meissa/c4k-forgejo
6
0
Fork 0
Code Issues Pull requests Projects Releases 27 Packages Wiki Activity
c4k-forgejo/doc/Upgrading.md
patdyn b9d38bdeed [Skip-CI] Clarifications
2024-07-05 10:32:33 +02:00

6.6 KiB
Raw Blame History

Upgrading process

adhoc (on kubernetes cluster)

Ssh into your kubernetes cluster running the forgejo instance.

kubectl edit configmap forgejo-env
# make sure INSTALL_LOCK under security is set to true to disable the installation screen
# save and exit
kubectl edit deployments forgejo
# search for your current forgejo version, e.g. 1.19
# replace with new version
# save and exit
kubectl scale deployment forgejo --replicas=0
kubectl scale deployment forgejo --replicas=1

Logging into the admin account should now show the new version.

You may want to update your c4k-forgejo resources to reflect the changes made on the cluster.

Upgrading from 1.19

Config related issues with c4k-forgejo v3.2.2

  • oauth2: ENABLED instead of ENABLE
    • FORGEJO__oauth2__ENABLED: "true"
  • 2024/07/02 13:16:17 ...g/config_provider.go:329:deprecatedSetting() [E] Deprecated config option [log] ROUTER present. Use [log] logger.router.MODE i nstead. This fallback will be/has been removed in 1.21
    • FORGEJO__log_0x2E_logger_0x2E_router__MODE: console, file
  • 2024/07/02 13:16:17 ...g/config_provider.go:329:deprecatedSetting() [E] Deprecated config option [service] EMAIL_DOMAIN_WHITELIST present. Use [service] EMAIL_DOMAIN_ALLOWLIST instead. This fallback will be/has been removed in 1.21
    • FORGEJO__service__EMAIL_DOMAIN_ALLOWLIST:
  • 2024/07/02 13:16:17 ...g/config_provider.go:329:deprecatedSetting() [E] Deprecated config option [mailer] MAILER_TYPE present. Use [mailer] PROTOCOL instead. This fallback will be/has been removed in v1.19.0
    • ...es/setting/mailer.go:133:loadMailerFrom() [E] Deprecated fallback [mailer] PROTOCOL = smtp+startls present. Use [mailer] `PROTOCOL = smtp+starttls`` instead. This fallback will be removed in v1.19.0
      • FORGEJO__mailer__PROTOCOL: smtp+starttls
      • starttls instead of startls

Breaking Changes

1.19.3:Aktueller Stand

1.20.1-0: Breaking https://codeberg.org/forgejo/forgejo/src/branch/forgejo/RELEASE-NOTES.md#1-20-1-0

app.ini
  • check [queue] section - n/e
  • check [repository.editor] - n/e
  • check [storage] - n/e
  • check ssh_keygen_path in app.ini - n/e
  • is WORK_PATH set? Or app.ini writeable by forgejo server user?
      1. no
      1. probably
      • If not, it shows in the logs starting with: Unable to update WORK_PATH
      • Also ssh pushing will likely fail - test ssh
      • no errors on test instance
  • set logger.router.mode as described in environment-to-ini
  • check [git.reflog] and maybe move to [git.config] - n/e
  • check [indexer], [mailer], [repository] - n/e
tokens
  • scoped and personal access tokens were refactored
    • scope may change, if we have tokens they should be rotated

1.21.1-0: https://codeberg.org/forgejo/forgejo/src/branch/forgejo/RELEASE-NOTES.md#1-21-1-0

custom themes
  • move to custom/public/assets/
git branches
  • /admin page and click run Sync missed branches from git data to databases.
db - mysql
  • we use postgres
ssh server
  • host cert used for auth?
ssh keys
  • all team members need to check their key length, now 3072
tokens
  • finer restrictions might now return 404 errors on users in certain teams with certain restrictions

7.0.0: https://codeberg.org/forgejo/forgejo/src/branch/forgejo/RELEASE-NOTES.md#7-0-0

webhooks
  • do we use webhooks?
db
  • psql min ver is 12 - should be fine right?
api
repos
app.ini
  • check [ui] - n/e

Vor dem Upgrade

Upgrade plan

TEST kennzeichnet Aktionen die nur für den Testserver gelten und in PROD ignoriert werden. PROD kennzeichnet Aktionen die nur für den Testserver gelten und in TEST ignoriert werden. Generelle Übersicht zu Upgrades: https://forgejo.org/docs/latest/admin/upgrade/

  • Forgejo Server aufsetzen mit c4k-forgejo v3.2.2
    • Enthält Forgejo v1.19
  • TEST
    • Alte remote id löschen
      • ssh-keygen -f "/home/${USER}/.ssh/known_hosts" -R "repo.test.meissa.de"
  • Auf server ssh'en
  • Forgejo pod runterfahren
    • k scale deployment forgejo --replicas=0
  • Install lock aus
    • k edit cm forgejo-env
    • Set to FORGEJO__security__INSTALL_LOCK: "false"
  • Forgejo pod hochfahren
    • k scale deployment forgejo --replicas=1
  • Admin test oder prod admin anlegen und forgejo installieren
    • gopass show server/meissa/forgejo-test bzw -prod
  • Forgejo pod runterfahren
  • Install lock an
    • Set to FORGEJO__security__INSTALL_LOCK: "true"
  • TEST
    • Forgejo pod hochfahren
    • Einloggen
    • Ssh keys anlegen
      • ed_xyz
      • rsa mit 2048
      • rsa mit 4096
    • Repos anlegen
    • Forgejo pod runterfahren
  • PROD
    • Backup pod hochfahren
      • k scale deployment backup-restore --replicas=1
    • Backups zurückspielen
    • Im backup pod vorhandene app.ini's löschen bzw umbenennen
    • Backup pod runterfahren
      • k scale deployment backup-restore --replicas=0
  • Im Forgejo Deployment die Image Ver auf 7.0.4 setzen
    • k edit deployment.apps forgejo
  • Configmap updaten:
    • Double check ob install lock an
    • FORGEJO__oauth2__ENABLED: "true"
    • FORGEJO__log_0x2E_logger_0x2E_router__MODE: console, file
    • FORGEJO__service__EMAIL_DOMAIN_ALLOWLIST:
    • FORGEJO__mailer__PROTOCOL: smtp+starttls
  • TEST
    • Backup pod hochfahren
    • Im backup pod vorhandene app.ini's löschen bzw umbenennen
    • Backup pod runterfahren
      • k scale deployment backup-restore --replicas=0
  • Forgejo pod hochscalen
  • Migrations happen automatically
  • /admin page and click run Sync missed branches from git data to databases
    • and *Sync missed tags ...
  • Rsa keys with size 2048 can not be added anymore. However, it seems they still can be used if they are on the server
  • Team members having app tokens need to recreate them with proper scopes
  • Add analytics: https://forgejo.org/docs/latest/admin/customization/