The deckhouse module: usage

Setting up the update mode

You can manage DKP updates in the following ways:

• Using the settings.update ModuleConfig deckhouse parameter;
• Using the disruptions NodeGroup parameters section.

Update windows configuration

You can configure the time windows when Deckhouse will automatically install updates in the following ways:

• in the update.windows parameter of the deckhouse ModuleConfig for overall update management;
• in the disruptions.automatic.windows and disruptions.rollingUpdate.windows parameters of NodeGroup, for managing disruptive updates.

An example of setting up two daily update windows — from 8 a.m. to 10 a.m. and from 8 p.m. to 10 p.m. (UTC):

apiVersion: deckhouse.io/v1alpha1
kind: ModuleConfig
metadata:
  name: deckhouse
spec:
  version: 1
  settings:
    releaseChannel: EarlyAccess
    update:
      windows: 
        - from: "8:00"
          to: "10:00"
        - from: "20:00"
          to: "22:00"

You can also set up updates on certain days, for example, on Tuesdays and Saturdays from 6 p.m. to 7:30 p.m. (UTC):

apiVersion: deckhouse.io/v1alpha1
kind: ModuleConfig
metadata:
  name: deckhouse
spec:
  version: 1
  settings:
    releaseChannel: Stable
    update:
      windows: 
        - from: "18:00"
          to: "19:30"
          days:
            - Tue
            - Sat

Manual update confirmation

Manual confirmation of Deckhouse version updates is provided in the following cases:

• The Deckhouse update confirmation mode is enabled.

  This means that the parameter settings.update.mode in the ModuleConfig deckhouse is set to Manual (confirmation for both patch and minor versions of Deckhouse) or AutoPatch (confirmation for the minor version of Deckhouse).

  Run the following command to confirm the update (use the corresponding Deckhouse version):

  kubectl patch DeckhouseRelease <VERSION> --type=merge -p='{"approved": true}'
  

• If automatic application of disruptive updates is disabled for a node group.

  This means that the corresponding NodeGroup has the parameter spec.disruptions.approvalMode set to Manual.

  For updating each node in such a group, the node must have update.node.deckhouse.io/disruption-approved= annotation.

  Example:

  kubectl annotate node ${NODE_1} update.node.deckhouse.io/disruption-approved=
  

Deckhouse update notifications

In the Auto update mode, you can configure a webhook call to receive a notification about an upcoming minor Deckhouse version update.

In addition, notifications are generated not only for Deckhouse updates but also for updates of any modules, including their individual updates.
In some cases, the system may initiate the sending of multiple notifications at once (10–20 notifications) at approximately 15-second intervals.

Notifications are sent only once for a specific update. If something goes wrong (for example, the webhook receives incorrect data), they will not be resent automatically. To resend the notification, you must delete the corresponding DeckhouseRelease resource.

Example of notification configuration:

apiVersion: deckhouse.io/v1alpha1
kind: ModuleConfig
metadata:
  name: deckhouse
spec:
  version: 1
  settings:
    update:
      releaseChannel: Stable
      mode: Auto
      notification:
        webhook: https://release-webhook.mydomain.com

After a new minor Deckhouse version appears on the selected update channel, but before it is applied in the cluster, a POST request will be sent to the configured webhook address.

The minimalNotificationTime parameter allows you to postpone the update installation for the specified period, providing time to react to the notification while respecting update windows. If the webhook is unavailable, each failed attempt to send the notification will postpone the update by the same duration, which may lead to the update being deferred indefinitely.

Example:

apiVersion: deckhouse.io/v1alpha1
kind: ModuleConfig
metadata:
  name: deckhouse
spec:
  version: 1
  settings:
    update:
      releaseChannel: Stable
      mode: Auto
      notification:
        webhook: https://release-webhook.mydomain.com
        minimalNotificationTime: 8h

Collect debug info

Read the FAQ to learn more about collecting debug information.