Skip to main content
Version: 8.8 (unreleased)

Prepare for upgrade

This guide is a starting point to get high level overview of preparation for an upgrade to Camunda 8.8: assess your infrastructure, review operational changes, and choose an upgrade strategy appropriate for your environment.

Step 1: Evaluate your current setup

AreaDetails
Camunda versionDirect upgrades are only supported from 8.7.x to 8.8.x. You must upgrade to the latest 8.7 patch before upgrading to 8.8.
Component version alignmentOrchestration components such as Zeebe, Operate, Tasklist, and Identity must run the same version.
Configuration customizationsIdentify non-default parameters and values in configuration files, ingress rules, external Elasticsearch/OpenSearch configurations, and custom exporters.

Step 2: Assess Camunda 8.8 changes and impact

Review and make sure you understand the platform-level changes between Camunda 8.7 and 8.8. Understanding these highlights helps you plan your upgrade and anticipate operational impacts.

tip

Start with the high-level overview what's new in Camunda 8.8.

AreaWhat's changedImpact
Orchestration ClusterZeebe, Operate, Tasklist, and Identity are consolidated into a single Orchestration cluster.Low
Orchestration Cluster API

Introduced a new unified REST API for an Orchestration cluster.

  • Operate and Tasklist (V1) APIs are deprecated and should be replaced by the Orchestration Cluster API.
  • For more information, see the blog post upcoming API Changes in Camunda 8.

Medium
Data and exporters

Introduced unified exporter architecture and unified data schema.

  • Requires temporary rebalancing of indices/storage.
  • Dedicated data retention configurations per application (Zeebe, Tasklist, Operate) are no longer supported.

  • If Tasklist data is present, an additional data migration is required - process application migration utilities are offered for this.

Medium
Unified components configurationIntroduced a new unified configuration with a shared YAML schema across Orchestration cluster components.Breaking changes
OptimizePerforms a startup data migration that requires downtime during startup data migration. You need to plan a maintenance window.Low
Identity, authentication, and authorizationOrchestration Cluster provides Identity and Access Management (IAM) inside a cluster. See Identity, authentication, and authorization below.

Identity, authentication, and authorization

Orchestration Cluster Identity handles authentication and authorization for Orchestration Cluster components and resources.

The following table provides a high-level overview of the impact of these changes:

AreaDescriptionImpact
Access control and permissionsThe new authorization model introduces fine-grained access control for Orchestration Cluster resources, replacing the previous model. Run the Identity migration scripts during the upgrade to migrate authorizations.Low
User groups, roles, tenants, and mapping rulesNow managed within Orchestration Cluster Identity, replacing the previous Management Identity setup. Run the Identity migration scripts during the upgrade to migrate entities.Low
User task authorizationsTasklist v1 API support User task access restrictions. After switching to the Tasklist v2 API, user task access restrictions do not apply.Medium
Identity via KeycloakIf managing Keycloak internally, verify required database schema updates. Confirm supported Keycloak versions in the environment matrix.High
User storage in Elasticsearch/OpenSearch for Operate or TasklistNo longer supported. You must transition to using Basic authentication and re-create users in Orchestration Cluster Identity.Breaking changes
LDAP authentication for Operate or TasklistNo longer supported. You must transition to OIDC or Basic Authentication.Breaking changes
info

Learn more about all Identity 8.8 changes in the Identity section of what's new in Camunda 8.8.

Step 3. Check infrastructure compatibility

Check and verify your infrastructure compatibility for Camunda 8.8.

Area8.8 requirementAction
Elasticsearch/OpenSearchElasticsearch ≥ 8.16 (OpenSearch TBD).Upgrade the cluster to the new version.
CPU/MemoryConsolidated Zeebe StatefulSet shares limits.Measure current usage; test with load generator
StorageSame or higher IOPS as 8.7.Check space for temporary migration file.
Plan a performance test

You should run a load test that simulates real production traffic, as component consolidation changes resource consumption. This ensures your cluster sizing is appropriate before you upgrade your production environment.

Next steps

Continue to the perform an upgrade guide.

tip

For more background, see the component upgrade guide and version-specific documentation.