3.2 to 3.3.1 Upgrade Required Helm Value & Posgresql Changes
Â
In order to upgrade from ThreadFix 3.2 to 3.3.1 users must be aware of required Helm Value & Posgresql Changes detailed below.
Prior to beginning any upgrades or migration, ThreadFix strongly recommends users review the Upgrade & Migration Guidelines.
Helm Value Changes
In ThreadFix 3.3, Kong PostgreSQL Subcharts now have the following structure changes:
Prior to ThreadFix 3.3:
echo "kong:
postgresql:
postgresqlPassword: $PG_PASSWORD
global:
threadfix:
licenseCMOverride: tf-license" > myValues/myValues.yaml
As of ThreadFix 3.3:
echo "kong:
postgresql:
auth:
password: $PG_PASSWORD
global:
threadfix:
licenseCMOverride: tf-license" > myValues/myValues.yaml
Â
Posgresql Updates
The following requires first adjusting the Kong PostgreSQL Subcharts above, and ThreadFix version 3.2.
Set environment variables like below:
export TF_RELEASE=$(helm ls | grep threadfix | awk '{ print $1}') export POSTGRESQL_PASSWORD=$(kubectl get secret ${TF_RELEASE}-postgresql -o jsonpath="{.data.postgresql-password}" | base64 --decode) export PG_ADMIN_PASSWORD=$(openssl rand -base64 32)
Â
Export current helm values:
Â
Add the helm repo and update:
Â
Delete postgresql:
Upgrade withÂ
--no-hooks
 set:Â
Manually run kong migrations:
Â
To confirm the upgrade was successful, echo the following TF_VERSION variable:
Â
Â
www.threadfix.it | www.coalfire.com
Copyright © 2024 Coalfire. All rights reserved.
This Information Security Policy is CoalFire - Public: Distribution of this material is not limited.