...
- Run puppet with the rocky modules/tags
- Run
apt dist-upgrade
- Rerun puppet and restart the service
systemctl restart ovsdb-server
systemctl restart neutron-dhcp-agent.service neutron-l3-agent.service neutron-lbaasv2-agent.service neutron-metadata-agent.service neutron-openvswitch-agent.service neutron-ovs-cleanup.service
...
- Run puppet with the rocky modules/tags
- Run
apt dist-upgrade
- Run puppet and restart services
Once everything is upgraded, including the compute-nodes:
- Delete nova-consoleauth from the catalog
openstack compute service list
- Delete all rows with nova-consoleauth:
openstack compute service delete <id>
- Run
nova-manage db online_data_migrations
on an API node. Ensure that it reports that nothing more needs to be done.
Heat
The rolling upgrade procedure for heat includes a step where you are supposed to create a new rabbit vhost. I don't want that. Therefore, this is the cold upgrade steps.
...
- Set heat::api::enabled: false and heat::engine::enabled: false and heat::api_cfn: false in hiera to stop all services
- Run puppet with rocky modules/tags
- Run
apt
-dist-upgrade
- Run
heat-manage db_sync
- In hiera, add
heat::keystone::authtoken::www_authenticate_uri: "%{alias('ntnuopenstack::keystone::auth::uri')}"
to ntnuopenstack.yaml in hiera- And remove
heat::keystone::authtoken::auth_uri: "%{alias('ntnuopenstack::keystone::auth::uri')}"
- And remove
- Remove the hiera keys that disabled the services and re-run puppet
Horizon
...
- Run puppet with the roky modules/tags
- run
apt dist-upgrade
- Run puppet again
- restart apache2
Compute nodes
When all APIs etc. are upgraded, it is time to do the same on the compute-nodes. Compute nodes are simple to upgrade:
- Run puppet with the rocky modules/tags
- Perform a dist-upgrade
- Run puppet again
- Restart openstack services and ovsdb-server