| description | Install an older patch release of Calico Enterprise from the manifest archive when an upgrade to the latest is not yet possible. |
|---|
import Tabs from '@theme/Tabs'; import TabItem from '@theme/TabItem'; import ReleaseArchiveTable from "../_includes/components/ReleaseArchiveTable";
Installing the most recent patch version of
This feature is:
- Available in 3.0 and later
- Not available for Helm with operator
-
Download the release archive for your patch version from the following table:
-
Untar the release-vx.y.z-vx.y.z.tgz to a local directory.
tar xzvf release-vx.y.z-vx.y.z.tgz
In the patch release archive, navigate to the manifests folder.
-
Follow the quickstart installation, making the following changes:
-
Install Tigera Operator and custom resource definitions.
kubectl create -f <your-local-directory-archive>/manifests/operator-crds.yaml kubectl create -f <your-local-directory-archive>/manifests/tigera-operator.yaml
-
If you are not using an existing Prometheus operator, install it.
kubectl create -f <your-local-directory-archive>/manifests/tigera-prometheus-operator.yaml
-
Install Tigera custom resources.
kubectl create -f <your-local-directory-archive>/manifests/custom-resources.yaml
:::note
For platforms like AKS or EKS, you must modify the command to be platform specific. EKS example:
kubectl create -f <your-local-directory-archive>/manifests/eks/custom-resources.yaml:::
-
In the patch release archive, navigate to the ocp-manifests folder which contains three folders install-manifests,
enterprise-resources, and upgrade-manifests.
-
install-manifestscontains all the manifests needed for minimal OCP cluster. -
enterprise-resourcescontains the $[prodname] resources. -
upgrade-manifestsfolder contains all the manifests needed for upgrading $[prodname].
-
Create the cluster by following the standard installation, with the following caveat:
-
After the Kubernetes manifests directory is generated, copy the files from
install-manifestsinstead of downloading the manifests.:::note
Before creating the cluster, be sure to add an image pull secret in
install-manifests/02-pull-secret.yaml:::
-
-
Install $[prodname] resources:
cd <your-local-directory-archive>/ocp-manifests/enterprise-resources && oc create -f
In the patch release archive, there are additional manifests relating to specific features.
Examples
To apply the patch release for threat defense features.
cd <your-local-directory-archive>/manifests/threatdef && kubectl create -f ejr-vpn.yaml.yaml
cd <your-local-directory-archive>/manifests/threatdef && kubectl create -f tor-exit-feed.yaml