Upgrade¶

Upgrade Shield Release¶

Ericom Shield upgrade process can be done either online or offline, depending on the system deployment.

Please find detailed instructions for the different upgrading processes on the menu to the left.

Online Upgrade¶

To upgrade Shield system follow these steps:

curl -s -o install-shield.sh https://raw.githubusercontent.com/EricomSoftwareLtd/Shield/master/Kube/scripts/install-shield.sh chmod +x install-shield.sh
./install-shield.sh -p <PASSWORD> -v <version-name>

The versionname format is: Rel-yy.mm.xxx (e.g., Rel-20.03.641).

Note

If the desired version name is not clear - run ./install-shield.sh -r to view the available releases.

Make sure to use the same command that was used while installing Shield (for specific namespaces, registry, etc).

Offline Upgrade¶

Prepare a dedicated machine for Shield registry (referred to as Registry VM) with the following requirements:

Minimum: 1 Core / 2GB memory
Recommended: 2 Core / 4GB memory

Download the Shield Registry and start the VM. The downloaded file includes the version-name in it. Keep it. In addition, keep the IP address of this VM (referred to as RegistryIPAddress ). Both details will be needed during the upgrade process.

Note

The Registry VM should be always up and running.

The Docker offline registry is accessible in port 5000

Go to the Rancher Server , and export to it the new registry (from the Registry VM). Make sure to replace the RegistryIPAddress with the actual IP:
```
export ES_OFFLINE_REGISTRY="<RegistryIPAddress>:5000"
```
To verify that the registry was exported successfully, run:
```
echo $ES_OFFLINE_REGISTRY
```

In case Rancher was upgraded during the release - follow these steps to update it manually: here .

Prepare the other nodes in the system:

./shield-prepare-servers -u <USER> --offline-mode --offline-registry <RegistryIPAddress:5000> <ServerIPAddress(s)>

ServerIPAddress(s) represents the IP addresses of the server nodes in the system. Multiple IP addresses may be entered, separated by a space (" ").

Retrieve the following file from the Registry VM (make sure to replace the RegistryIPAddress with the actual IP):

curl -so install-shield.sh http://<RegistryIPAddress>/ericomshield/install-shield.sh
chmod +x install-shield.sh
sudo ./install-shield.sh -v <version-name> --registry <RegistryIPAddress:5000>

The version name format is: Rel-yy.mm.xxx (e.g., Rel-20.03.641). Use the version-name mentioned in the Shield Registry file (the file that was previously downloaded).

Rancher Manual Upgrade¶

If Rancher was upgraded during the latest release, it needs to be updated manually. Follow these instructions:

Login to the Rancher Server using: ericom/ericomshield . Go to /ericomshield and kill the running Rancher instance.

Find it using the first command and use the container ID to remove it:

docker ps | grep "rancher/rancher:"
sudo docker rm -f <ContainerID>

Now, retrieve the run-rancher service and run it:

curl -s -o run-rancher.sh http://<RegistryIPAddress>/ericomshield/run-rancher.sh
chmod +x run-rancher.sh
./run-rancher.sh

Open Rancher UI and verify that it is using the latest Kubernetes version. On the cluster, click`` Edit`` and under Kubernetes Options, make sure the latest option is selected: