Add cert-manager 1.13.0 to 1.14.x GoNoGo upgrade bundle - #201
Open
Azahorscak wants to merge 5 commits into
Open
Conversation
- Add comprehensive GoNoGo bundle for cert-manager upgrade from 1.13.0 to 1.14.x - Include OPA checks for deprecated annotations and startupapicheck image validation - Add detailed upgrade assessment document with risk analysis and recommendations - Document breaking changes, known issues, and version-specific guidance - Provide pre-upgrade checklist and upgrade procedures - Recommend target version 1.14.4+ to avoid known bugs in earlier 1.14.x releases Ref: https://cert-manager.io/docs/releases/upgrading/upgrading-1.13-1.14/ Co-authored-by: Adam Zahorscak <Azahorscak@users.noreply.github.com>
|
|
- Add SUMMARY.md with concise upgrade decision matrix - Include critical requirements and version constraints - Provide quick command reference for upgrade and rollback - Summarize risk levels and timeline - Link to comprehensive assessment and bundle files Co-authored-by: Adam Zahorscak <Azahorscak@users.noreply.github.com>
- Add comprehensive decision flow diagram for upgrade path - Include version selection matrix by Kubernetes version - Provide risk assessment for different scenarios - Add action priority matrix with ownership - Document common pitfalls and best practices - Include emergency rollback decision tree - Add quick command cheat sheet for common operations Co-authored-by: Adam Zahorscak <Azahorscak@users.noreply.github.com>
- Add comprehensive usage guide for cert-manager bundle - Document all OPA checks with examples and remediation steps - Include severity levels and interpretation guide - Provide CI/CD integration examples (GitHub Actions) - Add remediation examples with before/after YAML - Include pre-upgrade checklist - Link to all related documentation files Co-authored-by: Adam Zahorscak <Azahorscak@users.noreply.github.com>
- Add navigation guide for all assessment documents - Include quick reference tables for versions and breaking changes - Provide use case-based reading guides - Add command examples for running assessments - Include metadata and success criteria checklist - Link to all internal and external resources Co-authored-by: Adam Zahorscak <Azahorscak@users.noreply.github.com>
Fairwinds Insights Scan ResultsView the full report at insights.fairwinds.com. ✅ No new Action Items detected! |
1 similar comment
Fairwinds Insights Scan ResultsView the full report at insights.fairwinds.com. ✅ No new Action Items detected! |
Azahorscak
marked this pull request as ready for review
May 1, 2026 16:05
Contributor
|
I almost wonder if we want these additional files here? The decision tree, summary, ettc. |
Member
Author
|
Yeah i'm unsure. I'll review the others and see if the pattern is clear or not. |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
4 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Description
What's the goal of this PR?
This PR adds a comprehensive GoNoGo bundle for assessing cert-manager upgrades from version 1.13.0 to 1.14.x, along with a detailed upgrade assessment document to help users make informed decisions about the upgrade.
What changes did you make?
New GoNoGo Bundle (
pkg/bundle/bundles/cert-manager.yaml):certmanager.k8s.io/*annotations on Ingress resourcescertmanager.k8s.io/*annotations on Certificate resourcesctlimageUpgrade Assessment Document (
CERT_MANAGER_1.13_TO_1.14_GONOGO.md):Key Findings
Recommendation: GO with caution⚠️
The upgrade is feasible and recommended (cert-manager 1.13.0 reached EOL on June 5, 2024), but with critical considerations:
What alternative solution should we consider, if any?
Alternative approaches considered:
The GoNoGo bundle approach provides automated, repeatable validation that can be integrated into CI/CD pipelines and helps teams assess upgrade readiness before attempting the upgrade.
Additional Context
This bundle follows the established pattern from existing bundles (metrics-server, aws-load-balancer-controller) and is based on:
The bundle can be used by running:
Checklist
Slack Thread