Upgrade testing - Release 3.5

[shaun-nx]

UAC:

• Perform upgrade testing for release 3.5

Stretch-goals:

• Automate Prerequisites list
• Example/test applications to deploy

Test images in GCR:

3.4

• WAF+DOS: gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-dos-nap/nginx-plus-ingress:release-3.4
• NGINX Plus: gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic/nginx-plus-ingress:release-3.4
• NGINX OSS: gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic/nginx-ingress:release-3.4

3.5

• WAF+DOS: gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-dos-nap/nginx-plus-ingress:release-3.5
• NGINX Plus: gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic/nginx-plus-ingress:release-3.5
• NGINX OSS: gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic/nginx-ingress:release-3.5

Prerequisites

Preview Give feedback

1. A GKE/AKS/EKS cluster
2. Checkout current release branch and installation NIC from that release (Helm is preferred)
3. An Ingress resource example with application
4. A VS resource example with application
5. A VS-VSR-Policy resource example with application
6. A simple TS resource example with application
7. A tls-passthrough TS resource example with application
8. AppProtect WAF and DoS examples and apps depending on features added/removed in coming release

AppProtect WAF+DOS upgrade

Preview Give feedback

1. Install CRDs from release-3.4 branch
2. Helm install of release-3.4
3. Confirm applications operate on release-3.4 branch
4. Install CRDs from release-3.5 branch
5. Helm upgrade on release-3.5 branch
6. Confirm applications operate on release-3.5 branch
7. Validate Add support for apLogBundle in WAF policy #5259
8. Validate Configure NAP Security Monitoring output to Agent #5145
9. Validate Increase keepalive-requests from 100 to 1000, the nginx default #5050
10. Validate Increase zone size for transportserver from 256k to 512k #5191
11. Validate Epic - Adoption Telemetry #4877
12. Validate Weight changes for two way splits should not trigger a reload #4509
13. Validate Allow securityContext and podSecurityContext to be configurable via helm parameters #4942 (Do an upgrade from 3.4 to 3.5 with RFS enabled)
14. Validate Support rate-limiting for ingress-resources #4603
15. Validate Extend use-cluster-ip to Ingress Resource #4665
16. Validate Ensure backup server is removed from upstreams when the Backup Service is deleted #5053

NGINX Plus Upgrade

Preview Give feedback

1. Install CRDs from release-3.4 branch
2. Helm install of release-3.4
3. Confirm applications operate on release-3.4 branch
4. Install CRDs from release-3.5 branch
5. Helm upgrade on release-3.5 branch
6. Confirm applications operate on release-3.5 branch
7. Validate Increase keepalive-requests from 100 to 1000, the nginx default #5050
8. Validate Increase zone size for transportserver from 256k to 512k #5191
9. Validate Epic - Adoption Telemetry #4877
10. Validate Allow securityContext and podSecurityContext to be configurable via helm parameters #4942 (Do an upgrade from 3.4 to 3.5 with RFS enabled)
11. Validate Weight changes for two way splits should not trigger a reload #4509
12. Validate Support rate-limiting for ingress-resources #4603
13. Validate Extend use-cluster-ip to Ingress Resource #4665
14. Validate Ensure backup server is removed from upstreams when the Backup Service is deleted #5053

NGINX OSS Upgrade

Preview Give feedback

1. Install CRDs from release-3.4 branch
2. Helm install of release-3.4
3. Confirm applications operate on release-3.4 branch
4. Install CRDs from release-3.5 branch
5. Helm upgrade on release-3.5 branch
6. Confirm applications operate on release-3.5 branch
7. Validate Increase keepalive-requests from 100 to 1000, the nginx default #5050
8. Validate Increase zone size for transportserver from 256k to 512k #5191
9. Validate Support rate-limiting for ingress-resources #4603
10. Validate Weight changes for two way splits should not trigger a reload #4509 (should not work for OSS)
11. Validate Extend use-cluster-ip to Ingress Resource #4665
12. Validate Epic - Adoption Telemetry #4877
13. Validate Allow securityContext and podSecurityContext to be configurable via helm parameters #4942 (Do an upgrade from 3.4 to 3.5 with RFS enabled)

[github-actions]

Hi @shaun-nx thanks for reporting!

Be sure to check out the docs and the Contributing Guidelines while you wait for a human to take a look at this 🙂

Cheers!