Upgrade from v9.1.x to v9.3.x
Overview
This guide describes the steps for in-place SPA upgrade from 9.1.x to 9.3.x. During the upgrade procedure the installer creates a backup of the current config files, replaces them with the new versions, and overrides values in the new files with those from the old installation
Do not change passwords when performing this upgrade. Use the same passwords from your SPA 9.1 installation. Otherwise, upgrade will fail. Changing passwords is supported after upgrading to SPA 9.3. Do not use dots "." in paths.
Prerequisites
- WorkFusion SPA 9.1.x is installed on RHEL 7.
- WorkFusion SPA 9.3.x product install packages are downloaded and extracted to
<PACKAGE_DIR>on all servers. - s3_hostname added as additional A or CNAME record for APP server.
- APP server's TLS certificate must be valid for both
app_hostnameands3_hostname(either wildcard, or SAN). - Prepare Business Processes to upgrade migration notes.
Predefined common variables (set your own values in config.yml before installation):
- WorkFusion user. Default is
wfuser. - WorkFusion Home Directory. Default is
/opt/workfusion. - WorkFusion Installer Directory. Default is
/opt/workfusion/wf_installer. Available: apm: APM serverapp: APP serverdb: DB serverocr: OCR servervds-master: AutoML Master servervds-slave: AutoML Agent server
Preparation
Ensure that DNS names for servers are configured according to DNS name configuration section.
The following DNS names are not required in 9.3 and can be removed:
crowdcontrol.taglib.db.example.com
cv-help.db.example.com
doc-upload.db.example.com
logos.crowdcomputing.db.example.com
public.crowdcontrol.db.example.com
recorder-images.db.example.com
secdocs.db.example.com
tinymce-resources.db.example.com
vds-models.db.example.com
vds-resources.db.example.com
workfusion-resources.db.example.com
workfusiondevelopment.db.example.com
workspace-resources.db.example.com
Stop the service on all servers.
Log into
<SERVER_ROLE>server.Run as
<WF_USER>.
wfmanager stop allCopy certificates and configs into 9.3
<PACKAGE_DIR>.The old certificates, secrets and config files can be reused from previous installation. They can be found in
/distr. Run as<WF_USER>on all servers:cd <PACKAGE_DIR> cp -r <INSTALL_DIR>/distr/2018-04-28-1524913731/certificates . cp <INSTALL_DIR>/distr/2018-04-28-1524913731/config_overrides.yml ./config_overrides.yml cp <INSTALL_DIR>/distr/2018-04-28-1524913731/secrets_overrides.yml ./secrets_overrides.ymlTurn off passwords verification checks. Starting from 9.1, we introduced verification for passwords complexity on precheck phase:
Note the following password policy rules for
secrets.yml:- In passwords, English alphabetical characters must be used.
- Passwords must contain 6-20 characters.
- Passwords must contain at least one capital letter [A-Z].
- Passwords must contain at least one number [0-9].
- Passwords must contain at least one of the following special symbols unless limitations are explicitly described in comments: "!", "*", "#", "%", "^", "@".
- Passwords must not contain the following symbols: "$", "&".
The passwords verification may cause failures during the upgrade. The thing is passwords from previous installation will be used during the upgrade and they may not satisfy new passwords requirements.
cd <PACKAGE_DIR> echo "passwords_check: false" >> ./config_overrides.ymlAdd
s3_hostnameinto the config file:
cd <PACKAGE_DIR>
echo "s3_hostname: app-s3.hostname" >> ./config_overrides.yml
Copy the license file. The license file should be copied to APP Server only.
Run as
<WF_USER>:cp <INSTALL_DIR>/workfusion/conf/license.properties .
Upgrade order
DB Server
APP Server
Other Servers (can be updated in parallel)
Upgrade steps
Go to WorkFusion Installer Directory:
cd <PACKAGE_DIR>
DB, APP, APM, OCR, AutoML Master, AutoML Agent servers
Perform precheck and preinstall operations.
Run as
root:./install.sh precheck <SERVER_ROLE> -e @config_overrides.yml -e @secrets_overrides.yml ./install.sh preinstall <SERVER_ROLE> -e @config_overrides.yml -e @secrets_overrides.ymlPerform installation and post-install check operations.
Run as
<WF_USER>:./install.sh install <SERVER_ROLE> -e @config_overrides.yml -e @secrets_overrides.yml ./install.sh check <SERVER_ROLE> -e @config_overrides.yml -e @secrets_overrides.yml
After upgrade to 9.3 default workfusion password will be changed to wf_password from secrets.yml.
Post-upgrade steps
You can review difference between old configuration files and new in changes log: /distr/latest/diff_changes_.log
Follow the steps from Post installation to make sure the environment works properly.