Updating Z-stream of version in Openshift Container Platform

-

Whenever we want to upgrade the OCP to next recommended upgrade path, we want to first move to latest patch version of major and minor version of OCP we are running.

For instance, if your Openshift is version 4.15.11 (x.y.z) then,

Major (x) version is 4, Minor (y) version is 15 and patch (z) version is 11.

First update the master/control node and then worker nodes. The worker nodes in case of update can differ from control node by y-2. This allows to plan for update in large clusters that is staggered across in time.

With that bit cleared let us see the procedure to update the z version of OCP version.

1> Just run following to lists the compatible update releases

# oc adm upgrade

Or run below to see available updates,

# oc adm upgrade --include-not-recommended

Note: Always consult the OSUS upgrade Graph for valid path upgrades

2> After having made the decision, considering impact of updates on existing set-up, go ahead and update the control node.

# oc adm upgrade --to=4.15.33

3> To update worker nodes, one has to look into their Machine Control Pools (MCP)

# oc get mcp

Learn more on MCP here .

4> Get the list of nodes

# oc get nodes

5> List the MCP that are paused.

# oc get mcp -o json | jq -r '["MCP","Paused"], ["---","------"], (.items[] | [(.metadata.name),                        (.spec.paused)]) | @tsv' | grep -v worker

6> Unpause one of the MCP pools, so that it starts upgrading one node at a time in the pool and node reboots after that.

# oc patch mcp/mcp-1 --type merge --patch '{"spec":{"paused":false}}'

Where mcp-1 is name of the pool

7> Confirm the mcp group is unpaused,

# oc get mcp -o json | jq -r '["MCP","Paused"], ["---","------"], (.items[] | [(.metadata.name), (.spec.paused)]) | @tsv' | grep -v worker

8> Check for the status of nodes in group that was unpaused are showing READY.

# oc get nodes

Here, check the columns NAME, STATUS, ROLES.

9> Check health of cluster

# oc get clusterversion

Progressing column should be false.

10> Check no other mcp groups are unpaused at the end of downtime.

11> Check cluster Operators

# oc get co

With Available having all True and Progressing column having all False.

12> Check pod health:

# oc get po -A | grep -E -iv 'complete|running'

This should not list any pods, which implies, all well post update.


Comments

Post a Comment

Popular posts from this blog

VLAN External Network in Openshift using NMState Operators and Multus

-
Image
NMstate operators and Multus CNI provide us with plugins and APIs, to set up external network in openshift container ecosystem. Let us see how we can implement a external VLAN networking for certain pods/VMs apart from, pods/VMs using internal cluster networking. When we install NMState operator, it avails us 3 different APIs, namely: Node Network Configuration Policy : Node level network settings implementation.          # oc get nncp Node Network State : The current state of node network is stored in this.         # oc get nns/<node-name> Node Network Configuration Enactment : The status of NNCP implementation across cluster nodes, is checked in this object.         # oc get nnce Network Attachment Definition (NAD) : Apart from above APIs, we will also make use of NAD from multus CNI plugin framework. This implements namespaced object that exposes existing layer 2 network dev...
Read more

Migrating from OpenshiftSDN to OVNKubernetes CNI

-
APIs involved in this migrations are: Network.operator.openshift.io Network.config.openshift.io Operators involved in this migrations are: Cluster Network Operator (CNO) Machine Config Operator (MCO) Refer to pre-requisite steps here , jotted in another post. Update to latest compatible z-stream .  With  that taken care, proceed below. 1> Backup existing cluster network config:      # oc get Network.config.openshift.io cluster -o yaml > cluster-openshiftSDN.yaml 2> Verify that  OVN_SDN_MIGRATION_TIMEOUT   environment variable is set and is  equal to  0s. 3> Set the migration value to null in CNO object cluster:                  # oc patch Network.operator.openshift.io cluster  -- type='merge'  --patch '{"spec":{"migration":null}}' At this time, CNO updates status of Network.config.openshift.io   CR  named  cluster accordingly. MCO rolls out an update to sys...
Read more