Upgrade and Uninstall Helm Chart Deployments
Deployments of Illumio Core for Kubernetes 3.0.0 or later are performed with Helm Charts. Upgrades and uninstallations are also performed with Helm commands.
Upgrade Helm Chart Deployments
To upgrade an existing installation to a newer version after it had been initially deployed with a Helm Chart, follow standard Helm practice with the helm upgrade command.
For example, if you install the Helm Chart for Core for Kubernetes 4.2.0 initially with this command:
helm install illumio -f values.yaml oci://quay.io/illumio/illumio --version 4.2.0 --namespace illumio-system
Then use the following command to upgrade to version 4.3.0:
helm upgrade illumio -f values.yaml oci://quay.io/illumio/illumio --version 4.3.0
Use the same values.yaml file for the upgrade that was used for the original install command.
Important
Be sure to explicitly specify the version to upgrade to with the --version <ver#> option (for example, --version 4.3.0), after confirming that the product version you want to install is supported with your PCE version. Verify which PCE versions support the Illumio Core for Kubernetes version you want to deploy at the Kubernetes Operator OS Support and Dependencies page on the Illumio Support Portal.
Uninstall Helm Chart Deployments
To completely uninstall an existing installation that had been initially deployed with a Helm Chart:
$ helm uninstall illumio --namespace illumio-system $ kubectl delete namespace illumio-system
The uninstallation process also unpairs the C-VENs from the PCE.
Uninstalling the Helm Chart takes around two minutes to complete.
Unpair C-VENs from PCE before Helm Chart uninstallation for large clusters
For large clusters, it is recommended to initiate a c-ven unpair prior to a helm uninstall.
clusterMode unpair C-VENs from PCE before Helm Chart uninstallation
For Helm Chart version 5.4.0 and higher, you can change the cluster mode to unpair with clusterMode:unpair within the values.yaml file and preform helm upgrade or ArgoCD sync or the equivalent.
Updating daemonset to unpair C-VENs from PCE before Helm Chart uninstallation
For large clusters that would take longer than two minutes to uninstall Helm Chart, you can use a command like the following to first unpair with kubectl.
Caution
If you run this command, verify your command uses straight single ' and double " quotes, not curly quotes: “ , ” , ‘, ’ . Copying and pasting into some text editors or word processing programs automatically converts straight quotes to curly quotes.
kubectl patch daemonset illumio-ven -n illumio-system --type=json -p='[{"op":"replace","path":"/spec/template/spec/containers/0/command","value":["/ven-init","unpair"]}]'Once the command completes, run the helm uninstall and kubectl delete commands.