Changes for page Rancher 2

Last modified by Diana Strebkova on 2026/04/20 09:21

Manage
- Copy
Actions
- Export
- Print Preview
Viewers
- Source
- Children
- Content
- Comments
- Likes

From 21.1 to 20.1 From 27.1 to 26.1

From version 26.1

edited by Diana Strebkova
on 2026/04/20 09:19

Change comment: Removed references to chartmuseum

To version 21.1

edited by Diana Strebkova
on 2025/12/12 14:21

Change comment: There is no comment for this version

Raw
Rendered

Summary

Page properties (1 modified, 0 added, 0 removed)

Details

Page properties

Content

@@ -158,6 +158,10 @@
  == Add public helm chart ==
++{{warning width="70" title="Chartmuseum Deprecation"}}
++Chartmuseum is deprecated in new Harbor versions, we are migrating all helm charts to oci-compatible repositories in Harbor with "PKEY-helm" naming convention. For internal harbor repos, use new approach to add OCI chart repositories in rancher.
++{{/warning}}
++
  In this section, we describe (% style="color:#172b4d" %)how to add public helm charts like the one of DevOps-as-a-Service to a cluster to allow manual deployments.
  (% id="HCreateAppRepositoryinRancher" class="p1" %)
@@ -173,6 +173,49 @@
  (% class="p1" %)
  [[image:attach:Screenshot 2023-04-25 at 13.30.33.png||data-xwiki-image-style-border="true" queryparams="effects=drop-shadow" height="127" width="1100"]]
++(% id="H" class="p1" %)
++==== Target: http(s) URL ====
++
++{{warning}}
++This example is being deprecated, you can still add other external repositories in that way, but all internal harbor-hosted repositories should be added as Target: OCI Repository
++{{/warning}}
++
++(% class="p1" %)
++In the "Repository: Create" dialog, simply fill in the following fields. Authentication is not required.
++
++(% class="wrapped" %)
++|=(((
++Field
++)))|=(((
++Value
++)))
++|=(((
++Name
++)))|(((
++devops-as-a-service
++)))
++|=(((
++Description
++)))|(((
++Public Helm charts as documented at [[https:~~/~~/docs.devops.t-systems.net>>url:https://docs.devops.t-systems.net||shape="rect"]]
++)))
++|=(((
++Index URL
++)))|(((
++[[https:~~/~~/registry.sdc.t-systems.net/chartrepo/devopsaas/>>url:https://registry.sdc.t-systems.net/chartrepo/devopsaas/||shape="rect"]]
++)))
++
++[[image:attach:image-2024-2-27_14-29-17.png||data-xwiki-image-style-border="true" queryparams="effects=drop-shadow" width="540"]]
++
++(% class="p1" %)
++Finally, click Create.
++
++The repository is now listed:
++
++[[image:Screenshot 2024-07-03 at 15.13.55.png||data-xwiki-image-style-border="true" height="149" width="785"]]
++
++==== Target: OCI Repository ====
++
  To add public oci-repository, navigate to repository create button and click it. For target, use OCI Repository like shown below:
  [[image:1765207154466-828.png||height="298" width="821"]]
@@ -200,7 +200,7 @@
  )))|(((
  oci:~/~/registry.sdc.t-systems.net/devopsaas-helm/**<chartname>**, for example:
--oci:~/~/registry.sdc.t-systems.net/devopsaas-helm/jenkins-auto-agent
++oci:~/~/registry.sdc.t-systems.net/devopsaas-helm/jenkins-lib
  {{box}}
  Take into account, that all internal harbor repositories with helm charts have PKEY-helm naming convention, adding repo with both docker images and helm charts is not supported in rancher.
@@ -225,7 +225,7 @@
  To add project specific helm charts to Rancher, a Harbor robot account is needed, that is able to read helm charts and pull repositories. If you don't have such an account yet, please follow the instructions given in the [[Create Robot Account section of the Harbor documentation>>doc:Harbor.Harbor 2\.7 Robot Accounts.WebHome||anchor="create_robot_account"]] and make sure to grant at least the following permissions:
--* Read Artifact
++* Read Helm Chart
  * Pull Repository
  (% id="HCreateAppRepositoryinRancher-1" class="p1" %)
@@ -234,6 +234,7 @@
  (% class="p1" %)
  In Rancher UI, switch to the intended cluster and go to Apps/Repositories using the left side menu.
++
  [[image:attach:Screenshot 2023-04-25 at 13.11.48.png||data-xwiki-image-style-border="true" queryparams="effects=drop-shadow" height="400" width="209"]]
  (% class="p1" %)
@@ -243,8 +243,29 @@
  [[image:attach:Screenshot 2023-04-25 at 13.30.33.png||data-xwiki-image-style-border="true" queryparams="effects=drop-shadow" height="127" width="1100"]]
  (% id="HTarget:http28s29URL-1" class="p1" %)
--====   ====
++==== Target: http(s) URL ====
++{{warning title="Chartmuseum Deprecation"}}
++Chartmuseum in Harbor is deprecated, meaning we won't be able to add internal harbor repositories to Rancher that way anymore. Instead use Target: OCI repository.
++{{/warning}}
++
++(% class="p1" %)
++A name for the Repository has to be set. In the screenshot, the project name CITEST is used, which corresponds to our example from above.
++Choose http(s) URL to an index generated by Helm and provide the Index URL ##https:~/~/registry-<domain>.devops.t-systems.net/chartrepo/<project>/##
++
++(% class="p1" %)
++Replace ##<domain>## and ##<project>## as necessary to match your set-up.
++
++(% class="p1" %)
++For Authentication, select "Create a HTTP Basic Auth Secret" and provide the Username and Password of the Harbor robot account from the previous section.
++[[image:attach:Screenshot 2023-04-26 at 18.10.15.png||data-xwiki-image-style-border="true" queryparams="effects=drop-shadow" height="468" width="1100"]]
++
++(% class="p1" %)
++Click Create.
++
++(% id="HTarget:OCIRepository-1" class="p1" %)
++==== Target: OCI Repository ====
++
  {{info}}
  Now all internal helm charts are stored in harbor folders with -helm suffix. Adding the whole public project doesn't work natively anymore, so each separate chart should be added as a separate repo.//** If you have a real need to add the whole project, please contact support for finding a possible solution.**//
  {{/info}}
@@ -296,12 +296,12 @@
  (% class="box warningmessage" %)
  (((
--ChartMuseum is deprecated. **All harbor charts are removed from ChartMuseum**, and **old HTTP(S)-based chart repositories no longer work in Rancher (for internal harbor charts)**.
++ChartMuseum is being deprecated. After the migration is complete, **all harbor charts will be removed from ChartMuseum**, and **old HTTP(S)-based chart repositories will no longer work in Rancher (for internal harbor charts)**.
  )))
  (% class="box" %)
  (((
--**All your charts are available in the corresponding  `<pkey>-helm` OCI project.**
++**We will make your charts available in the corresponding new `<pkey>-helm` OCI projects. During migration, please adapt your helm push commands and url's for new oci-compatible repository.**
  )))
  There are two ways to migrate your repositories:
@@ -308,7 +308,7 @@
 . ##Direct Transition (Editing the Existing Repository)##
 *. Change the target to “OCI Repository”.
--1*. Update the URL as required (the repository name cannot be changed) and add a new robot account for helm project, check documentation above
++1*. Update the URL as required (the repository name cannot be changed).
 *. After saving, installed apps will automatically start using the updated repository.
 *. (% class="box" %)
  (((
@@ -321,10 +321,11 @@
 *. Keep the old ChartMuseum repo enabled during the migration,
 *. Migrate applications gradually following the steps described here.
 *. This avoids disruptions and allows controlled migration.
--
 . //Special Case: Old Repo Targeting Multiple Chart Repos//
  If your existing repository targets multiple chart repositories and you need the new OCI setup to behave the same way, please **contact support.**
++To ensure a smooth transition, we recommend to **add an OCI-based repository alongside the existing ChartMuseum repository** during the migration phase. If you don't w
++
  | Term | Meaning
  | **Old Repository** | The existing HTTP/HTTPS Harbor ChartMuseum repository.
  | **New Repository** | The new OCI-based Helm chart repository created for your project (e.g. `<chart-repo-name>` in `<pkey>-helm`).
@@ -331,7 +331,7 @@
  ##__**Why This Migration Is Required:**__##
--* ##ChartMuseum is deprecated.##
++* ##ChartMuseum is deprecated and will be removed.##
  * ##Applications deployed from old repos keep a reference to that repo inside their labels.##
  * ##Without updating the application to point to the new OCI repo, **Rancher will not detect new chart versions from new repository**.##
@@ -362,7 +362,8 @@
  If you still need the old repo for other apps, re-enable it after the migration steps above.
  **Note:** Even if a newer chart version exists in the old repository, your migrated app **will not see it**, because it is no longer connected to that repo
--##If you want to move an app back to the old repository:##
++##
++If you want to move an app back to the old repository:##
 . Temporarily disable the new OCI repo.
 . Enable the old ChartMuseum repo.
@@ -372,7 +372,8 @@
  This will reconnect the app to the old repository.
--= Automated deployments with Jenkins =
++=
++Automated deployments with Jenkins =
  In this section, we describe(% style="color:#172b4d" %) how to set-up **automated builds, tests and deployments** for Jenkins.