Maintaining FOSSA On-Premises
Day-2 operations for a running on-premises FOSSA instance, applying configuration changes, upgrading external services, keeping vulnerability data current, and collecting diagnostics.
Overview
Once FOSSA is installed and verified, these guides cover the day-2 operations you'll perform against a running deployment. For first-time setup, see Installing FOSSA On-Premises.
Warning
Before upgrading the fossa-core chart, always check the chart's own CHANGELOG.md for breaking changes; major versions have removed in-cluster Postgres and decoupled MinIO.
Upgrading FOSSA
EnterpriseUpgrade a running FOSSA on-premises instance by fetching the new chart, reading its changelog, and running helm upgrade.
Helm Chart 5.0.0 Breaking Change
Enterprisefossa-core 5.
Helm Chart 6.0.0 Breaking Change
Enterprisefossa-core 6.
Updating Helm Values
EnterpriseApply changed FOSSA Helm chart values to a running on-premises installation with helm upgrade.
Migrating to Postgres 17
EnterpriseMigrate a FOSSA-managed Postgres 11.
Decoupling MinIO from fossa-core
EnterpriseMigrate a bundled-MinIO deployment to externally managed MinIO releases when upgrading the fossa-core chart to 5.
Migrating to SeaweedFS
EnterpriseMove on-premises object storage from MinIO to SeaweedFS, including data transfer with rclone and the fossa-core cutover.
Global License Corrections
EnterpriseOverride FOSSA's license detection for a package across all of its revisions, from the on-premises Admin Dashboard.
On-Prem Vulnerability Database Updates
EnterpriseKeep your on-premises vulnerability database current with over-the-air updates from FOSSA's vulnerability feed.
Bitnami image pull errors
EnterpriseResolve ErrImagePull / ImagePullBackOff on Bitnami Postgres, Redis, and MinIO images by switching to FOSSA's mirrored images.
On-Premises Debug Bundle
EnterpriseGenerate a FOSSA cluster debug bundle (a ZIP of cluster state, pod logs, and application diagnostics) and send it to FOSSA support.
What's inside
Upgrading and configuration
- Upgrading FOSSA: fetch the new chart, read its changelog, and run
helm upgrade. - Helm Chart 5.0.0 Breaking Change: MinIO is no longer bundled with the chart; move to external storage.
- Helm Chart 6.0.0 Breaking Change: the
redisHelm values are renamed tocache. - Updating Helm values: apply configuration changes to a running release.
Migrating external services
- Migrating to Postgres 17: move off in-cluster Postgres to managed external Postgres 17, required on current charts.
- Decoupling MinIO from fossa-core: move object storage to externally managed MinIO when upgrading to
fossa-core5.0.0. - Migrating to SeaweedFS: move object storage from MinIO to SeaweedFS.
Data operations
- Vulnerability database updates: keep your local threat database current with FOSSA's vulnerability feed.
- Global License Corrections: override FOSSA's license detection for a package across all of its revisions.
Troubleshooting and diagnostics
- Bitnami image pull errors: resolve
ErrImagePull/ImagePullBackOffon Bitnami Postgres, Redis, and MinIO images. - Debug bundle: collect cluster diagnostics for troubleshooting and FOSSA support.