ export WORKDIR=<workdir>/fmw-kubernetes/OracleAccessManagement
    

    For example:

    $ export WORKDIR=/scratch/OAMK8Slatest/fmw-kubernetes/OracleAccessManagement
    

Upgrading the ingress

To upgrade the existing ingress rules, follow the steps below:

  1. List the existing ingress:

    $ helm list -n oamns
    

    The output will look similar to the following:

    NAME            NAMESPACE       REVISION        UPDATED     STATUS          CHART                       APP VERSION
    nginx-ingress   oamns           1               <DATE>      deployed        ingress-nginx-4.3.0         1.4.0
    oam-nginx       oamns           1               <DATE>      deployed        ingress-per-domain-0.1.0    1.0
    
  2. Edit the $WORKDIR/kubernetes/charts/ingress-per-domain/values.yaml and change the domainUID parameter to match your domainUID, for example domainUID: accessdomain. For example:

    # Load balancer type. Supported values are: NGINX
    type: NGINX
    
    # SSL configuration Type. Supported Values are : NONSSL,SSL
    sslType: SSL
    
    # domainType. Supported values are: oam
    domainType: oam
    
    #WLS domain as backend to the load balancer
    wlsDomain:
      domainUID: accessdomain
      adminServerName: AdminServer
      adminServerPort: 7001
      adminServerSSLPort:
      oamClusterName: oam_cluster
      oamManagedServerPort: 14100
      oamManagedServerSSLPort:
      policyClusterName: policy_cluster
      policyManagedServerPort: 15100
      policyManagedServerSSLPort:
    
    
    # Host  specific values
    hostName:
      enabled: false
      admin:
      runtime:
    
  3. Upgrade the oam-nginx with the following command:

    $ helm upgrade oam-nginx kubernetes/charts/ingress-per-domain/ --namespace oamns --values kubernetes/charts/ingress-per-domain/values.yaml --reuse-values
    

    The output will look similar to the following:

    Release "oam-nginx" has been upgraded. Happy Helming!
    NAME: oam-nginx
    LAST DEPLOYED: <DATE>
    NAMESPACE: oamns
    STATUS: deployed
    REVISION: 2
    TEST SUITE: None
    
  4. List the ingress:

    $ kubectl get ing -n oamns
    

    The output will look similar to the following:

    NAME                 CLASS    HOSTS   ADDRESS        PORTS   AGE
    accessdomain-nginx   <none>   *       10.99.189.61   80      18s
    
  5. Describe the ingress and make sure all the listed paths are accessible:

    $ kubectl describe ing accessdomain-nginx -n oamns
    

    The output will look similar to the following:

    Name:             accessdomain-nginx
    Labels:           app.kubernetes.io/managed-by=Helm
    Namespace:        oamns
    Address:          10.99.189.61
    Default backend:  default-http-backend:80 (<error: endpoints "default-http-backend" not found>)
    Rules:
      Host        Path  Backends
      ----        ----  --------
      *
                  /console                        accessdomain-adminserver:7001 (10.244.1.224:7001)
                  /consolehelp                    accessdomain-adminserver:7001 (10.244.1.224:7001)
                  /rreg/rreg                      accessdomain-adminserver:7001 (10.244.1.224:7001)
                  /em                             accessdomain-adminserver:7001 (10.244.1.224:7001)
                  /oamconsole                     accessdomain-adminserver:7001 (10.244.1.224:7001)
                  /dms                            accessdomain-adminserver:7001 (10.244.1.224:7001)
                  /oam/services/rest              accessdomain-adminserver:7001 (10.244.1.224:7001)
                  /iam/admin/config               accessdomain-adminserver:7001 (10.244.1.224:7001)
                  /iam/admin/diag                 accessdomain-adminserver:7001 (10.244.1.224:7001)
                  /iam/access                     accessdomain-cluster-oam-cluster:14100 (10.244.1.225:14100)
                  /oam/admin/api                  accessdomain-adminserver:7001 (10.244.1.224:7001)
                  /oam/services/rest/access/api   accessdomain-cluster-oam-cluster:14100 (10.244.1.225:14100)
                  /access                         accessdomain-cluster-policy-cluster:15100 (10.244.1.226:15100)
                  /                               accessdomain-cluster-oam-cluster:14100 (10.244.1.225:14100)
    Annotations:  kubernetes.io/ingress.class: nginx
                  meta.helm.sh/release-name: oam-nginx
                  meta.helm.sh/release-namespace: oamns
                  nginx.ingress.kubernetes.io/configuration-snippet:
                    more_clear_input_headers "WL-Proxy-Client-IP" "WL-Proxy-SSL";
                    more_set_input_headers "X-Forwarded-Proto: https";
                    more_set_input_headers "WL-Proxy-SSL: true";
                  nginx.ingress.kubernetes.io/enable-access-log: false
                  nginx.ingress.kubernetes.io/ingress.allow-http: false
                  nginx.ingress.kubernetes.io/proxy-buffer-size: 2000k
    Events:
      Type    Reason  Age                From                      Message
      ----    ------  ----               ----                      -------
      Normal  Sync    55s (x2 over 63s)  nginx-ingress-controller  Scheduled for sync