Introduction
Migrating Terraform Enterprise (TFE) from a Replicated-based installation to an FDO Docker-based deployment requires careful planning and configuration. This guide provides an overview of best practices, important checks, and key adjustments to help ensure a smooth migration process.
Scenario
Before initiating the migration, complete the following steps:
Environment Compatibility – Review your current infrastructure and confirm that your versions of Terraform Enterprise and Docker meet supported requirements. Refer to the Terraform Enterprise Release Compatibility Documentation for the latest details.
Obtain License – Request a TFE FDO license from your HashiCorp Account Manager.
Upgrade Replicated – Ensure your Replicated installation is upgraded to v202309-1 or later. Follow the HashiCorp upgrade guide.
Backups – Take complete backups (mounted disk, external services, or active-active setup) to safeguard rollback options.
Migration Strategy – Decide whether to perform the migration on the existing host or a new host.
Recommendation
-
If your Replicated installation uses a proxy, explicitly define the following environment variables in your
compose.yaml:http_proxyhttps_proxyno_proxy
During upgrades, communication issues may occur if required addresses are missing inno_proxy. In Replicated installations, the
tfe_terraform_isolationnetwork is used. In FDO Docker installations, this is replaced withterraform-enterprise_default.
RemoveTFE_RUN_PIPELINE_DOCKER_NETWORKfrom yourcompose.yaml. Terraform Enterprise will automatically use the default Docker network.The encryption password configured in your Replicated installation must remain the same in the FDO Docker deployment. This ensures sensitive data can still be decrypted properly after migration.
Stop and disable all Replicated services, then uninstall Replicated to prevent conflicts or unintended restarts. Always confirm backups are available before removing Replicated components.
In Replicated, logs were often written to a
tmpfsmount. In FDO Docker, logs are persisted in/var/log/terraform-enterprisevia Docker volumes. This is the recommended configuration for log persistence in Docker deployments.Some workloads require hairpin addressing to function correctly. In Replicated, hairpin mode was enabled by default. In FDO Docker, you may need to enable it manually. Follow the guidance in this KB: How to Enable Hairpin Addressing in Terraform Enterprise FDO Docker
Additional Information
https://developer.hashicorp.com/terraform/enterprise/deploy/replicated-migration