Page History

...

• Set keystone::sync_db: false and keystone::manage_service: false globally in hiera
• Set keystone::enabled: false in hiera for the node that you plan to run the rolling upgrade from
• Login to a mysql node, start the mysql CLI, and run set global log_bin_trust_function_creators=1;

...

1. Run puppet with the rocky modules/tags
2. Stop apache2 and puppet
3. Purge the keystone package
4. Run apt dist-upgrade
5. Run puppet again
   1. This will re-install keystone (ensure that apache2 does not start - should be ensured by puppet as of the enable: false flag in hiera)
6. Run keystone-manage doctor and ensure nothing is wrong
7. Run keystone-manage db_sync --expand
   1. Returns nothing
8. Run keystone-manage db_sync --migrate
   1. Returns nothing
9. At this point, you may restart apache2 on this node
10. Upgrade keystone on the other nodes, one at a time
    1. Basically run step 1-5 on the other nodes
11. When all nodes are upgraded, perform the final DB sync
    1. keystone-manage db_sync --contract
12. Remove the keystone::enabled: false and the keystone::manage_service: false hiera key from the first node, and re-run puppet
13. Remove the keystone::sync_db: false key from hiera

...