Prepare for upgrade
This guide is a starting point to get high level overview of preparation for an upgrade to Camunda 8.8: assess your infrastructure, review operational changes, and choose an upgrade strategy appropriate for your environment.
Step 1: Evaluate your current setup
Area | Details |
---|---|
Camunda version | Direct upgrades are only supported from 8.7.x to 8.8.x. You must upgrade to the latest 8.7 patch before upgrading to 8.8. |
Component version alignment | Orchestration components such as Zeebe, Operate, Tasklist, and Identity must run the same version. |
Configuration customizations | Identify non-default parameters and values in configuration files, ingress rules, external Elasticsearch/OpenSearch configurations, and custom exporters. |
Step 2: Assess Camunda 8.8 changes and impact
Review and make sure you understand the platform-level changes between Camunda 8.7 and 8.8. Understanding these highlights helps you plan your upgrade and anticipate operational impacts.
Start with the high-level overview what's new in Camunda 8.8.
Area | What's changed | Impact |
Orchestration Cluster | Zeebe, Operate, Tasklist, and Identity are consolidated into a single Orchestration cluster. | Low |
Orchestration Cluster API | Introduced a new unified REST API for an Orchestration cluster.
| Medium |
Data and exporters | Introduced unified exporter architecture and unified data schema.
| Medium |
Unified components configuration | Introduced a new unified configuration with a shared YAML schema across Orchestration cluster components. | Breaking changes |
Optimize | Performs a startup data migration that requires downtime during startup data migration. You need to plan a maintenance window. | Low |
Identity, authentication, and authorization | Orchestration Cluster provides Identity and Access Management (IAM) inside a cluster. See Identity, authentication, and authorization below. |
Identity, authentication, and authorization
Orchestration Cluster Identity handles authentication and authorization for Orchestration Cluster components and resources.
The following table provides a high-level overview of the impact of these changes:
Area | Description | Impact |
Access control and permissions | The new authorization model introduces fine-grained access control for Orchestration Cluster resources, replacing the previous model. Run the Identity migration scripts during the upgrade to migrate authorizations. | Low |
User groups, roles, tenants, and mapping rules | Now managed within Orchestration Cluster Identity, replacing the previous Management Identity setup. Run the Identity migration scripts during the upgrade to migrate entities. | Low |
User task authorizations | Tasklist v1 API support User task access restrictions. After switching to the Tasklist v2 API, user task access restrictions do not apply. | Medium |
Identity via Keycloak | If managing Keycloak internally, verify required database schema updates. Confirm supported Keycloak versions in the environment matrix. | High |
User storage in Elasticsearch/OpenSearch for Operate or Tasklist | No longer supported. You must transition to using Basic authentication and re-create users in Orchestration Cluster Identity. | Breaking changes |
LDAP authentication for Operate or Tasklist | No longer supported. You must transition to OIDC or Basic Authentication. | Breaking changes |
Learn more about all Identity 8.8 changes in the Identity section of what's new in Camunda 8.8.
Step 3. Check infrastructure compatibility
Check and verify your infrastructure compatibility for Camunda 8.8.
Area | 8.8 requirement | Action |
---|---|---|
Elasticsearch/OpenSearch | Elasticsearch ≥ 8.16 (OpenSearch TBD). | Upgrade the cluster to the new version. |
CPU/Memory | Consolidated Zeebe StatefulSet shares limits. | Measure current usage; test with load generator |
Storage | Same or higher IOPS as 8.7. | Check space for temporary migration file. |
You should run a load test that simulates real production traffic, as component consolidation changes resource consumption. This ensures your cluster sizing is appropriate before you upgrade your production environment.
Next steps
Continue to the perform an upgrade guide.
For more background, see the component upgrade guide and version-specific documentation.