Skip to content

Radar: fix the Helm install steps and list container images per release - #4014

Open
EliShteinman wants to merge 12 commits into
redis:mainfrom
EliShteinman:bugfix/radar-helm-install-docs
Open

EliShteinman wants to merge 12 commits into
redis:mainfrom
EliShteinman:bugfix/radar-helm-install-docs

Conversation

@EliShteinman

@EliShteinman EliShteinman commented Sep 15, 2026

Copy link
Copy Markdown
Contributor

Following the Helm steps on the Radar install page as written fails. I checked each Helm claim against the published charts 2026.9.2 and 2026.9.5 from https://helm.redis.io/radar, using helm template in both database modes, and against Docker Hub.

What was wrong

Where Problem
Both helm install commands Render fails: database.host is required when postgresql.enabled is false. The chart's wait-for-db init containers probe that host.
Step 1 Creates secrets in the radar namespace, which only existed after helm install --create-namespace.
--set ingress.hosts[0]... Unquoted brackets are a glob in zsh, the macOS default shell: zsh: no matches found.
Package and service names Says the Helm chart's images are radar-app, radar-worker, and radar-migrate. The chart pulls redislabs/radar:{app,worker,migrate}-v<version>, the only Radar repository on Docker Hub. redislabs/radar-app and the others don't exist.
Private or air-gapped registry global.imageRegistry does not reach the Radar images: image.registry defaults to docker.io and takes precedence. It also does not reach busybox, which has no registry key. With the documented values, every Radar image still comes from Docker Hub. Chart issue: RedisLabs/redis-enterprise-helm#101.
Verify step Promises "a completed migration job". With an external database the job is a Helm hook with hook-succeeded deletion, so a successful install leaves no job to list.
Air-gapped host, Helm row docker load onto the nodes doesn't apply to Kubernetes or OpenShift nodes, which run containerd or CRI-O. The images.tar.gz bundle it relies on is not published in the Download Center, on Docker Hub, or in the Helm repository.
Source checkout path ./helm/radar refers to a repository customers can't access.
Release notes index Still said "and the Helm chart" with no source.

What changed

  • Release notes 2026.9.2 and 2026.9.5. Each gets a ## Downloads section, following the Kubernetes release notes convention, with the chart version and every container image that release's chart renders. That includes busybox and the optional bundled PostgreSQL. The images are linux/amd64 only, and the section says so. Each version's page now lists exactly what to mirror for that version.
  • Install page, Helm.
    • Adds a step that creates the namespace first.
    • Adds database.host to both install commands.
    • Quotes the bracketed --set values.
    • Pins --version <version> in the commands and points to the per-release Downloads lists.
    • Replaces the registry override with values that work: image.registry, and a registry-qualified dbWaitInitContainer.image.repository.
    • Corrects the migration-job expectation in the verify step.
    • Explains how to let helm test pull busybox from an authenticated mirror. The chart's test pod gets no global.imagePullSecrets and runs as the default service account.
  • Install page, air-gapped Helm. Replaces the Helm table row and adds a short procedure that uses public artifacts: helm pull the chart package, copy the listed images into a registry with skopeo copy --all, then install from the package. --all matters for multi-platform busybox when copying from an arm64 workstation.

Verification

  • The documented commands, plus the new registry values file, render with every image coming from the mirror. Checked for charts 2026.9.2 and 2026.9.5, with both an external and a bundled database.
  • tar -xzf radar-<version>.tgz radar/values-openshift.yaml produces the path the OpenShift command expects.
  • A Hugo build reports no warnings for content/operate/radar and no broken references.

Left unchanged, needs product input

  • The Docker Compose section, the images.tar.gz bundle, and radar-v<version>.SHA256SUMS. I couldn't find these published anywhere, so I couldn't verify them. The Compose image names are left as documented. The sha256sum -c step now applies only when the transferred artifacts include that file, since a chart fetched with helm pull has none.
  • Bundled PostgreSQL install values. These are postgresql.enabled, auth.password, auth.postgresPassword, and --wait --wait-for-jobs. They aren't documented on this page.
  • OpenShift Route TLS options. These are custom certificate and HTTP redirect, and the chart's schema rejects externalCertificate. See radar: values-openshift.yaml does not cover an air-gapped install (images to mirror, Route TLS) RedisLabs/redis-enterprise-helm#102.

🤖 Generated with Claude Code

EliShteinman and others added 10 commits September 15, 2026 23:03
Add a Downloads section to the 2026.9.2 and 2026.9.5 release notes, taken
from each chart's rendered defaults, so air-gapped installs know exactly
which images to mirror for the version they install.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
The index still said "and the Helm chart" with no source, and did not say
where per-release images are listed.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Step 1 created secrets in the radar namespace, which only came into being
at helm install --create-namespace, so kubectl create secret failed.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
With an external database the chart fails to render without database.host
("database.host is required when postgresql.enabled is false"); its
wait-for-db init containers probe that host. Both documented commands hit it.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Unquoted ingress.hosts[0]... is a glob in zsh, the macOS default shell:
"zsh: no matches found".

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Install a named release so the chart and the images mirrored for it match,
and point to the per-release Downloads lists. Replace the source-checkout
path, which refers to a repository customers cannot access, with the chart
package file.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
The chart pulls redislabs/radar:{app,worker,migrate}-v<version>, not
radar-app/radar-worker/radar-migrate. global.imageRegistry does not reach
those images (image.registry defaults to docker.io and wins) or busybox (no
registry key), so the documented override pulled everything from Docker
Hub. Verified by rendering charts 2026.9.2 and 2026.9.5 in both database
modes. Compose names are left as documented; the bundle was not available
to check.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
With an external database the job is a Helm hook with hook-succeeded
deletion, so a successful install leaves no job to list. With bundled
PostgreSQL it is a kept resource with a 7-day TTL.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
…d Helm

Kubernetes and OpenShift nodes run containerd or CRI-O, not Docker, and the
images.tar.gz bundle is not published anywhere customers can download it.
Document the path that works with public artifacts: helm pull the chart,
copy the per-release images into a registry, install from the package.
skopeo --all keeps multi-platform busybox intact when copying from an
arm64 workstation.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Copilot AI lite review requested due to automatic review settings September 15, 2026 20:21
@CLAassistant

CLAassistant commented Sep 15, 2026

Copy link
Copy Markdown

CLA assistant check
All committers have signed the CLA.

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🟡 Changes recommended

The authenticated-mirror helm test path and checksum guidance still need correction.

Get a fresh assessment by requesting another Copilot review.

Pull request overview

Updates Radar Helm installation documentation and release notes to match published charts, images, and air-gapped workflows.

Changes:

  • Fixes namespace, database host, version pinning, quoting, and migration verification guidance.
  • Adds per-release chart and container image inventories.
  • Replaces inaccurate air-gapped Helm instructions with chart mirroring steps.
File summaries
File Summary
content/operate/radar/install.md Corrects Helm and air-gapped installation procedures.
content/operate/radar/release-notes/2026-9-2.md Adds release-specific download information.
content/operate/radar/release-notes/2026-9-5.md Adds release-specific download information.
content/operate/radar/release-notes/_index.md Links the Helm repository and release downloads.
Review details
  • Files reviewed: 4/4 changed files
  • Comments generated: 2
  • Review effort level: Lite

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

Comment thread content/operate/radar/install.md
Comment thread content/operate/radar/install.md
EliShteinman and others added 2 commits September 15, 2026 23:31
The chart's test pod renders no imagePullSecrets and runs as the default
service account, so link the pull secret there. oc secrets link appends
rather than replacing OpenShift's generated dockercfg secret.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
A chart fetched with helm pull comes without a checksum file, so the
unconditional sha256sum step blocked the Helm air-gapped path.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants