Upgrading from 1.3.x to the 2025.12 Innovation Release Innovation Release

Upgrade from 1.3.x to 2025.11.

Role: Infrastructure Engineer

Prerequisites

• Administrative access to the Kubernetes cluster (kubectl, helm).

• Access to the HM installation configuration file or values.yaml file used for the current installation. To save the contents of your current installation configuration:

  → WrapCopy

  helm get values edbpgai-bootstrap -n edbpgai-bootstrap > values.yaml

• Required Tools:

  • helm (Latest version recommended)
  • cmctl (Cert-Manager CLI) - Required for 2025.11+

Upgrade 1.3.x → 2025.11

This release increases the Certificate Authority (CA) TTL to 10 years and refactors the Istio implementation on OpenShift.

Certificate renewal (required)

The internal self-signed CA has been updated. You must regenerate certificates to apply the new 10-year TTL.

1. Install cmctl (for example, brew install cmctl).

2. Regenerate certificates:

   → WrapCopy

   # Global CA
   cmctl renew -n cert-manager global-ca-cert
    
   # Leaf Certificates
   cmctl renew -n upm-beacon beacon-int-ca
   cmctl renew -n istio-system beaco-istio-gw-cert

OpenShift specifics: Istio Migration

HM is no longer using the OLM-managed Maistra Service Mesh with RHOS. You must manually clean up the old resources before the upgrade.

1. Scale down the operator:

   → WrapCopy

   kubectl scale deployment --replicas 0 edb-hcp-operator-controller-manager -n edbpgai-bootstrap

2. Remove old Maistra resources:

   → WrapCopy

   kubectl delete servicemeshmemberrolls.maistra.io -n istio-system default
   kubectl delete servicemeshcontrolplanes.maistra.io -n istio-system upm

3. Bulk delete members:

   → WrapCopy

   kubectl get servicemeshmember -A -ojsonpath='{range .items[*]}{"kubectl delete servicemeshmember "}{@.metadata.name}{" -n "}{@.metadata.namespace}{"\n"} {end}' | while read -r line; do eval $line; done

Perform the upgrade

1. Update the repo:

   → WrapCopy

   helm repo update

2. Perform the upgrade:

   → WrapCopy

   helm upgrade --install edbpgai-bootstrap enterprisedb-edbpgai/edbpgai-bootstrap \
     --version 2025.11.0 \
     --values values.yaml \
     --namespace edbpgai-bootstrap \
     --wait