What's deprecated and changed for IBM Cloud Pak foundational services

Get a quick overview of what is changed, deprecated, or removed for the foundational services.

Deprecated services and features

Installer

Installer versions 1.1.0, 3.4.x, and 3.5.x are deprecated in installer version 3.16.x. You cannot upgrade to these versions.

IAM APIs

From foundational services version 3.22, the use of the following APIs are deprecated and are subject to be removed in the future release:

Deprecated IAM services
IAM API	Affected item
Account management APIs	`https://<cluster_address>/idmgmt/identity/api/v1/account`
Directory management APIs	`https://<cluster_address>/idmgmt/identity/api/v1/directory/ldap`
User group management APIs	`https://<cluster_address>/idmgmt/identity/api/v1/usergroup`
User management APIs	`https://<cluster_address>/idmgmt/identity/api/v1/users`
Team management APIs	`https://<cluster_address>/idmgmt/identity/api/v1/teams`
Service ID management APIs	`https://<cluster_address>/iam-token/serviceids/`
API key management APIs	`https://<cluster_address>/iam-token/apikeys`
Service policy management APIs	`https://<cluster_address>/iam-pap/acms/v1/` `https://<cluster_address>/iam-pdp/v1/`
Service onboarding and RBAC APIs	`https://<cluster_address>/iam-pap/acms/v1/services/`
Platform user API keys	`https://<cluster_address>/iam-token/apikeys/` `https://<cluster_address>/iam-token/oidc/`
Single sign-on APIs	`https://<cluster_address>/idmgmt/v1/saml/`
Service health and version check APIs	`https://<cluster_address>/idmgmt/explorer/swagger.json` `https://<cluster_address>/idmgmt/identity/api/v1/` `https://<cluster_address>/iam-pap/v1/` `https://<cluster_address>/iam-token/v1`
LDAP management APIs	`https://<cluster_address>/idmgmt/identity/api/v1/identityprovider/`
Identity Provider APIs (IdP V1 and IdP V2)	`https://<cluster_address>/idprovider/v1/` `https://<cluster_address>/idprovider/v2/`

IBM API Catalog service

In foundational services version 3.19 and newer, IBM API Catalog service is no longer available as an optional installable component. IBM API Catalog still exists in foundational services version 3.18 or older, but at this time is not supported to use.

Certificate Manager

Configmap watcher removed from cert-manager: In version 3.19 of foundational services, configmap-watcher is removed from cert-manager.
The apiVersion certmanager.k8s.io/v1alpha1 in all cert-manager Custom Resources (Certificates, Issuers, and ClusterIssuers) is deprecated. apiVersion cert-manager.io/v1 is recommended.

OperatorSource

You must define a CatalogSource for the IBM Cloud Pak foundational services operator. The OperatorSource is deprecated and might be removed in a future release.

Platform UI

Prometheus and Grafana UI deprecation: In Platform UI version 1.8.x (foundational services version 3.21), Prometheus and Grafana UI are deprecated in OpenShift Container Platform version 4.10 and removed in OpenShift Container Platform version 4.11. When you click on the OpenShift Container Platform Grafana link from the Administration panel, you will now be redirected to the OpenShift Container Platform Observability Dashboard. For more information, see OpenShift Container Platform 4.10 release notes.

PolicyController (IAM)

The policy controller within the Identity and Access Management (IAM) service is deprecated and might be removed in a future release.

Audit policy controller (Audit logging)

The Audit policy controller is deprecated and might be removed in a future release.

Common UI

The Common header is replaced by a new header for shared use across IBM Cloud Paks.

With this header, the available toolbar options are streamlined to include only the main Menu, the User menu, a menu to switch between the installed IBM Cloud Paks and the Administration panel. In addition a link is included, which can open either the Administration panel or the Home page for the IBM Cloud Pak that is currently being accessed.Menu options for accessing the Visual Web Terminal, configuring the client, setting the Home page, and opening the IBM documentation are removed from the header.

The theme toggle is now removed. The dark theme is now the theme for the Administration panel.

Identity and Access Management

Some user management views are replaced with alternatives views. When the ibm-zen-operator and the associated Platform UI Framework is installed, these alternative views become available to replace the previous IAM views.

The default authentication type for accessing the console is renamed to be IBM Provided credentials (admin only).

Nginx ingress (ibm-ingress-nginx-operator)

Nginx ingress is deprecated with installer version 3.10.0 and might be removed in a future release.

IBM Cloud Pak CLI (cloudctl)

In foundational services version 3.22, the cloudctl case command is deprecated and replaced with ibm-pak plug-in. Support for the cloudctl case command will be removed in a future release.

Removed services and features for foundational services

The following services are now removed. If you are using earlier installer versions of foundational services or are migrating from an earlier installer version, these services can still exist on your clusters at the last version of the services that you previously installed.

Audit logging

The journald support in AuditLogging CR, and audit sidecar (icp-audit-service) are removed with IBM Cloud Pak foundational services audit logging version 3.17.0. These services were deprecated in audit logging version 3.7.0. You can use Rsyslog Sidecar or HTTPS to forward audit logs to IBM Cloud Pak foundational services audit logging service.

Monitoring

IBM Cloud Pak foundational services Prometheus as a data source of Grafana is removed from foundational services version 3.8.x and later.

Metering

The deprecated Metering service is removed in IBM Cloud Pak® foundational services version 3.7.x.

Logging

The deprecated Logging service is removed in IBM Cloud Pak® foundational services version 3.7.x.

Catalog

The Catalog UI service (ibm-catalog-ui-operator) was deprecated with installer version 3.4.1 and is now removed with installer version 3.6.0.

Helm Services

The Helm API (ibm-helm-api-operator) and Helm Repository (ibm-helm-repo-operator) services were deprecated with installer version 3.4.1 and are now removed with installer version 3.6.0.

The Helm CLI and tiller-deploy features are also removed.