Changes for page Rancher 2

Last modified by Diana Strebkova on 2026/04/20 09:21

From version 15.1
edited by Diana Strebkova
on 2025/12/12 13:38
Change comment: There is no comment for this version
To version 25.1
edited by Diana Strebkova
on 2026/04/20 09:18
Change comment: There is no comment for this version

Summary

Details

Page properties
Content
... ... @@ -177,49 +177,6 @@
177 177  (% class="p1" %)
178 178  [[image:attach:Screenshot 2023-04-25 at 13.30.33.png||data-xwiki-image-style-border="true" queryparams="effects=drop-shadow" height="127" width="1100"]]
179 179  
180 -(% id="H" class="p1" %)
181 -==== Target: http(s) URL ====
182 -
183 -{{warning}}
184 -This example is being deprecated, you can still add other external repositories in that way, but all internal harbor-hosted repositories should be added as Target: OCI Repository
185 -{{/warning}}
186 -
187 -(% class="p1" %)
188 -In the "Repository: Create" dialog, simply fill in the following fields. Authentication is not required.
189 -
190 -(% class="wrapped" %)
191 -|=(((
192 -Field
193 -)))|=(((
194 -Value
195 -)))
196 -|=(((
197 -Name
198 -)))|(((
199 -devops-as-a-service
200 -)))
201 -|=(((
202 -Description
203 -)))|(((
204 -Public Helm charts as documented at [[https:~~/~~/docs.devops.t-systems.net>>url:https://docs.devops.t-systems.net||shape="rect"]]
205 -)))
206 -|=(((
207 -Index URL
208 -)))|(((
209 -[[https:~~/~~/registry.sdc.t-systems.net/chartrepo/devopsaas/>>url:https://registry.sdc.t-systems.net/chartrepo/devopsaas/||shape="rect"]]
210 -)))
211 -
212 -[[image:attach:image-2024-2-27_14-29-17.png||data-xwiki-image-style-border="true" queryparams="effects=drop-shadow" width="540"]]
213 -
214 -(% class="p1" %)
215 -Finally, click Create.
216 -
217 -The repository is now listed:
218 -
219 -[[image:Screenshot 2024-07-03 at 15.13.55.png||data-xwiki-image-style-border="true" height="149" width="785"]]
220 -
221 -==== Target: OCI Repository ====
222 -
223 223  To add public oci-repository, navigate to repository create button and click it. For target, use OCI Repository like shown below:
224 224  
225 225  [[image:1765207154466-828.png||height="298" width="821"]]
... ... @@ -247,11 +247,11 @@
247 247  )))|(((
248 248  oci:~/~/registry.sdc.t-systems.net/devopsaas-helm/**<chartname>**, for example:
249 249  
250 -oci:~/~/registry.sdc.t-systems.net/devopsaas-helm/jenkins-lib
207 +oci:~/~/registry.sdc.t-systems.net/devopsaas-helm/jenkins-auto-agent
251 251  
252 -{{info}}
253 -Take into account, that all internal harbor repositories with helm charts have PKEY-helm naming convention, adding repo with both docker images and helm charts may not be supported in rancher.
254 -{{/info}}
209 +{{box}}
210 +Take into account, that all internal harbor repositories with helm charts have PKEY-helm naming convention, adding repo with both docker images and helm charts is not supported in rancher.
211 +{{/box}}
255 255  )))
256 256  
257 257  {{info}}
... ... @@ -272,7 +272,7 @@
272 272  
273 273  To add project specific helm charts to Rancher, a Harbor robot account is needed, that is able to read helm charts and pull repositories. If you don't have such an account yet, please follow the instructions given in the [[Create Robot Account section of the Harbor documentation>>doc:Harbor.Harbor 2\.7 Robot Accounts.WebHome||anchor="create_robot_account"]] and make sure to grant at least the following permissions:
274 274  
275 -* Read Helm Chart
232 +* Read Artifact
276 276  * Pull Repository
277 277  
278 278  (% id="HCreateAppRepositoryinRancher-1" class="p1" %)
... ... @@ -281,39 +281,17 @@
281 281  (% class="p1" %)
282 282  In Rancher UI, switch to the intended cluster and go to Apps/Repositories using the left side menu.
283 283  
284 -
285 285  [[image:attach:Screenshot 2023-04-25 at 13.11.48.png||data-xwiki-image-style-border="true" queryparams="effects=drop-shadow" height="400" width="209"]]
286 286  
287 287  (% class="p1" %)
288 288  Create a new Repository by pressing the Create button.
289 289  
290 -(% id="HTarget:http28s29URL-1" class="p1" %)
291 -==== [[image:attach:Screenshot 2023-04-25 at 13.30.33.png||data-xwiki-image-style-border="true" queryparams="effects=drop-shadow" height="127" width="1100"]] ====
246 +(% class="p1" id="HTarget:http28s29URL-1" %)
247 +[[image:attach:Screenshot 2023-04-25 at 13.30.33.png||data-xwiki-image-style-border="true" queryparams="effects=drop-shadow" height="127" width="1100"]]
292 292  
293 293  (% id="HTarget:http28s29URL-1" class="p1" %)
294 -==== Target: http(s) URL ====
250 +==== ====
295 295  
296 -{{warning title="Chartmuseum Deprecation"}}
297 -Chartmuseum in Harbor is deprecated, meaning we won't be able to add internal harbor repositories to Rancher that way anymore. Instead use Target: OCI repository.
298 -{{/warning}}
299 -
300 -(% class="p1" %)
301 -A name for the Repository has to be set. In the screenshot, the project name CITEST is used, which corresponds to our example from above.
302 -Choose http(s) URL to an index generated by Helm and provide the Index URL ##https:~/~/registry-<domain>.devops.t-systems.net/chartrepo/<project>/##
303 -
304 -(% class="p1" %)
305 -Replace ##<domain>## and ##<project>## as necessary to match your set-up.
306 -
307 -(% class="p1" %)
308 -For Authentication, select "Create a HTTP Basic Auth Secret" and provide the Username and Password of the Harbor robot account from the previous section.
309 -[[image:attach:Screenshot 2023-04-26 at 18.10.15.png||data-xwiki-image-style-border="true" queryparams="effects=drop-shadow" height="468" width="1100"]]
310 -
311 -(% class="p1" %)
312 -Click Create.
313 -
314 -(% id="HTarget:OCIRepository-1" class="p1" %)
315 -==== Target: OCI Repository ====
316 -
317 317  {{info}}
318 318  Now all internal helm charts are stored in harbor folders with -helm suffix. Adding the whole public project doesn't work natively anymore, so each separate chart should be added as a separate repo.//** If you have a real need to add the whole project, please contact support for finding a possible solution.**//
319 319  {{/info}}
... ... @@ -361,18 +361,23 @@
361 361  {{/info}}
362 362  )))
363 363  
364 -=== Migrating chart repositories in rancher to new OCI Repository format ===
299 +== Migrating chart repositories in rancher to new OCI Repository format ==
365 365  
366 366  (% class="box warningmessage" %)
367 367  (((
368 -ChartMuseum is being deprecated. After the migration is complete, **all harbor charts will be removed from ChartMuseum**, and **old HTTP(S)-based chart repositories will no longer work in Rancher (for internal harbor charts)**.
303 +ChartMuseum is deprecated. **All harbor charts are removed from ChartMuseum**, and **old HTTP(S)-based chart repositories no longer work in Rancher (for internal harbor charts)**.
369 369  )))
370 370  
306 +(% class="box" %)
307 +(((
308 +**All your charts are available in the corresponding  `<pkey>-helm` OCI project.**
309 +)))
310 +
371 371  There are two ways to migrate your repositories:
372 372  
373 373  1. ##Direct Transition (Editing the Existing Repository)##
374 374  1*. Change the target to “OCI Repository”.
375 -1*. Update the URL as required (the repository name cannot be changed).
315 +1*. Update the URL as required (the repository name cannot be changed) and add a new robot account for helm project, check documentation above
376 376  1*. After saving, installed apps will automatically start using the updated repository.
377 377  1*. (% class="box" %)
378 378  (((
... ... @@ -380,25 +380,15 @@
380 380  If your old repository included several charts (for example “bitbucket” and “jira”), then after switching to OCI you can only target one chart (e.g. “bitbucket”).
381 381  The other charts will no longer receive updates through this repo, and you will still need to create additional repositories for each individual chart.
382 382  )))
383 -1. Add New Repositories One by One (Recommended), preserve the old one till the end.
384 -This approach allows a smooth transition while the old ChartMuseum repository continues to function. You can:
385 -1.* Create a new OCI repository for each chart,
386 -1.* Keep the old ChartMuseum repo enabled during the migration,
387 -1.* Migrate applications gradually following the steps described here.
323 +1. Add New Repositories One by One (Recommended), preserve the old one till the end. This approach allows a smooth transition while the old ChartMuseum repository continues to function. You can:
324 +1*. Create a new OCI repository for each chart,
325 +1*. Keep the old ChartMuseum repo enabled during the migration,
326 +1*. Migrate applications gradually following the steps described here.
327 +1*. This avoids disruptions and allows controlled migration.
328 +
329 +1. //Special Case: Old Repo Targeting Multiple Chart Repos//
330 +If your existing repository targets multiple chart repositories and you need the new OCI setup to behave the same way, please **contact support.**
388 388  
389 -This avoids disruptions and allows controlled migration.
390 -
391 -Special Case: Old Repo Targeting Multiple Chart Repos
392 -
393 -If your existing repository targets multiple chart repositories and you need the new OCI setup to behave the same way, please contact support. OCI does not support multi-chart endpoints within a single repository, and we can help you find an appropriate solution.
394 -
395 -To ensure a smooth transition, we recommend to **add an OCI-based repository alongside the existing ChartMuseum repository** during the migration phase. If you don't w
396 -
397 -(% class="box" %)
398 -(((
399 -**We will make your charts available in the corresponding new `<pkey>-helm` OCI projects.**
400 -)))
401 -
402 402  | Term | Meaning
403 403  | **Old Repository** | The existing HTTP/HTTPS Harbor ChartMuseum repository.
404 404  | **New Repository** | The new OCI-based Helm chart repository created for your project (e.g. `<chart-repo-name>` in `<pkey>-helm`).
... ... @@ -405,7 +405,7 @@
405 405  
406 406  ##__**Why This Migration Is Required:**__##
407 407  
408 -* ##ChartMuseum is deprecated and will be removed.##
338 +* ##ChartMuseum is deprecated.##
409 409  * ##Applications deployed from old repos keep a reference to that repo inside their labels.##
410 410  * ##Without updating the application to point to the new OCI repo, **Rancher will not detect new chart versions from new repository**.##
411 411  
... ... @@ -414,7 +414,7 @@
414 414  1. ##Create the New OCI Repository in Rancher##
415 415  11. Go to **Apps → Repositories**.
416 416  11. Add a new repository of type **OCI**.
417 -11. Name it similarly to your old repo name (e.g. `<chart-repo-name>-oci`). You can't name it the same.
347 +11. Name it similarly to your old repo name (e.g. `<chart-repo-name>-oci`). __**You can't name it the same and can't rename it later.**__
418 418  11. Point it to the new OCI endpoint.
419 419  1. ##Disable the Old ChartMuseum Repository Temporarily## 
420 420  ##This step ensures that Rancher resolves charts from the new OCI repo.##
... ... @@ -421,12 +421,15 @@
421 421  11. Go to **Apps → Repositories**.
422 422  11. Disable the old HTTP(S)-based repository.
423 423  11. Keep it disabled until the migration is done.
354 +[[image:1765548124989-482.59.06.png||height="152" width="485"]]
424 424  1. ##Update Existing Applications to Use the New OCI Repo##
425 425  Applications deployed with the old repository still contain the old repo name in their metadata. You must upgrade them once to transition.
426 426  11. Go to **Apps → Installed Apps**.
427 427  11. Open the application that was deployed using the old repo.
428 -11. Click **Upgrade**.
429 -11. In the list of available chart repositories (scroll to the bottom), select the **new OCI repository**.
359 +11. Click **Edit/Upgrade**.
360 +[[image:1765548598644-830.png||height="138" width="811"]]
361 +11. In the list of available chart repositories (scroll to the bottom), select the **new OCI repository**. Or enter the chart name in search bar:
362 +[[image:1765548750604-334.png||height="293" width="308"]]
430 430  11. Choose the chart version you want to deploy (same or newer).
431 431  11. Click **Upgrade**.
432 432  1. ##Re-enable the Old Repository (Optional) ##
... ... @@ -433,11 +433,8 @@
433 433  If you still need the old repo for other apps, re-enable it after the migration steps above.
434 434  **Note:** Even if a newer chart version exists in the old repository, your migrated app **will not see it**, because it is no longer connected to that repo
435 435  
436 -----
369 +##If you want to move an app back to the old repository:##
437 437  
438 -## Reverting the Migration (If Needed)
439 -If you want to move an app back to the old repository:##
440 -
441 441  1. Temporarily disable the new OCI repo.
442 442  1. Enable the old ChartMuseum repo.
443 443  1. Open the application → **Upgrade**.
... ... @@ -446,8 +446,7 @@
446 446  
447 447  This will reconnect the app to the old repository.
448 448  
449 -=
450 -Automated deployments with Jenkins =
379 += Automated deployments with Jenkins =
451 451  
452 452  In this section, we describe(% style="color:#172b4d" %) how to set-up **automated builds, tests and deployments** for Jenkins.
453 453  
1765548124989-482.59.06.png
Author
... ... @@ -1,0 +1,1 @@
1 +xwiki:XWiki.dianastrebkovat-systemscom
Size
... ... @@ -1,0 +1,1 @@
1 +64.4 KB
Content
1765548598644-830.png
Author
... ... @@ -1,0 +1,1 @@
1 +xwiki:XWiki.dianastrebkovat-systemscom
Size
... ... @@ -1,0 +1,1 @@
1 +153.4 KB
Content
1765548750604-334.png
Author
... ... @@ -1,0 +1,1 @@
1 +xwiki:XWiki.dianastrebkovat-systemscom
Size
... ... @@ -1,0 +1,1 @@
1 +103.0 KB
Content