Upgrading the IBM Software Hub configuration admission controller webhook (Upgrading from Version 5.1 to Version 5.3)

If you installed the IBM Software Hub configuration admission controller webhook, a cluster administrator must upgrade the webhook after you upgrade IBM Software Hub.

Who needs to complete this task?

Cluster administrator A cluster administrator must complete this task.

When do you need to complete this task?

This task is required if you installed the configuration admission controller webhook for this instance.

Repeat as needed If you have multiple instances of IBM Software Hub, repeat this task for each instance of IBM Software Hub that you upgraded.

Before you begin

Best practice: You can run the commands in this task exactly as written using the installation environment variables. Ensure that you added the new environment variables from Updating your environment variables script.

In addition, ensure that you source the environment variables before you run the commands in this task.

About this task

The IBM Software Hub configuration admission controller is a mutating webhook that injects the cpd-custom-ca-certs secret, the secret mount, and the associated environment variables into IBM Software Hub pods so that they have access to a shared set of custom certificates.

Run the install-cpd-config-ac and enable-cpd-config-ac commands to upgrade and re-enable the webhook.

Procedure

Log the cpd-cli in to the Red Hat® OpenShift® Container Platform cluster:
```
${CPDM_OC_LOGIN}
```
Remember: CPDM_OC_LOGIN is an alias for the cpd-cli manage login-to-ocp command.
If your cluster pulls images from a private container registry, set the ZEN_VERSION environment variable based on the version of IBM Software Hub on your cluster:
IBM Software Hub version zen version

5.3.1 6.4.0

5.3.0 6.3.0
```
export ZEN_VERSION=<version>
```

IBM Software Hub version	`zen` version
5.3.1	6.4.0
5.3.0	6.3.0

Upgrade the configuration admission controller webhook:

The cluster pulls images from the IBM Entitled Registry

cpd-cli manage install-cpd-config-ac \
--cpd_instance_ns=${PROJECT_CPD_INST_OPERANDS}

The cluster pulls images from a private container registry

x86_64 clusters

cpd-cli manage install-cpd-config-ac \
--cpd_instance_ns=${PROJECT_CPD_INST_OPERANDS} \
--cpd_config_ac_image=${PRIVATE_REGISTRY_LOCATION}/cpopen/cpfs/zen-rsi-adm-controller:${ZEN_VERSION}-amd64

ppc64le clusters

cpd-cli manage install-cpd-config-ac \
--cpd_instance_ns=${PROJECT_CPD_INST_OPERANDS} \
--cpd_config_ac_image=${PRIVATE_REGISTRY_LOCATION}/cpopen/cpfs/zen-rsi-adm-controller:${ZEN_VERSION}-ppc64le

s390x clusters

cpd-cli manage install-cpd-config-ac \
--cpd_instance_ns=${PROJECT_CPD_INST_OPERANDS} \
--cpd_config_ac_image=${PRIVATE_REGISTRY_LOCATION}/cpopen/cpfs/zen-rsi-adm-controller:${ZEN_VERSION}-s390x

Re-enable the configuration admission controller webhook:

cpd-cli manage enable-cpd-config-ac \
--cpd_instance_ns=${PROJECT_CPD_INST_OPERANDS}

What to do next

Now that you've upgraded the configuration admission controller webhook, you're ready to complete Upgrading privileged monitors (Upgrading from Version 5.1 to Version 5.3).

If you don't use privileged monitors, your next steps depend on which components you upgraded:

IBM Software Hub control plane and services: If you upgraded the IBM Software Hub control plane and the services in the instance, complete Setting up services after install and upgrade.
IBM Software Hub control plane only: If you upgraded only the IBM Software Hub control plane, you must upgrade the services in the instance. For more information, see Services.