Hi all,
I'd appreciate guidance on the safest way to upgrade our production OpenZiti network with minimal downtime.
**Current versions (GKE, single non-HA controller):**
- Controller: Ziti 1.1.15 — Helm chart `ziti-controller` 1.1.5
- Routers (public + private): Ziti 1.1.15 — Helm chart `ziti-router` 1.1.3
- Dev controller + router in the same namespace: same versions
- `ziti-console` chart 0.5.3 (app 3.1.0)
- `zrok` chart 0.2.6 (app 0.4.40)
- `ziti-host` chart 1.0.1 (app 1.3.9)
- `ziti-edge-tunnel` chart 0.0.13 (app 0.22.26)
- cert-manager / trust-manager: [subcharts of ziti-controller / separate releases]
- ~500 identities, including ~27 Linux ziti-edge-tunnel IoT devices on pinned versions
**Target:** current 2.0.x LTS.
What upgrade path and steps would you recommend for this setup? Any pitfalls I should watch out for?
Thanks!