Kong Mesh Changelog
1.2.1
Released on 2021/03/09
Changes
- Fix to include the OPA CRD in the deployment
- Build on top of Kuma 1.1.1 with fixes and improvements
Upgrading
Upgrades from 1.2.0
are seamless and no additional steps are needed. When using Helm to upgrade from 1.1.x to 1.2.1, the step to explicitly apply the OPA CRD is not needed anymore.
1.2.0
Released on 2021/03/09
Changes
- Added Open Policy Agent integration
- Improved authentication support for control planes in multi-zone deployments, with the Kuma Discovery Protocol (KDS)
- Added FIPS support to the data plane proxy sidecar
- Added XDSv3 for control plane to data plane proxy communication
- Build on top of Kuma 1.1.0 with fixes and improvements
Upgrading
Kubernetes with kumactl
If you previously installed Kong Mesh with kumactl install control-plane --license-path=... | kubectl apply -f -
,
you must first uninstall the previous version and then install the new version. All policies are removed when you uninstall,
so make sure to back up all related CRDs before you start. Then:
-
Install Kong Mesh for Kubernetes using
kumactl install control-plane ...
with any additional command-line arguments you require. -
Delete the old Deployment, Service, Webhooks, and Validation hooks:
1 2 3 4
kubectl delete -n kong-mesh-system deploy/kuma-control-plane kubectl delete -n kong-mesh-system service/kuma-control-plane kubectl delete mutatingwebhookconfiguration/kuma-admission-mutating-webhook-configuration kubectl delete validatingwebhookconfiguration/kuma-validating-webhook-configuration
-
Restart all the pods in the meshes to make sure the new sidecars are deployed and connected to the newly deployed control plane.
Kubernetes with Helm
The supplied Helm Chart takes care of upgrading the control plane. Because of the way Helm handles CRDs, however, you must apply the new OPA CRD:
-
Install the new CRD
1
kubectl apply -f https://docs.konghq.com/mesh/1.2.x/patches/opa-policy.yaml
-
Upgrade Kong Mesh with Helm:
1 2
helm repo update helm --namespace kong-mesh-system upgrade my-kong-mesh kong-mesh/kong-mesh
-
Restart all the pods in the meshes to make sure the new sidecars are deployed and connected to the newly deployed control plane.