Installing the IBM Cloud Pak for Data configuration admission controller webhook (Upgrading from Version 4.8 to Version 5.0)

If you want to enable services to use a shared set of custom certificates, a cluster administrator must install the Cloud Pak for Data configuration admission controller webhook.

Upgrade phase
  • You are not here. Updating your cluster
  • You are not here. Updating your client workstation
  • You are not here. Collecting required information
  • You are not here. Preparing to run an upgrade in a restricted network
  • You are not here. Preparing to run an upgrade from a private container registry
  • You are not here. Installing and upgrading prerequisite software
  • You are not here. Updating the shared cluster components
  • You are here icon. Preparing to upgrade an instance of Cloud Pak for Data
  • You are not here. Upgrading an instance of Cloud Pak for Data
Who needs to complete this task?

Cluster administrator A cluster administrator must complete this task.

When do you need to complete this task?
This task is required if you want to use a set of shared custom certificates across multiple services. The following services support shared custom certificates:
  • AI Factsheets
  • Cognos Analytics
  • Data Privacy
  • DataStage
  • Data Virtualization
  • Db2 Big SQL
  • 5.0.1 or later IBM Match 360
  • OpenPages
  • 5.0.1 or later watsonx Assistant

Repeat as needed If you have multiple instances of Cloud Pak for Data, repeat this task for each instance of Cloud Pak for Data that you plan to upgrade.

Before you begin

Best practice: You can run the commands in this task exactly as written using the installation environment variables. Ensure that you added the new environment variables from Updating your environment variables script.

In addition, ensure that you source the environment variables before you run the commands in this task.

About this task

The Cloud Pak for Data configuration admission controller is a mutating webhook that injects the cpd-custom-ca-certs secret, the secret mount, and the associated environment variables into Cloud Pak for Data pods so that they have access to a shared set of custom certificates.

Use the install-cpd-config-ac and enable-cpd-config-ac commands to install and enable the webhook.

Procedure

  1. Log the cpd-cli in to the Red Hat® OpenShift® Container Platform cluster: 
    ${CPDM_OC_LOGIN}
    Remember: CPDM_OC_LOGIN is an alias for the cpd-cli manage login-to-ocp command.
  2. Install the configuration admission controller webhook:
    The cluster pulls images from the IBM Entitled Registry 
    cpd-cli manage install-cpd-config-ac \
--cpd_instance_ns=${PROJECT_CPD_INST_OPERANDS}
    The cluster pulls images from a private container registry
    x86_64 clusters
    cpd-cli manage install-cpd-config-ac \
--cpd_instance_ns=${PROJECT_CPD_INST_OPERANDS} \
--cpd_config_ac_image=${PRIVATE_REGISTRY_LOCATION}/cpopen/cpd/zen-rsi-adm-controller:${VERSION}-x86_64
    ppc64le clusters
    cpd-cli manage install-cpd-config-ac \
--cpd_instance_ns=${PROJECT_CPD_INST_OPERANDS} \
--cpd_config_ac_image=${PRIVATE_REGISTRY_LOCATION}/cpopen/cpd/zen-rsi-adm-controller:${VERSION}-ppc64le
    s390x clusters
    cpd-cli manage install-cpd-config-ac \
--cpd_instance_ns=${PROJECT_CPD_INST_OPERANDS} \
--cpd_config_ac_image=${PRIVATE_REGISTRY_LOCATION}/cpopen/cpd/zen-rsi-adm-controller:${VERSION}-s390x
  3. Enable the configuration admission controller webhook: 
    cpd-cli manage enable-cpd-config-ac \
--cpd_instance_ns=${PROJECT_CPD_INST_OPERANDS}

What to do next

Now that you've installed the configuration admission controller webhook, you're ready to complete Installing or upgrading the IBM Cloud Pak for Data resource specification injection webhook (Upgrading from Version 4.8 to Version 5.0).