Merge pull request #213 from danskernesdigitalebibliotek/feature/supp…

…ort-workloads-upgrade-dec-23

Upgrade Lagoon and support workloads

docs/runbooks/upgrading-support-workloads.md

@@ -19,7 +19,7 @@ followed by specific instructions for each workload (linked above).
 
 ## Prerequisites
 
-- Dplsh instance authorized against the cluster.
+- `dplsh` instance authorized against the cluster. See [Using the DPL Shell](./using-dplsh.md).
 
 ## General Procedure
 
@@ -60,6 +60,14 @@ followed by specific instructions for each workload (linked above).
 6. Then proceeded to perform the verification test for the relevant workload. See
    the following section for known verification tests.
 
+7. Finally, it is important to verify that Lagoon deployments still work. Some
+   breaking changes will not manifest themselves until an environment is
+   rebuilt, at which point it may subsequently fail. An example is the
+   [disabling of user snippets in the ingress-nginx controller
+   v1.9.0](https://github.com/kubernetes/ingress-nginx/pull/10393). To verify
+   deployments still work, log in to the Lagoon UI and select an environment to
+   redeploy.
+
 ## Specific producedures and tests
 
 - [Cert-manager](#cert-manager)
@@ -259,7 +267,7 @@ Amongst others the
 Link for diffing two chart versions:
 <https://github.com/kubernetes/ingress-nginx/compare/helm-chart-4.6.0...helm-chart-4.6.1>
 
-The project keeps a quite good [changelog for the chart](https://github.com/kubernetes/ingress-nginx/blob/main/charts/ingress-nginx/CHANGELOG.md)
+The project keeps a quite good [changelog for the chart](https://github.com/kubernetes/ingress-nginx/tree/main/charts/ingress-nginx/changelog)
 
 Link for diffing two controller versions:
 <https://github.com/kubernetes/ingress-nginx/compare/controller-v1.7.1...controller-v1.7.0>

infrastructure/.gitignore

@@ -4,3 +4,5 @@
 *backup*.sql
 *backup*.sql.gz
 *backup*.tar.gz
+
+.terraform/

infrastructure/environments/dplplat01/configuration/ingress-nginx/ingres-nginx-values.template.yaml

@@ -20,6 +20,12 @@ controller:
   admissionWebhooks:
     patch.nodeSelector:
       beta.kubernetes.io/os: linux
+  # Since v1.9.0, Nginx server snippets are disabled by default. However, Lagoon
+  # relies on them to be available for ingress definitions in order to prohibit
+  # dev environments from being indexed by search engines. See:
+  # https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#allow-snippet-annotations
+  # https://docs.lagoon.sh/using-lagoon-the-basics/going-live/#production-environment
+  allowSnippetAnnotations: true
 defaultBackend:
   nodeSelector:
     beta.kubernetes.io/os: linux

infrastructure/environments/dplplat01/configuration/versions.env

@@ -3,16 +3,16 @@
 
 # https://artifacthub.io/packages/helm/cert-manager/cert-manager
 # https://github.com/cert-manager/cert-manager/releases
-VERSION_CERT_MANAGER=v1.11.2
+VERSION_CERT_MANAGER=v1.12.7
 
 # https://artifacthub.io/packages/helm/grafana/grafana
-VERSION_GRAFANA=6.56.5
+VERSION_GRAFANA=7.0.17
 
 # https://artifacthub.io/packages/helm/harbor/harbor
-VERSION_HARBOR=1.12.1
+VERSION_HARBOR=1.13.1
 
 # https://artifacthub.io/packages/helm/ingress-nginx/ingress-nginx
-VERSION_INGRESS_NGINX=4.6.1
+VERSION_INGRESS_NGINX=4.8.4
 
 # https://artifacthub.io/packages/helm/appuio/k8up
 # appVersion 1.2.0
@@ -23,19 +23,21 @@ VERSION_INGRESS_NGINX=4.6.1
 VERSION_K8UP=1.1.0
 
 # https://artifacthub.io/packages/helm/grafana/loki
-VERSION_LOKI=5.5.2
+# Changelog: https://github.com/grafana/loki/blob/main/production/helm/loki/CHANGELOG.md
+VERSION_LOKI=5.41.2
 
 # https://artifacthub.io/packages/helm/bitnami/minio
 # appVersion 2022.4.29
-# This is the highest we can go without loosing the azure blob gateway.
+# This is the highest we can go without losing the azure blob gateway.
 # see:
 # https://blog.min.io/deprecation-of-the-minio-gateway/
 # https://github.com/minio/minio/issues/14331
 # https://github.com/bitnami/charts/issues/10258#issuecomment-1132929451
+# https://github.com/minio/minio/releases/tag/RELEASE.2022-04-30T22-23-53Z
 VERSION_MINIO=11.2.15
 
 # https://artifacthub.io/packages/helm/prometheus-community/kube-prometheus-stack
-VERSION_PROMETHEUS=45.28.1
+VERSION_PROMETHEUS=55.4.0
 
 # https://artifacthub.io/packages/helm/grafana/promtail
-VERSION_PROMTAIL=6.11.2
+VERSION_PROMTAIL=6.15.3

infrastructure/environments/dplplat01/lagoon/lagoon-versions.env

@@ -3,6 +3,6 @@
 
 # Current appVersion for remote and core is v2.16.0
 # https://github.com/uselagoon/lagoon-charts/blob/main/charts/lagoon-core/Chart.yaml#L24
-VERSION_LAGOON_CORE=1.39.0
+VERSION_LAGOON_CORE=1.41.0
 # https://github.com/uselagoon/lagoon-charts/blob/main/charts/lagoon-remote/Chart.yaml#L22
-VERSION_LAGOON_REMOTE=0.86.0
+VERSION_LAGOON_REMOTE=0.87.0