Installing the v10 target on Kubernetes

Prepare your Kubernetes environment, create your API Connect secrets, install v10.

2>&1 | tee <output filename>

1. Obtain the API Connect v10 product files: Obtaining product files.
2. Create your v10 namespaces, deploy the API Connect v10 operators, and cert-manager. The steps differ depending on whether you use one namespace for all API Connect subsystems, or whether you want different namespaces for each subsystem. In both cases, complete all steps on these pages except for the last step of installing your API Connect subsystems:
   • Deploying operators in a single-namespace API Connect cluster.
   • Deploying operators in a multi-namespace API Connect cluster.

   Important: Return to this page and complete #ffm_installing_2018-to-10_k8s__create_sec and 4 before installing the API Connect subsystems.
3. Create the secrets based on your v2018 extracted data.
   1. Create the secrets by running the create_secrets_in_target.py script:
      • If both Management and Portal are in the same namespace, or if Portal is not installed:

        python3 create_secrets_in_target.py -n <namespace>

      • If Management and Portal are in different namespaces:

        python3 create_secrets_in_target.py -mgmt_ns <mgmt_namespace> -ptl_ns <portal_namespace>

      When the script detects more than one portal subsystem, it prompts you to select the portal subsystem name that you want to create the secrets for. For the remaining portal subsystems, specify the different portal namespace and name with the -ptl_ns and -ptl_subsys_name arguments:

      python3 create_secrets_in_target.py -skip_mgmt -ptl_ns <portal_x_namespace> -ptl_subsys_name <portal subsystem name>

   2. Verify that the secrets were created.

      Run the kubectl get secrets command as in the following example:

      # kubectl get secrets -n <namespace>
      NAME                               TYPE                                  DATA   AGE
      ...
      <mgmt deployment name>-enc-key     Opaque                                1      2m47s
      <portal deployment name>-enc-key   Opaque                                1      2m47s
      management-backup-secret           Opaque                                2      2m47s
      portal-backup-secret               Opaque                                2      2m47s

   3. Delete the v2018 Portal database encryption secret <ptl_deployment_name>-enc-key.
      Run the following command to delete the secret:

      # kubectl -n <namespace> delete secret <portal deployment name>-enc-key

      Note: The v2018 Portal database encryption secret is not compatible with v10. After you delete the <ptl_deployment_name>-enc-key, a new secret will be generated when you apply the subsystem CR in a later step.
4. Edit the subsystem YAML files as described in Installing the API Connect subsystems. You must update the following properties with the data that is extracted from your source v2018 deployment, which can be found in data/config.yaml for the Management subsystem, and data/config_portal.yaml for the Portal.
   Important: If you do not use the configuration from the source system, the migration fails.

   • Management subsystem properties:

       encryptionSecret:
         secretName: mgmt-enc-key

   • Portal database backup details,:

       portalBackup:
         credentials: portal-backup-secret
         host: <remote backup server IP>
         path: <example path>
         port: <remote backup server path>
         protocol: sftp

5. Continue with the installation of the subsystems, as described in Installing the API Connect subsystems.
   Note: To migrate all your v2018 data, install at least as many Portal and Gateway subsystems as you have on your v2018 source deployment. If you want to do a staged migration, you can install any remaining subsystems later.

Postinstallation verification and v10 toolkit CLI download.

6. Log in to the Cloud Manager UI: Login to Cloud Manager UI.
7. Download the v10 toolkit CLI (CLI only) and credentials.json file, see Installing the v10 toolkit.
8. Unpack the v10 toolkit CLI, and copy the apic-slim and credentials.json files to your apicv10install directory. Rename apic-slim to apic.
9. Ensure that your v10 toolkit CLI apic command is in your PATH variable:

   EXPORT PATH=<apicv10install directory>:$PATH

10. Set your toolkit CLI credentials with:

    apic client-creds:set <apicv10install directory>/credentials.json

11. Verify you can log in to your Management subsystem with the toolkit CLI. Use the same password as you used to log in to the Cloud Manager UI.

    apic login --server <platform_api_endpoint> --username admin --realm admin/default-idp-1

    where <platform_api_endpoint> is the FQDN of the platform api endpoint that is defined for your v10 Management subsystem, as returned by this command:

    kubectl get ingress -n <namespace> | grep platform-api

    For more information, see v10 toolkit CLI login