Changes for page Rancher 2
Last modified by Diana Strebkova on 2026/04/20 09:21
From version 28.1
edited by Diana Strebkova
on 2026/04/20 09:21
on 2026/04/20 09:21
Change comment:
There is no comment for this version
To version 24.2
edited by Diana Strebkova
on 2026/04/20 09:12
on 2026/04/20 09:12
Change comment:
There is no comment for this version
Summary
-
Page properties (1 modified, 0 added, 0 removed)
Details
- Page properties
-
- Content
-
... ... @@ -158,6 +158,10 @@ 158 158 159 159 == Add public helm chart == 160 160 161 +{{warning width="70" title="Chartmuseum Deprecation"}} 162 +Chartmuseum is deprecated in new Harbor versions, we are migrating all helm charts to oci-compatible repositories in Harbor with "PKEY-helm" naming convention. For internal harbor repos, use new approach to add OCI chart repositories in rancher. 163 +{{/warning}} 164 + 161 161 In this section, we describe (% style="color:#172b4d" %)how to add public helm charts like the one of DevOps-as-a-Service to a cluster to allow manual deployments. 162 162 163 163 (% id="HCreateAppRepositoryinRancher" class="p1" %) ... ... @@ -225,7 +225,7 @@ 225 225 226 226 To add project specific helm charts to Rancher, a Harbor robot account is needed, that is able to read helm charts and pull repositories. If you don't have such an account yet, please follow the instructions given in the [[Create Robot Account section of the Harbor documentation>>doc:Harbor.Harbor 2\.7 Robot Accounts.WebHome||anchor="create_robot_account"]] and make sure to grant at least the following permissions: 227 227 228 -* Read Artifact232 +* Read Helm Chart 229 229 * Pull Repository 230 230 231 231 (% id="HCreateAppRepositoryinRancher-1" class="p1" %) ... ... @@ -234,6 +234,7 @@ 234 234 (% class="p1" %) 235 235 In Rancher UI, switch to the intended cluster and go to Apps/Repositories using the left side menu. 236 236 241 + 237 237 [[image:attach:Screenshot 2023-04-25 at 13.11.48.png||data-xwiki-image-style-border="true" queryparams="effects=drop-shadow" height="400" width="209"]] 238 238 239 239 (% class="p1" %) ... ... @@ -243,7 +243,29 @@ 243 243 [[image:attach:Screenshot 2023-04-25 at 13.30.33.png||data-xwiki-image-style-border="true" queryparams="effects=drop-shadow" height="127" width="1100"]] 244 244 245 245 (% id="HTarget:http28s29URL-1" class="p1" %) 251 +==== Target: http(s) URL ==== 246 246 253 +{{warning title="Chartmuseum Deprecation"}} 254 +Chartmuseum in Harbor is deprecated, meaning we won't be able to add internal harbor repositories to Rancher that way anymore. Instead use Target: OCI repository. 255 +{{/warning}} 256 + 257 +(% class="p1" %) 258 +A name for the Repository has to be set. In the screenshot, the project name CITEST is used, which corresponds to our example from above. 259 +Choose http(s) URL to an index generated by Helm and provide the Index URL ##https:~/~/registry-<domain>.devops.t-systems.net/chartrepo/<project>/## 260 + 261 +(% class="p1" %) 262 +Replace ##<domain>## and ##<project>## as necessary to match your set-up. 263 + 264 +(% class="p1" %) 265 +For Authentication, select "Create a HTTP Basic Auth Secret" and provide the Username and Password of the Harbor robot account from the previous section. 266 +[[image:attach:Screenshot 2023-04-26 at 18.10.15.png||data-xwiki-image-style-border="true" queryparams="effects=drop-shadow" height="468" width="1100"]] 267 + 268 +(% class="p1" %) 269 +Click Create. 270 + 271 +(% id="HTarget:OCIRepository-1" class="p1" %) 272 +==== Target: OCI Repository ==== 273 + 247 247 {{info}} 248 248 Now all internal helm charts are stored in harbor folders with -helm suffix. Adding the whole public project doesn't work natively anymore, so each separate chart should be added as a separate repo.//** If you have a real need to add the whole project, please contact support for finding a possible solution.**// 249 249 {{/info}} ... ... @@ -295,12 +295,12 @@ 295 295 296 296 (% class="box warningmessage" %) 297 297 ((( 298 -ChartMuseum is deprecated. ** All harbor chartsare removed from ChartMuseum**, and **old HTTP(S)-based chart repositories no longer work in Rancher (for internal harbor charts)**.325 +ChartMuseum is being deprecated. After the migration is complete, **all harbor charts will be removed from ChartMuseum**, and **old HTTP(S)-based chart repositories will no longer work in Rancher (for internal harbor charts)**. 299 299 ))) 300 300 301 301 (% class="box" %) 302 302 ((( 303 -** All your charts are available in the corresponding`<pkey>-helm` OCI project.**330 +**We will make your charts available in the corresponding new `<pkey>-helm` OCI projects. During migration, please adapt your helm push commands and url's for new oci-compatible repository.** 304 304 ))) 305 305 306 306 There are two ways to migrate your repositories: ... ... @@ -307,7 +307,7 @@ 307 307 308 308 1. ##Direct Transition (Editing the Existing Repository)## 309 309 1*. Change the target to “OCI Repository”. 310 -1*. Update the URL as required (the repository name cannot be changed) and add a newrobotaccountfor helmproject,checkdocumentation above337 +1*. Update the URL as required (the repository name cannot be changed), check **Target: OCI Repository** documentation above 311 311 1*. After saving, installed apps will automatically start using the updated repository. 312 312 1*. (% class="box" %) 313 313 ((( ... ... @@ -324,6 +324,8 @@ 324 324 1. //Special Case: Old Repo Targeting Multiple Chart Repos// 325 325 If your existing repository targets multiple chart repositories and you need the new OCI setup to behave the same way, please **contact support.** 326 326 354 +To ensure a smooth transition, we recommend to **add an OCI-based repository alongside the existing ChartMuseum repository** during the migration phase. If you don't w 355 + 327 327 | Term | Meaning 328 328 | **Old Repository** | The existing HTTP/HTTPS Harbor ChartMuseum repository. 329 329 | **New Repository** | The new OCI-based Helm chart repository created for your project (e.g. `<chart-repo-name>` in `<pkey>-helm`). ... ... @@ -330,7 +330,7 @@ 330 330 331 331 ##__**Why This Migration Is Required:**__## 332 332 333 -* ##ChartMuseum is deprecated.## 362 +* ##ChartMuseum is deprecated and will be removed.## 334 334 * ##Applications deployed from old repos keep a reference to that repo inside their labels.## 335 335 * ##Without updating the application to point to the new OCI repo, **Rancher will not detect new chart versions from new repository**.## 336 336