Views:
Container Inventory clusters that use cloudone-container-security-helm must be upgraded to use visionone-container-security-helm. Starting with version 3.0.0, Helm chart is also in a new location in GitHub: https://github.com/trendmicro/visionone-container-security-helm.
Important
Important
This Helm chart upgrade does not work if any of your Container Protection policies include Block actions. Change your policies to Log actions before you upgrade Helm.

Update firewall exceptions

Before you upgrade your clusters, you must add and remove the following firewall exceptions. These updated exceptions can also be seen in Firewall exception requirements for Trend Vision One.
Region Add new exceptions Remove outdated exceptions
Americas
  • api.xdr.trendmicro.com
  • container.us-1.cloudone.trendmicro.com
  • telemetry.deepsecurity.trendmicro.com
India
  • api.in.xdr.trendmicro.com
  • container.in-1.cloudone.trendmicro.com
  • telemetry.deepsecurity.trendmicro.com
Singapore
  • api.sg.xdr.trendmicro.com
  • container.sg-1.cloudone.trendmicro.com
  • telemetry.deepsecurity.trendmicro.com
Australia
  • api.au.xdr.trendmicro.com
  • container.au-1.cloudone.trendmicro.com
  • telemetry.deepsecurity.trendmicro.com
Japan
  • api.xdr.trendmicro.co.jp
  • container.jp-1.cloudone.trendmicro.com
  • telemetry.deepsecurity.trendmicro.com
Europe
  • api.eu.xdr.trendmicro.com
  • container.eu-1.cloudone.trendmicro.com
  • telemetry.deepsecurity.trendmicro.com
Middle East and Africa
  • api.mea.xdr.trendmicro.com
  • container.mea-1.cloudone.trendmicro.com
  • telemetry.deepsecurity.trendmicro.com

Upgrade manually registered clusters

Users with manually registered clusters can upgrade from the Trend Vision One console.
Note
Note
To check to see if any clusters require an upgrade from the console, navigate to Cloud Security → Container Inventory → Kubernetes. A warning message is displayed for any clusters that require an upgrade.
  1. From the console, follow the How to upgrade modal instructions.
    If you don't have the Helm chart values you used during initial installation, you can retrieve them with the following command: 
    helm get values --namespace trendmicro-system trendmicro  -o yaml
  2. Replace the following values: 
    cloudOne:
    apiKey: <your api key>
    endpoint: <endpoint>
    With the new Trend Vision One values: 
    visionOne:
  bootstrapToken: <new bootstrap token>
  endpoint: <new endpoint>
    • bootstrapToken: This value replaces the apiKey. The bootstrap token is automatically generated when you click How to upgrade.
      Note
      Note
      If the token is not used within 24 hours, it expires, but a new token can be generated by clicking How to upgrade again.
      After upgrading, the token is automatically renewed by Container Security components.
    • endpoint: Updated to a new URL in the console.
  3. Run the following command to upgrade:
    helm upgrade \
    trendmicro \
    --namespace trendmicro-system \
    --values overrides.yaml \
    https://github.com/trendmicro/visionone-container-security-helm/archive/main.tar.gz

Upgrade automatically registered clusters

Users with automatically registered clusters most modify their overrides YAML file to upgrade.
  1. Open the overrides file (overrides.yaml) to be modified.
    If you don't have the Helm chart values you used during initial installation, you can retrieve them with the following command: 
    helm get values --namespace trendmicro-system trendmicro  -o yaml
  2. Replace the following endpoint value: 
    cloudOne:
    endpoint: <old endpoint>
    With the new Trend Vision One endpoint value in the table listed below, based on your region: 
    visionOne:
  endpoint: <new endpoint from the list above>  # Replace with the appropriate endpoint based on your region
    Region endpoint
    Americas https://api.xdr.trendmicro.com/external/v2/direct/vcs/external/vcs
    Europe https://api.eu.xdr.trendmicro.com/external/v2/direct/vcs/external/vcs
    Japan https://api.xdr.trendmicro.co.jp/external/v2/direct/vcs/external/vcs
    Australia https://api.au.xdr.trendmicro.com/external/v2/direct/vcs/external/vcs
    India https://api.in.xdr.trendmicro.com/external/v2/direct/vcs/external/vcs
    Singapore https://api.sg.xdr.trendmicro.com/external/v2/direct/vcs/external/vcs
    Middle East and Africa https://api.mea.xdr.trendmicro.com/external/v2/direct/vcs/external/vcs
  3. Run the following command to upgrade:
    helm upgrade \
    trendmicro \
    --namespace trendmicro-system \
    --values overrides.yaml \
    https://github.com/trendmicro/visionone-container-security-helm/archive/main.tar.gz