$ oc login
Upgrading Open Data Hub
Overview of upgrading Open Data Hub
As a cluster administrator, you can configure either automatic or manual upgrades for the Open Data Hub Operator.
-
If you configure automatic upgrades, when a new version of the Open Data Hub Operator is available, Operator Lifecycle Manager (OLM) automatically upgrades the running instance of your Operator without human intervention.
-
If you configure manual upgrades, when a new version of the Open Data Hub Operator is available, OLM creates an update request.
A cluster administrator must manually approve the update request to update the Operator to the new version. See Manually approving a pending Operator upgrade for more information about approving a pending Operator upgrade.
-
By default, the Open Data Hub Operator follows a sequential update process. This means that if there are several minor versions between the current version and the version that you plan to upgrade to, Operator Lifecycle Manager (OLM) upgrades the Operator to each of the minor versions before it upgrades it to the final, target version. If you configure automatic upgrades, OLM automatically upgrades the Operator to the latest available version, without human intervention. If you configure manual upgrades, a cluster administrator must manually approve each sequential update between the current version and the final, target version.
-
When you upgrade Open Data Hub, the upgrade process automatically uses the values of the previous version’s
DataScienceCluster
object. After the upgrade, you should inspect the defaultDataScienceCluster
object to check and optionally update themanagementState
status of the components. -
For any components that you update, Open Data Hub initiates a rollout that affects all pods to use the updated image.
-
Notebook images are integrated into the image stream during the upgrade and subsequently appear in the Open Data Hub dashboard.
NoteNotebook images are constructed externally; they are prebuilt images that undergo quarterly changes and they do not change with every Open Data Hub upgrade.
Requirements for upgrading Open Data Hub
This section describes the tasks that you should complete when upgrading Open Data Hub.
Check the components in the DataScienceCluster
object
When you upgrade to version 2, the upgrade process automatically uses the values from the DataScienceCluster
object in the previous version.
After the upgrade, you should inspect the 2 DataScienceCluster
object and optionally update the status of any components as described in Installing Open Data Hub components.
Recreate existing pipeline runs
When you upgrade to version 2, any existing pipeline runs that you created in version 1 continue to refer to the previous version’s image (as expected).
You must delete the pipeline runs (not the pipelines) and create new pipeline runs. The pipeline runs that you create in version 2 correctly refer to the version 2 image.
For more information about pipeline runs, see Managing pipeline runs.
Address KServe requirements
For KServe (single-model serving platform), you must meet these requirements:
-
Install dependent Operators, including the Red Hat OpenShift Serverless and Red Hat OpenShift Service Mesh Operators.
-
After the upgrade, you must inspect the default
DataScienceCluster
object and verify that the value of themanagementState
field for thekserve
component isManaged
. -
In Open Data Hub version 1, the KServe component is a Limited Availability feature. If you enabled the
kserve
component and created models in version 1, then after you upgrade to version 2, you must update some Open Data Hub resources as follows:-
Log in as an admin user to the OpenShift Container Platform cluster where Open Data Hub 2 is installed:
-
Update the DSC Initialization resource:
$ oc patch $(oc get dsci -A -oname) --type='json' -p='[{"op": "replace", "path": "/spec/serviceMesh/managementState", "value":"Unmanaged"}]'
-
Update the Data Science Cluster resource:
$ oc patch $(oc get dsc -A -oname) --type='json' -p='[{"op": "replace", "path": "/spec/components/kserve/serving/managementState", "value":"Unmanaged"}]'
-
Update the
InferenceServices
CRD:$ oc patch crd inferenceservices.serving.kserve.io --type=json -p='[{"op": "remove", "path": "/spec/conversion"}]'
-
Optionally, restart the Operator pod.
-
-
If you deployed a model by using KServe in Open Data Hub version 1, when you upgrade to version 2 the model does not automatically appear in the Open Data Hub dashboard. To update the dashboard view, redeploy the model by using the Open Data Hub dashboard.
Upgrading Open Data Hub version 1 to version 2
You can upgrade the Open Data Hub Operator from version 1 to version 2 by using the OpenShift console. For information about installing the Open Hub Operator, see Installing Open Data Hub.
Upgrading Open Data Hub involves the following tasks:
-
Upgrading the Open Data Hub Operator version 1.
-
Installing Open Data Hub components.
-
Accessing the Open Data Hub dashboard.
Upgrading the Open Data Hub Operator version 1
-
You have installed version 1 of the Open Data Hub Operator.
-
You are using OpenShift Container Platform 4.12 or later.
-
Your OpenShift cluster has a minimum of 16 CPUs and 32GB of memory across all OpenShift worker nodes.
-
You can log in as a user with
cluster-admin
privileges.
-
Log in to the OpenShift Container Platform web console as a user with
cluster-admin
privileges. -
Select Operators → Installed Operators, and then click the 1.x version of the Open Data Hub Operator.
-
Click the Subscription tab.
-
Under Update channel, click the pencil icon.
-
In the Change Subscription update channel dialog, select
fast
, and then click Save.If you configured the Open Data Hub Operator with automatic update approval, the upgrade begins. If you configured the Operator with manual update approval, perform the actions in the next step.
-
To approve a manual update, perform these actions:
-
Next to Upgrade status, click 1 requires approval.
-
Click Preview InstallPlan.
-
Review the manual install plan, and then click Approve.
-
-
Select Operators → Installed Operators to verify that the Open Data Hub Operator is listed with the 2.x version number and Succeeded status.
-
Install Open Data Hub components.
-
Access the Open Data Hub dashboard.
Installing Open Data Hub components
You can use the OpenShift web console to install specific components of Open Data Hub on your cluster when version 2 of the Open Data Hub Operator is already installed on the cluster.
-
You have installed version 2 of the Open Data Hub Operator.
-
You can log in as a user with
cluster-admin
privileges. -
If you want to use the
trustyai
component, you must enable user workload monitoring as described in Enabling monitoring for user-defined projects. -
If you want to use the
kserve
,datasciencepipeline
,distributedworkloads
, ormodelmesh
components, you must have already installed the following Operator or Operators for the component. For information about installing an Operator, see Adding Operators to a cluster.
Component | Required Operators | Catalog |
---|---|---|
ksersve |
Red Hat OpenShift Serverless Operator, Red Hat OpenShift Service Mesh Operator |
Red Hat |
datasciencepipeline |
Red Hat OpenShift Pipelines Operator |
Red Hat |
distributedworkloads |
CodeFlare Operator |
Community |
modelmesh |
Prometheus Operator |
Community |
-
Log in to your OpenShift Container Platform as a user with
cluster-admin
privileges. If you are performing a developer installation on try.openshift.com, you can log in as thekubeadmin
user. -
Select Operators → Installed Operators, and then click the Open Data Hub Operator.
-
On the Operator details page, click the Data Science Cluster tab, and then click Create DataScienceCluster.
-
On the Create DataScienceCluster page, configure the DataScienceCluster by using Form view or YAML view. For general information about the supported components, see Tiered Components.
-
Configure by using Form view:
-
In the Name field, enter a value.
-
In the Components section, expand each component and set the managementState to Managed or Removed.
-
-
Configure by using YAML view:
-
In the
spec.components
section, for each component shown, set the value of themanagementState
field to eitherManaged
orRemoved
.
-
-
-
Click Create.
-
Select Home → Projects, and then select the opendatahub project.
-
On the Project details page, click the Workloads tab and confirm that the Open Data Hub core components are running. For more information, see Tiered Components.
-
Access the Open Data Hub dashboard.
Accessing the Open Data Hub dashboard
You can access and share the URL for your Open Data Hub dashboard with other users to let them log in and work on their models.
-
You have installed the Open Data Hub Operator.
-
In the OpenShift web console, select Networking → Routes.
-
On the Routes page, click the Project list and select the
odh
project. The page filters to only display routes in theodh
project. -
In the Location column, copy the URL for the odh-dashboard route.
-
Give this URL to your users to let them log in to Open Data Hub dashboard.
-
Confirm that you and your users can log in to the Open Data Hub dashboard by using the URL.
Upgrading Open Data Hub version 2.0 to version 2.2
You can upgrade the Open Data Hub Operator from version 2.0 or 2.1 to version 2.2 or later by using the OpenShift console. For information about upgrading from version 1 to version 2.2 or later, see Upgrading Open Data Hub version 1 to version 2. For information about installing the Open Hub Operator, see Installing Open Data Hub Operator version 2.
Note that Open Data Hub Operator versions 2.2 and later use an upgraded API version for a DataScienceCluster instance, resulting in the following differences.
ODH 2.1 and earlier | ODH 2.2 and later | |
---|---|---|
API version |
|
|
Enable component |
|
|
Disable component |
|
|
Upgrading Open Data Hub involves the following tasks:
-
Cleaning up resources from the previous version of Open Data Hub.
-
Installing version 2.2 or later of Open Data Hub.
-
If using self-signed certificates, adding a CA bundle.
Cleaning up resources
Open Data Hub Operator versions 2.0 and 2.1 created some custom resource instances on your OpenShift Container Platform cluster for various components of Open Data Hub. Before upgrading to versions 2.2 or later, you must manually clean up these resources in your cluster.
-
You have installed version 2.0 or 2.1 of the Open Data Hub Operator and you want to upgrade to version 2.2 or later.
-
You have cluster administrator privileges for your OpenShift Container Platform cluster.
-
Log in to the OpenShift Container Platform web console as a cluster administrator.
-
Follow these steps to disable the components in your DataScienceCluster instance:
-
In the web console, click Operators → Installed Operators and then click the Open Data Hub Operator.
-
Click the Data Science Cluster tab.
-
On the DataScienceClusters page, click the
default
object. -
Click the YAML tab.
An embedded YAML editor opens showing the custom resource (CR) file for the
DataScienceCluster
object. -
In the
spec.components
section of the CR, for each Open Data Hub component shown, set the value of theenabled
field tofalse
. -
Click Save.
-
-
Follow these steps to delete the DataScienceCluster instance and DSCInitialization instance:
-
Click Operators → Installed Operators and then click the Open Data Hub Operator.
-
Click the All instances tab.
-
Click the Options menu for
DataScienceCluster
and select Delete Data Science Cluster. -
Click Delete to confirm.
-
Click the Options menu for
DSCInitialization
and select Delete Data Science Cluster. -
Click Delete to confirm.
-
-
Follow these steps to uninstall the Open Data Hub Operator:
-
On the Open Data Hub Operator page, click Actions and then select Uninstall Operator.
-
Click Uninstall to confirm.
-
-
Follow these steps to delete the CustomResourceDefinitions:
-
Click Administration → CustomResourceDefinitions.
-
Search for
DataScienceCluster
. -
In the Latest version column, if it shows
v1alpha1
, click the Options menu and select Delete CustomResourceDefinition. -
Click Delete to confirm.
-
Search for
DSCInitialization
. -
In the Latest version column, if it shows
v1alpha1
, click the Options menu and select Delete CustomResourceDefinition. -
Click Delete to confirm.
-
-
Install the Open Data Hub Operator version 2.
Installing Open Data Hub version 2
You can install Open Data Hub version 2 on your OpenShift Container Platform from the OpenShift web console. For information about upgrading the Open Hub Operator, see Upgrading Open Data Hub.
Installing Open Data Hub involves the following tasks:
-
Installing the Open Data Hub Operator.
-
Installing Open Data Hub components.
-
Accessing the Open Data Hub dashboard.
Note
|
Version 2 of the Open Data Hub Operator represents an alpha release, accessible only on the fast channel. Later releases will change to the rolling channel when the Operator is more stable. |
Installing the Open Data Hub Operator version 2
-
You are using OpenShift Container Platform 4.12 or later.
-
Your OpenShift cluster has a minimum of 16 CPUs and 32GB of memory across all OpenShift worker nodes.
-
You have cluster administrator privileges for your OpenShift Container Platform cluster.
-
Log in to your OpenShift Container Platform as a user with
cluster-admin
privileges. If you are performing a developer installation on try.openshift.com, you can log in as thekubeadmin
user. -
Select Operators → OperatorHub.
-
On the OperatorHub page, in the Filter by keyword field, enter
Open Data Hub Operator
. -
Click the Open Data Hub Operator tile.
-
If the Show community Operator window opens, read the information and then click Continue.
-
Read the information about the Operator and then click Install.
-
On the Install Operator page, follow these steps:
-
For Update channel, select fast.
-
For Version, select the version of the Operator that you want to install.
-
For Installation mode, leave All namespaces on the cluster (default) selected.
-
For Installed Namespace, select the openshift-operators namespace.
-
For Update approval, select automatic or manual updates.
-
Automatic: When a new version of the Operator is available, Operator Lifecycle Manager (OLM) automatically upgrades the running instance of your Operator.
-
Manual: When a new version of the Operator is available, OLM notifies you with an update request that you must manually approve to upgrade the running instance of your Operator.
-
-
-
Click Install. The installation might take a few minutes.
-
Select Operators → Installed Operators to verify that the Open Data Hub Operator is listed with Succeeded status.
-
Install Open Data Hub components.
Installing Open Data Hub components
You can use the OpenShift web console to install specific components of Open Data Hub on your cluster when version 2 of the Open Data Hub Operator is already installed on the cluster.
-
You have installed version 2 of the Open Data Hub Operator.
-
You can log in as a user with
cluster-admin
privileges. -
If you want to use the
trustyai
component, you must enable user workload monitoring as described in Enabling monitoring for user-defined projects. -
If you want to use the
kserve
,datasciencepipeline
,distributedworkloads
, ormodelmesh
components, you must have already installed the following Operator or Operators for the component. For information about installing an Operator, see Adding Operators to a cluster.
Component | Required Operators | Catalog |
---|---|---|
ksersve |
Red Hat OpenShift Serverless Operator, Red Hat OpenShift Service Mesh Operator |
Red Hat |
datasciencepipeline |
Red Hat OpenShift Pipelines Operator |
Red Hat |
distributedworkloads |
CodeFlare Operator |
Community |
modelmesh |
Prometheus Operator |
Community |
-
Log in to your OpenShift Container Platform as a user with
cluster-admin
privileges. If you are performing a developer installation on try.openshift.com, you can log in as thekubeadmin
user. -
Select Operators → Installed Operators, and then click the Open Data Hub Operator.
-
On the Operator details page, click the Data Science Cluster tab, and then click Create DataScienceCluster.
-
On the Create DataScienceCluster page, configure the DataScienceCluster by using Form view or YAML view. For general information about the supported components, see Tiered Components.
-
Configure by using Form view:
-
In the Name field, enter a value.
-
In the Components section, expand each component and set the managementState to Managed or Removed.
-
-
Configure by using YAML view:
-
In the
spec.components
section, for each component shown, set the value of themanagementState
field to eitherManaged
orRemoved
.
-
-
-
Click Create.
-
Select Home → Projects, and then select the opendatahub project.
-
On the Project details page, click the Workloads tab and confirm that the Open Data Hub core components are running. For more information, see Tiered Components.
-
Access the Open Data Hub dashboard.
Accessing the Open Data Hub dashboard
You can access and share the URL for your Open Data Hub dashboard with other users to let them log in and work on their models.
-
You have installed the Open Data Hub Operator.
-
In the OpenShift web console, select Networking → Routes.
-
On the Routes page, click the Project list and select the
odh
project. The page filters to only display routes in theodh
project. -
In the Location column, copy the URL for the odh-dashboard route.
-
Give this URL to your users to let them log in to Open Data Hub dashboard.
-
Confirm that you and your users can log in to the Open Data Hub dashboard by using the URL.
Adding a CA bundle after upgrading
Open Data Hub provides support for using self-signed certificates. If you have upgraded Open Data Hub, you can add self-signed certificates to the Open Data Hub deployments and Data Science Projects in your cluster.
There are two ways to add a Certificate Authority (CA) bundle to Open Data Hub. You can use one or both of these methods:
-
For OpenShift Container Platform clusters that rely on self-signed certificates, you can add those self-signed certificates to a cluster-wide Certificate Authority (CA) bundle (
ca-bundle.crt
) and use the CA bundle in Open Data Hub. -
You can use self-signed certificates in a custom CA bundle (
odh-ca-bundle.crt
) that is separate from the cluster-wide bundle.
For more information, see Understanding certificates in Open Data Hub.
-
You have admin access to the
DSCInitialization
resources in the OpenShift Container Platform cluster. -
You installed the OpenShift command line interface (
oc
) as described in Get Started with the CLI. -
You upgraded Open Data Hub. If you are working in a new installation of Open Data Hub, see Understanding certificates in Open Data Hub.
-
Log in to the OpenShift Container Platform as a cluster administrator.
-
Click Operators → Installed Operators and then click the Open Data Hub Operator.
-
Click the DSC Initialization tab.
-
Click the default-dsci object.
-
Click the YAML tab.
-
Add the following to the
spec
section, setting themanagementState
field toManaged
:spec: trustedCABundle: managementState: Managed customCABundle: ""
-
If you want to use self-signed certificates added to a cluster-wide CA bundle, log in to the OpenShift Container Platform as a cluster administrator and follow the steps as described in Configuring the cluster-wide proxy during installation.
-
If you want to use self-signed certificates in a custom CA bundle that is separate from the cluster-wide bundle, follow these steps:
-
Add the custom certificate to the
customCABundle
field of thedefault-dsci
object, as shown in the following example:spec: trustedCABundle: managementState: Managed customCABundle: | -----BEGIN CERTIFICATE----- examplebundle123 -----END CERTIFICATE-----
-
Click Save.
The Open Data Hub Operator creates an
odh-trusted-ca-bundle
ConfigMap containing the certificates in all new and existing non-reserved namespaces.
-
-
If you are using a cluster-wide CA bundle, run the following command to verify that all non-reserved namespaces contain the
odh-trusted-ca-bundle
ConfigMap:$ oc get configmaps --all-namespaces -l app.kubernetes.io/part-of=opendatahub-operator | grep odh-trusted-ca-bundle
-
If you are using a custom CA bundle, run the following command to verify that a non-reserved namespace contains the
odh-trusted-ca-bundle
ConfigMap and that the ConfigMap contains yourcustomCABundle
value. In the following command, example-namespace is the non-reserved namespace and examplebundle123 is the customCABundle value.$ oc get configmap odh-trusted-ca-bundle -n example-namespace -o yaml | grep examplebundle123
Adding a CA bundle after upgrading
Open Data Hub provides support for using self-signed certificates. If you have upgraded Open Data Hub, you can add self-signed certificates to the Open Data Hub deployments and Data Science Projects in your cluster.
There are two ways to add a Certificate Authority (CA) bundle to Open Data Hub. You can use one or both of these methods:
-
For OpenShift Container Platform clusters that rely on self-signed certificates, you can add those self-signed certificates to a cluster-wide Certificate Authority (CA) bundle (
ca-bundle.crt
) and use the CA bundle in Open Data Hub. -
You can use self-signed certificates in a custom CA bundle (
odh-ca-bundle.crt
) that is separate from the cluster-wide bundle.
For more information, see Understanding certificates in Open Data Hub.
-
You have admin access to the
DSCInitialization
resources in the OpenShift Container Platform cluster. -
You installed the OpenShift command line interface (
oc
) as described in Get Started with the CLI. -
You upgraded Open Data Hub. If you are working in a new installation of Open Data Hub, see Understanding certificates in Open Data Hub.
-
Log in to the OpenShift Container Platform as a cluster administrator.
-
Click Operators → Installed Operators and then click the Open Data Hub Operator.
-
Click the DSC Initialization tab.
-
Click the default-dsci object.
-
Click the YAML tab.
-
Add the following to the
spec
section, setting themanagementState
field toManaged
:spec: trustedCABundle: managementState: Managed customCABundle: ""
-
If you want to use self-signed certificates added to a cluster-wide CA bundle, log in to the OpenShift Container Platform as a cluster administrator and follow the steps as described in Configuring the cluster-wide proxy during installation.
-
If you want to use self-signed certificates in a custom CA bundle that is separate from the cluster-wide bundle, follow these steps:
-
Add the custom certificate to the
customCABundle
field of thedefault-dsci
object, as shown in the following example:spec: trustedCABundle: managementState: Managed customCABundle: | -----BEGIN CERTIFICATE----- examplebundle123 -----END CERTIFICATE-----
-
Click Save.
The Open Data Hub Operator creates an
odh-trusted-ca-bundle
ConfigMap containing the certificates in all new and existing non-reserved namespaces.
-
-
If you are using a cluster-wide CA bundle, run the following command to verify that all non-reserved namespaces contain the
odh-trusted-ca-bundle
ConfigMap:$ oc get configmaps --all-namespaces -l app.kubernetes.io/part-of=opendatahub-operator | grep odh-trusted-ca-bundle
-
If you are using a custom CA bundle, run the following command to verify that a non-reserved namespace contains the
odh-trusted-ca-bundle
ConfigMap and that the ConfigMap contains yourcustomCABundle
value. In the following command, example-namespace is the non-reserved namespace and examplebundle123 is the customCABundle value.$ oc get configmap odh-trusted-ca-bundle -n example-namespace -o yaml | grep examplebundle123