Upgrade from v9.1.x to v9.2.x
The guide describes the steps for in-place SPA upgrade from v9.1.x to v9.2.x. During the upgrade procedure, the installer:
- Creates a backup of the current config files.
- Replaces them with new versions.
- Overrides values in new files with those from the old installation.
caution
Do not change passwords when performing this upgrade. Use the same passwords from your SPA 9.1 installation. Otherwise, upgrade will fail. Changing passwords is supported after upgrading to SPA 9.2. Do not use
dots "." in paths.
Prerequisites
- WorkFusion SPA 9.1.x is installed on RHEL 7.
- WorkFusion SPA 9.2.x product install packages are downloaded and extracted to <PACKAGE_DIR> on all servers.
- s3_hostname added as additional A or CNAME record for APP server.
- APP server's TLS certificate must be valid for both app_hostname and s3_hostname (either wildcard, or SAN).
- Prepare Business Processes to upgrade migration notes.
Predefined common variables (set your own values in config.yml before the installation):
WF_USER: WorkFusion user. Default iswfuser- <INSTALL_DIR>: WorkFusion Home Directory. Default is /opt/workfusion
- <PACKAGE_DIR>: WorkFusion Installer Directory. Default is /opt/workfusion/wf_installer. Available <SERVER_ROLE>:
- apm: APM server
- app: APP server
- db: DB server
- ocr: OCR server
- vds-master: AutoML Master server
- vds-slave: AutoML Agent server
Preparation
Ensure, that DNS names for servers are configured according to the DNS name configuration section.
The following DNS names are not required in 9.2 and can be removed:
crowdcontrol.taglib.db.example.com cv-help.db.example.com doc-upload.db.example.com logos.crowdcomputing.db.example.com public.crowdcontrol.db.example.com recorder-images.db.example.com secdocs.db.example.com tinymce-resources.db.example.com vds-models.db.example.com vds-resources.db.example.com workfusion-resources.db.example.com workfusiondevelopment.db.example.com workspace-resources.db.example.comStop the service on all servers.
- Log into <SERVER_ROLE> server.
- Run as
<WF_USER>.
wfmanager stop allOn APP server remove context directory of Control Tower artifact from previous release.
This step is only required if you perform update to SPA 9.2.0. Since SPA v9.2.1, it's performed automatically.
Log into APP server.
Run as
<WF_USER>.
rm -rf <INSTALL_DIR>/workfusion/webapps/workfusionCopy certificates and configs into the 9.2 <PACKAGE_DIR>.
The old certificates, secrets and config files can be reused from the previous installation. They can be found in
/distr/2018-04-28-1524913731/.Run as <WF_USER> on all servers:
cd <PACKAGE_DIR> cp -r <INSTALL_DIR>/distr/2018-04-28-1524913731/certificates . cp <INSTALL_DIR>/distr/2018-04-28-1524913731/config_overrides.yml ./config_overrides.yml cp <INSTALL_DIR>/distr/2018-04-28-1524913731/secrets_overrides.yml ./secrets_overrides.ymlTurn off password verification checks. Starting from v9.1, we introduced verification for passwords complexity on precheck phase.
Note the following password policy rules for secrets.yml:
- In passwords English alphabetical characters must be used.
- Passwords must contain 6-20 characters.
- Passwords must contain at least one capital letter [A-Z].
- Passwords must contain at least one number [0-9].
- Passwords must contain at least one of the following special symbols unless limitations are explicitly described in comments: "!", "*", "#", "%", "^", "@".
- Passwords must not contain the following symbols: "$", "&".
The passwords verification may cause failures during the upgrade. The thing is passwords from previous installation will be used during the upgrade and they may not satisfy new passwords requirements.
cd <PACKAGE_DIR> echo "passwords_check: false" >> ./config_overrides.ymlAdd s3_hostname into the config file:
cd <PACKAGE_DIR> echo "s3_hostname: app-s3.hostname" >> ./config_overrides.ymlCopy the license file to APP Server only.
Run as
<WF_USER>.cp <INSTALL_DIR>/workfusion/conf/license.properties .
Upgrade order
- DB Server
- APP Server
- Other servers (can be updated in parallel)
Upgrade steps
Go to WorkFusion Installer Directory:
cd <PACKAGE_DIR>
DB, APP, APM, OCR, AutoML-Master, AutoML-Agent servers
Perform Precheck and Preinstall operations.
Run as
root../install.sh precheck <SERVER_ROLE> -e @config_overrides.yml -e @secrets_overrides.yml ./install.sh preinstall <SERVER_ROLE> -e @config_overrides.yml -e @secrets_overrides.ymlPerform installation and post-install check operations.
Run as
<WF_USER>../install.sh install <SERVER_ROLE> -e @config_overrides.yml -e @secrets_overrides.yml ./install.sh check <SERVER_ROLE> -e @config_overrides.yml -e @secrets_overrides.yml
After upgrade to v9.2, the default workfusion password will be changed to wf_password from secrets.yml.
Post-upgrade Steps
You can review difference between old configuration files and new in changes log: /distr/2018-04-28-1527769370/diff_changes_.log
Follow the steps from the Post-installation guide to make sure the environment works properly.