Add CLI Upgrade command

[t-eckert]

This is a wrap-up of Saad's excellent work on the Upgrade command. There will need to be some refactors following this, but functionality is solid.

Changes proposed in this PR:

• Made an initial try at the consul-k8s upgrade command. Running into issues with the connect-injector webhook not starting on an install?
• Upgrade commit
• First pass at upgrade was successful.
• notes from sync with Saad on what's left
• Made an initial try at the consul-k8s upgrade command. Running into issues with the connect-injector webhook not starting on an install?
• Upgrade commit
• First pass at upgrade was successful.
• notes from sync with Saad on what's left
• Some basic cleanup
• Remove TestDebugger
• Remove validateLabels (unused)
• Add the namespace and install flags
• Add flag test and remove install option

How I've tested this PR:

Checkout an older version of the CLI and compile it.

cd cli
git checkout tags/v0.37.0
go build -o consul-k8s-0-37-0

Checkout this version and compile it

git checkout cli-upgrade
go build -o consul-k8s-latest

Install Consul with the older version, optionally include a preset.

./consul-k8s-0-37-0 install [-preset demo]

Apply a static server/client pair to the cluster.

K8s Config

apiVersion: apps/v1
kind: Deployment
metadata:
  name: static-client
spec:
  replicas: 1
  selector:
    matchLabels:
      app: static-client
  template:
    metadata:
      name: static-client
      labels:
        app: static-client
      annotations:
        "consul.hashicorp.com/connect-inject": "true"
        "consul.hashicorp.com/connect-service-upstreams": "static-server:1234"
    spec:
      containers:
        - name: static-client
          image: docker.mirror.hashicorp.services/curlimages/curl:latest
          command: [ "/bin/sh", "-c", "--" ]
          args: [ "while true; do sleep 30; done;" ]
          env:
          - name: HOST_IP
            valueFrom:
              fieldRef:
                fieldPath: status.hostIP
      serviceAccountName: static-client
      terminationGracePeriodSeconds: 0 # so deletion is quick
---
apiVersion: v1
kind: Service
metadata:
  name: static-client
spec:
  selector:
    app: static-client
  ports:
    - port: 80
---
apiVersion: v1
kind: ServiceAccount
metadata:
  name: static-client
---
apiVersion: v1
kind: Service
metadata:
  name: static-server
spec:
  selector:
    app: static-server
  ports:
    - protocol: TCP
      port: 80
      targetPort: 8080
---
apiVersion: v1
kind: ServiceAccount
metadata:
  name: static-server
---
apiVersion: apps/v1
kind: Deployment
metadata:
  name: static-server
spec:
  replicas: 1
  selector:
    matchLabels:
      app: static-server
  template:
    metadata:
      name: static-server
      labels:
        app: static-server
      annotations:
        'consul.hashicorp.com/connect-inject': 'true'
    spec:
      containers:
        - name: static-server
          image: hashicorp/http-echo:latest
          args:
            - -text="hello world"
            - -listen=:8080
          ports:
            - containerPort: 8080
              name: http
      serviceAccountName: static-server
---
apiVersion: consul.hashicorp.com/v1alpha1
kind: ServiceIntentions
metadata:
  name: static-server
spec:
  destination:
    name: static-server
  sources:
    - name: static-client
      action: allow

Exec into the client pod

kubectl exec <client-pod-name> -it /sh

In the client pod, cURL the server pod:

curl http://localhost:1234

You should receive "hello, world" back. Exit the pod.

Now perform the upgrade with the latest version of the CLI, optionally modifying the preset.

./consul-k8s-latest upgrade [-preset secure]

Exec into the client pod again, cURL the server pod, and ensure that you still receive "hello, world".

How I expect reviewers to test this PR:

You can do what I did above. I believe in you.

Checklist:

• Tests added
• CHANGELOG entry added

  HashiCorp engineers only, community PRs should not add a changelog entry.
  Entries should use present tense (e.g. Add support for...)

[ndhanushkodi]

It looks great! Thanks for wrapping this up Thomas! Mostly had some small comments, and +1 to David's comment to re-enable the presets. I have a little bit of manual testing left to try but wanted to leave this review now so you can start! Finished doing some testing, haven't run into anything weird yet!

[ndhanushkodi]

I think the acceptance tests are failing because we need to rebase this on main

[t-eckert]

Closing because of weird git stuff...