このページは、まだ日本語ではご利用いただけません。翻訳中です。
旧バージョンのドキュメントを参照しています。 最新のドキュメントはこちらをご参照ください。
Upgrading Kong Ingress Controller
Upgrade Kong Ingress Controller
If you are upgrading to Kong Ingress Controller, read the upgrading to 3.0 section first
Prerequisites
-
Ensure that you installed Kong Ingress Controller 3.0, using Helm.
-
Fetch the latest version of the Kong Helm chart using
helm repo update
. -
Update your
values.yaml
file to use the latest version of Kong Ingress Controller. The values to set are different depending on if you’ve installed with thekong/ingress
chart or thekong/kong
chart. You can find which chart you’re using by runninghelm list -A -o yaml | grep chart
.
Update custom resource definitions
Helm’s CRD management does not support the same version-aware logic used elsewhere to provide older-version compatibility, so the chart cannot install the definitions for the configured controller version. If you use an older version of Kong Ingress Controller compatible with your Kubernetes version, you can install its definitions separately. For example, to install the 2.5.1 definitions and install with Helm’s CRD installer disabled:
kubectl kustomize https://github.com/Kong/kubernetes-ingress-controller/config/crd?ref=v2.5.1 | kubectl apply -f -
helm install myrelease kong/ingress --skip-crds
Note that even when you do use Helm to install CRDs, Helm does not update
CRDs when running helm upgrade
. You must separately install updated CRDs using
the above kubectl
command versions before running a helm upgrade
that
installs a newer controller release.
Upgrade
Run the following command, specifying the old release name, the namespace where
you’ve configured Kong Gateway, and the existing values.yaml
configuration file.
After the upgrade completes there is a brief period of time before the new resources are online. You can wait for the relevant Pod resources to complete by watching them in your release namespace:
$ kubectl -n ${YOUR_RELEASE_NAMESPACE} get pods -w
Once the new pods are in a Ready
state, the upgrade is complete.
Rollback
If you run into problems during or after the upgrade, Helm provides a rollback mechanism to revert to a previous revision of the release.
$ helm rollback --namespace ${YOUR_RELEASE_NAMESPACE} ${YOUR_RELEASE_NAME}
You can wait for the rollback to complete by watching the relevant Pod resources:
$ kubectl -n ${YOUR_RELEASE_NAMESPACE} get pods -w
After a rollback, if you run into issues in production, consider using a testing environment to identify and correct these issues, or reference the troubleshooting documentation.
Upgrade to Kong Ingress Controller 3.0
-
Switch to Helm as your deployment mechanism.
As of Kong Ingress Controller 3.0, Helm is the only officially supported install method.
-
Upgrade Kong to version 3.4.1 or later.
Kong Ingress Controller 3.0 requires Kong version 3.4.1 or later. You must upgrade your Kong instances to 3.4.1 before you upgrade to Kong Ingress Controller 3.0.
-
Update the Kong Ingress Controller CRDs.
Helm does not upgrade CRDs automatically. You must apply the 3.x CRDs before you upgrade your releases.
kubectl kustomize https://github.com/Kong/kubernetes-ingress-controller//config/crd/?v3.0.0 | kubectl apply -f -
-
Convert
KongIngress
route
andservice
fields to annotations.Route (Ingress) and service (Service) configuration fields previously available in KongIngress are now all handled via dedicated annotations and will not be respected if set in
KongIngress
.For example, if you set the
route.https_redirect_status_code
in aKongIngress
resource, you should now use thekonghq.com/https-redirect-status-code
annotation on an Ingress or HTTPRoute resource. -
Remove the
CombinedRoutes
andCombinedServices
feature gates if set.The
CombinedRoutes
andCombinedServices
feature gates have been enabled by default since versions 2.8.0 and 2.11.0, respectively. Version 3.x removes these feature gates and the combined generators are now the only option. You must remove these flags from theCONTROLLER_FEATURE_GATES
environment variable if they are present. -
Remove the
Knative
feature gate if set.As KNative is no longer supported, you need to use another controller for KNative Ingress resources if you use them.
-
Remove or rename outdated CLI arguments and
CONTROLLER_*
environment variables.Version 3.0 removes or renames several flags that were previously deprecated, were removed due to other changes, or were left over for compatibility after their functionality was removed.
The CLI argument versions of flags are listed below. You must also change the equivalent
CONTROLLER_
(for example,CONTROLLER_SYNC_RATE_LIMIT
for--sync-rate-limit
) environment variable if you use those.-
--sync-rate-limit
is now--proxy-sync-seconds
. -
--konnect-runtime-group-id
is now--konnect-control-plane-id
. -
--stderrthreshold
and--debug-log-reduce-redundancy
have been removed following changes to the logging system. -
--log-level
no longer accepts thewarn
,fatal
, andpanic
values due to consolidation of log levels. -
--update-status-on-shutdown
has been removed after its earlier functionality was removed. -
--kong-custom-entities-secret
has been removed after removal of its functionality in 2.0. -
--leader-elect
has been removed. The controller automatically configures its leader election mode based on other settings. -
--enable-controller-ingress-extensionsv1beta1
and--enable-controller-ingress-networkingv1beta1
have been removed following removal of support for older Ingress API versions.
-
Notable changes
The following changes are not considered breaking changes. However, they are notable changes from the previous version and are documented here for completeness.
Expression Router
Kong 3.0 introduced a new expression-based routing engine. This engine allows Kong Ingress Controller to set some match criteria and route matching precedence not possible under the original Kong routing engine. This functionality is necessary to implement some aspects of the Gateway API specification.
DB-less configurations in the Helm chart now use the expressions
router_flavor
kong.conf setting by default to take advantage of this functionality. DB-backed configurations use traditional_compatible
instead for backwards compatibility, as existing route configuration from older versions cannot yet be migrated in DB mode.
Use of the new routing engine should not change route matching outside of cases where route precedence did not match the Gateway API specification. The new engine does have different performance characteristics than the old engine, but should improve matching and configuration update speed for most configurations.
Logging changes
Kong Ingress Controller 3.0 uses a new logging engine to unify the logging implementation across all its subsystems. Earlier versions used different logging engines in different subsystems, which led to some logs using a different format than others and some logs appearing at incorrect log levels.
The new logging system consolidates log levels into debug
, info
, and
error
. Logs that were previously logged at the warn
level are now logged at
error
, as the conditions that triggered warn
level logs were infrequent and
should not occur under normal circumstances. fatal
and panic
levels were
available in configuration, but were not actually used.
The new logging system changes the default console
format. In earlier
versions, console logs used a key=value
format:
time="2023-09-21T23:07:26Z" level=info msg="the ingress class name has been set" logger=setup value=kong othervalue=pong
In 3.0, console
is a mixture of unlabeled tab-delimited fields (for standard
keys such as timestamp, log level, and log section) and JSON (for fields
specific to individual log entries:
2023-09-22T00:38:16.026Z info setup the ingress class name has been set {"value": "kong","othervalue":"pong"}
The json
format is unchanged except for the order of fields. Earlier versions
printed fields in alphabetical order:
{"level":"info","logger":"setup","msg":"the ingress class name has been set","time":"2023-09-21T23:15:15Z","value":"kong"}
3.0+ prints standard log fields first and entry-specific fields in the order they were added in code:
{"level":"info","time":"2023-09-22T00:28:13.006Z","logger":"setup","msg":"the ingress class name has been set","value":"kong"}
Although the default log setting is still console
, json
should be used for
production systems, or any other systems that need machine-parseable logs.