Onyxia
v7
  • Documentation
  • Release Notes & Upgrade Instructions
  • Vulnerability Disclosure
v7
  • 🏁Install
  • 🎨Theme and branding
  • đŸ•šī¸User guide
  • đŸ”ŦCatalog of services
  • 🔓Security consideration
  • âŦ†ī¸Migration guides
    • âŦ†ī¸v6 -> v7
    • âŦ†ī¸v5 -> v6
    • âŦ†ī¸v4 -> v5
    • âŦ†ī¸Migrating to the new helm repo
  • 👨‍đŸ’ģTechnical doc
    • đŸ–Ĩī¸The Web Application
      • âš™ī¸Technical stack
      • 📐Architecture
    • 🔌The REST API
  • đŸ›Ŗī¸Roadmap
Powered by GitBook
On this page

Was this helpful?

  1. Migration guides

v5 -> v6

Was this helpful?

The only breaking change in this release is the split of Onyxia service account into two separate service accounts : one for the API (which usually requires high permission to deploy services) and one for the WEB pod (qui usually should not have any permissions tied to it). Due to this change, the global serviceAccount values key was duplicated in both web.serviceAccount and api.serviceAccount. See:

and

Example of change :

onyxia-values.yaml
onyxia:
-  serviceAccount:
-    create: true
-    clusterAdmin: true
   api:
+    serviceAccount:
+      create: true
+      clusterAdmin: true
   web:
+    serviceAccount:
+      create: true 
âŦ†ī¸
âŦ†ī¸
https://github.com/InseeFrLab/onyxia/blob/v6.0.1/helm-chart/values.yaml#L77
https://github.com/InseeFrLab/onyxia/blob/v6.0.1/helm-chart/values.yaml#L160