(DOCSP-21316), (DOCSP-21187): Added v1.15.1 TLS info. (#864)

* (DOCSP-21316), (DOCSP-21187): Added v1.15.1 tls info.

* (DOCSP-21316), (DOCSP-21187): Incorporated feedback from Rodrigo and Rajdeep.

* (DOCSP-21316), (DOCSP-21187): Incorporated feedback from Rodrigo and Rajdeep.

* (DOCSP-21316): Incorporated Julia's feedback.

* (DOCSP-21316): Fixed typo.

* (DOCSP-21316): Incorporated Priyo's feedback.

* (DOCSP-21316): Added missing colon.

Author: corryroot

source/includes/fact-broken-appdb.rst

@@ -0,0 +1,3 @@
+If you have a broken Application Database after upgrading to 
+|k8s-op-short| version 1.14.0 or 1.15.0, see 
+:ref:`troubleshoot-om-failed-state`.

source/includes/facts/fact-disable-tls.rst

@@ -1,3 +1,11 @@
-If you are upgrading to |k8s-op-short| version 1.14.0 or later,
-you must disable TLS in the :setting:`spec.security.certsSecretPrefix` field, upgrade, and then :ref:`enable TLS <secure-tls>`.
+|k8s-op-short| version :ref:`1.15.1 <ent_op-1.15.1>` fixes an issue 
+that prevented the |k8s-op-short| upgrade when managing a 
+TLS-enabled Application Datbase whose TLS certificate is stored in an 
+:k8sdocs:`Opaque </concepts/configuration/secret/#opaque-secrets>` 
+secret.
 
+We recommend that you upgrade to |k8s-op-short| version 1.15.1 
+or later.
+
+We strongly advise against upgrading to |k8s-op-short| version 1.14.0 
+or 1.15.0.

source/includes/prereqs/pem-format.rst

@@ -1,7 +1,7 @@
 .. important::
 
-   Starting in version 1.13, the |k8s-op-short| uses
-   :k8sdocs:`kubernetes.io/tls
+   For fresh |k8s-op-short| installations starting with version 1.13, 
+   the |k8s-op-short| uses :k8sdocs:`kubernetes.io/tls
    </concepts/configuration/secret/#tls-secrets>` secrets
    to store |tls| certificates and private keys for |onprem| and MongoDB
    resources.
@@ -15,3 +15,8 @@
    To maintain backwards compatibility, the |k8s-op-short|
    continues to support storing |pem| files in Opaque secrets. Support
    of this feature might be removed in a future release.
+
+   We recommend that you upgrade to |k8s-op-short| version 1.15.1 
+   or later.
+
+   .. include:: /includes/fact-broken-appdb.rst

source/reference/troubleshooting.txt

@@ -787,3 +787,35 @@ following command to remove it:
 .. code-block:: sh
 
    kubectl delete deployment/enterprise-operator
+
+
+.. _troubleshoot-om-failed-state:
+
+|onprem| in Failed State
+---------------------------
+
+.. include:: /includes/facts/fact-disable-tls.rst
+
+However, if you have a broken Application Database after upgrading to 
+|k8s-op-short| version 1.14.0 or 1.15.0, do the following steps:
+
+1. Run the following command to scale your |k8s-op-short| deployment to 
+   zero replicas:
+
+   .. code-block:: sh
+
+      kubectl scale deployment/mongodb-enterprise-operator --replicas 0
+
+#. Run the following command to delete the AppDB StatefulSet:
+
+   .. code-block:: sh
+
+      kubectl delete sts/<mongodb-resource-name>-db
+
+#. Run the following command to remove the Automation Config secret:
+
+   .. code-block:: sh
+
+      kubectl delete secret/<mongodb-resource-name>-db-config
+
+#. :ref:`upgrade-k8s-operator` to version 1.15.1 or later.

source/release-notes.txt

@@ -52,6 +52,8 @@ Bug Fixes
 
 .. include:: /includes/facts/fact-disable-tls.rst
 
+.. include:: /includes/fact-broken-appdb.rst
+
 MongoDB Resource
 ````````````````
 
@@ -121,6 +123,8 @@ Find all new images at:
 
 .. include:: /includes/facts/fact-disable-tls.rst
 
+.. include:: /includes/fact-broken-appdb.rst
+
 Changes
 +++++++
 

source/tutorial/upgrade-k8s-operator.txt

@@ -13,11 +13,13 @@ Upgrade the |k8s-op|
 The following procedure outlines how to upgrade the |k8s-op-short|
 to its latest version. 
 
-.. admonition:: Upgrading to version 1.14 and later
+.. admonition:: Upgrading to version 1.14.0 or 1.15.0
    :class: warning
 
    .. include:: /includes/facts/fact-disable-tls.rst
 
+   .. include:: /includes/fact-broken-appdb.rst
+
 .. admonition:: Upgrading to version 1.11.0 and later
    :class: warning