WiP: research for legacy-to-operator migrations#20120
Draft
WiP: research for legacy-to-operator migrations#20120
Conversation
…script Ran --help for all four modes (openshift/k8s x pvc/hostpath), diffed them pairwise, and created a master options list. Key findings: - PVC modes have --db-name, --db-size, --db-storage-class - Hostpath modes have --db-hostpath, --db-node-selector-key/value - OpenShift modes add --openshift-monitoring and --openshift-version - --lb-type includes "route" only in OpenShift modes Added strip-randomness.sh which replaces all content that changes between runs (PEM cert/key blocks, bcrypt hashes, generated secret name suffixes, DB passwords, plaintext password file) and deletes the helm/ subdirectory. Verified byte-for-byte identical output across two runs for all four modes. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Ran each of the four commands with default options and captured the output directory tree. Randomized values (certs, keys, passwords) have been stripped using strip-randomness.sh, and the helm/ subdirectory has been removed since we only care about kubectl output. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
…direct-grpc, client-only Tested 14 options across all applicable modes. Key findings: - PVC options (db-name/size/storage-class) affect only the central-db PVC - Hostpath options (db-hostpath, db-node-selector) affect only central-db Deployment - OpenShift monitoring=false removes ServiceMonitors, RBAC, port 9091, TLS volumes - OpenShift version=3 additionally removes OCP4 CA injection, SCCs, OAuth - PSP adds 4 PodSecurityPolicy files - Telemetry=false replaces telemetry env vars with DISABLED marker - Offline sets ROX_OFFLINE_MODE=true in central Deployment - direct-grpc has NO manifest impact (client-side only) - Client-only options (endpoint, force-http1, no-color, server-name) verified no impact - password only changes value, not structure - disable-admin-password adds adminPassword block to generated-values secret Also updated strip-randomness.sh to handle adminPassword: key pattern. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
…e-config, TLS Tested 15 remaining options across all applicable modes. Key findings: - All 6 image flags + image-defaults change container image references - --main-image has wide blast radius (also changes scanner-v4 registry, setup scripts) - --scanner-v4-image and --scanner-v4-db-image silently discard the provided registry - --lb-type adds central/01-central-15-exposure.yaml (Service or Route) - --plaintext-endpoints adds ROX_PLAINTEXT_ENDPOINTS env var to 7 containers - --istio-support appends DestinationRules to 5 service files - --declarative-config-config-maps/secrets add volume+mount to central Deployment - --default-tls-cert/key adds central-default-tls-cert Secret - --ca has NO manifest impact (client-side TLS trust, silently ignored) Updated strip-randomness.sh to handle adminPassword: key pattern. Master list now complete — all options documented with kubectl commands. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
|
Skipping CI for Draft Pull Request. |
Contributor
🚀 Build Images ReadyImages are ready for commit d42f492. To use with deploy scripts: export MAIN_IMAGE_TAG=4.11.x-703-gd42f492dac |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Description
change me!
User-facing documentation
Testing and quality
Automated testing
How I validated my change
change me!