Chapter 6. Completing the migration

Procedure

1. Re-create necessary network policies in the new OpenShift Service Mesh 3 control plane namespace.
2. Re-create network policies for each namespace that was part of the OpenShift Service Mesh 2 mesh.

3. Update labels.

   1. Update corresponding network policy selectors to match the new labels.

      Note

      Use a label scoped specifically to your mesh that you can reuse for discovery selectors.

Procedure

1. Verify that your new injection label is present in all workload namespaces.

2. Update the app.controller.configmapNamespaceSelector field by running the following command:

   helm upgrade cert-manager-istio-csr jetstack/cert-manager-istio-csr \
      --install \
      --reuse-values \
      --namespace istio-system \
      --wait \
      --set "app.controller.configmapNamespaceSelector=tenant=tenant-a"

Procedure

1. Find all Service Mesh 2.6 resources by running the following command:

   $ oc get smcp,smm,smmr -A

2. Remove all ServiceMeshControlPlane resources by running the following command:

   $ oc delete smcp --all -A

3. Remove all ServiceMeshMemberRoll resources by running the following command:

   $ oc delete smmr --all -A

4. Remove all ServiceMeshMember resources by running the following command:

   $ oc delete smm --all -A

5. Verify that all resources were removed by running the following command:

   $ oc get smcp,smm,smmr -A

   Example output:

   No resources found

Procedure

1. Check that there are no Red Hat OpenShift Service Mesh 2.6 resources left by running the following command:

   $ oc get smcp,smm,smmr -A

   Example output:

   No resources found

2. Remove the Operator:

   1. Find the Operator subscription by running the following command:

      csv=$(oc get subscription servicemeshoperator -n openshift-operators -o yaml | grep currentCSV | cut -f 2 -d ':')

   2. Delete the subscription by running the following command:

      $ oc delete subscription servicemeshoperator -n openshift-operators

   3. Delete the clusterserviceversion CSV by running the following command:

      $ oc delete clusterserviceversion $csv -n openshift-operators

3. Remove maistra CRDs by running the following command:

   $ oc get crds -o name | grep ".*\.maistra\.io" | xargs -r -n 1 oc delete

Procedure

1. Verify that all OpenShift Service Mesh 2.6 resources have been removed by running the following command:

   $ oc get smcp,smm,smmr -A

   Example output:

   No resources found

2. Find namespaces with the maistra.io/ignore-namespace="true" label by running the following command:

   $ oc get namespace -l maistra.io/ignore-namespace="true"

   Example output:

   NAME       STATUS   AGE
   bookinfo   Active   127m

3. Remove the label by running the following command:

   $ oc label namespace bookinfo maistra.io/ignore-namespace-

   Example output:

   namespace/bookinfo unlabeled