1. Deploying and Managing Oracle Identity Governance on Kubernetes
  2. Administering Oracle Identity Governance on Kubernetes
  3. Patching and Upgrading
  4. Upgrading from Oracle Identity Governance 12.2.1.4 to 14.1.2
  5. Upgrade Prerequisite Steps

16.2.1 Upgrade Prerequisite Steps

Before upgrading Oracle Identity Governance (OIG) from 12c to 14c, you must meet the following prerequisites.

OIG 12c Prerequisites

It is recommended to be on the latest OIG 12c container image, and supported WebLogic Kubernetes Operator, before upgrading to 14c. For further details on latest versions and supported operator versions, see, Oracle Identity Governance 12c on Kubernetes Release Notes.

Kubernetes Prerequisties

  • The Kubernetes cluster and container engine must meet the minimum version requirements outlined in document ID 2723908.1 on My Oracle Support.
  • You must have enough storage to back up the persistent volume.

Gathering Variables

You must gather the following information for your existing OIG 12c deployment. The values for these variables will be used later in Creating the domainUpgradeResponse.txt File, Creating the OIGDomainConfigResponse.txt File, and Creating the domain-upgrade-pod.yaml .

Table 16-1 List of Variables

Variable Description Sample Value
%NAMESPACE%

The domain namespace used by the OIG 12c deployment.

 oigns
%DOMAIN_UID%

This is the domain uid used by the OIG 12c deployment.

To find the domain name, run:
kubectl get domain -n <namespace>
 governancedomain
%DOMAIN_MOUNT_PATH%

The mount path used by the OIG 12c deployment.

To find the mount path, run:
kubectl describe domains <domainUID> -n <namespace> | grep "Mount Path"
  • For WDT domains:/u01/oracle/user_projects
  • For WLST domains:/u01/oracle/user_projects/domains
%DOMAIN_HOME%

The domain home location used by the OIG 12c deployment.

To find the mount path, run:
kubectl describe domains <domainUID> -n <namespace> | grep "Domain Home:"
 /u01/oracle/user_projects/domains/governancedomain
%DOMAIN_ROOT_DIR%

For WLST created domains, this is the %DOMAIN_MOUNT_PATH%/.

For WDT created domains, this is the %DOMAIN_MOUNT_PATH%/domains directory.

/u01/oracle/user_projects/domains
%CONNECTION_STRING%
The connection string for the database where the OIG 12c schemas reside, in the format:
<host.domain>:<db_port>/<db_service>
 mydatabasehost.example.com:1521/orcl.example.com
%RCU_PREFIX%

The RCU schema prefix for the OIG 12c deployment.

 OIGK8S
%RCU_SCHEMA_PWD%

The password for %RCUPREFIX%.

<password>
%SYS_USERNAME%

The SYS username for the database where the OIG 12c schemas reside.

 sys
%SYS_USERNAME_PWD%

The password for %SYS_USERNAME%.

<password>
%DOMAIN_PVC_NAME%

The persistent volume claim (PVC) for the OIG 12c deployment.

To find the PVC, run:
kubectl get pvc -n <namespace>
 governancedomain-domain-pvc
%RCU_CREDENTIALS_SECRET_NAME%

The RCU secret for the OIG 12c deployment.

To find the RCU secret, run:
kubectl get secrets -n <namespace> | grep rcu
 governancedomain-rcu-credentials
%WEBLOGIC_IMAGE%

The location of the OIG 14c container image.

 container-registry.oracle.com/middleware/oig_cpu:14.1.2.1.0-jdk17-ol8-<YYMMDD>
%WEBLOGIC_IMAGE_PULL_POLICY%

The image pull policy you used in the OIG 12c deployment.

To find the image pull policy, run:
kubectl describe domains <domainUID> -n <namespace> | grep "Image Pull Policy"
 IfNotPresent