A collection of Heat templates for upgrading from tripleo Liberty to Mitaka.
This environment includes the following customisations:
- Network isolation + bonding
- Director-installed Ceph OSDs + monitors
- Setting timezone
- TLS SSL encryption on public endpoints
NOTE: The SSH keys, passwords, user names, and addresses used in these example files are for reference purposes only and do not correspond to an existing system. If you use these example files as a reference template please replace these with information specific to your own environment.
Workflow
- Deploy overcloud with customisations
- Update undercloud to latest version of OSP 8
- reboot undercloud if kernel or openvswitch version changes
- Update overcloud to latest version of OSP 8
- Update overcloud images to latest version of OSP 8
- reboot overcloud nodes if kernel or openvswitch version changes
- Upgrade undercloud to OSP 9
- Install OSP 9 overcloud images
- Add new TLS endpoints to enable-tls.yaml
- Create new Ceph client key for director-deployed Ceph
- Run Aodh migration
- it is possible to remove ceilometer-[alarm,notification] pcs services, resources, and rpm pkg prior to this step
- Aodh migration and Keystone migration, steps 9 & 10, require OSP 8 repos on overcloud
- Migrate Keystone to WSGI
- Add OSP 9 repos to the overcloud either before or during the pacemaker-init step
- Run major-upgrade-pacemaker-init
- Make sure all pcs services are online and running after steps 3, 9, 10, 11, 12
- Update object storage nodes if present
- Update controller nodes
- reboot controllers if kernel or openvswitch version changes
- controllers must be rebooted one at a time to preserve HA
- make sure all pcs services are up and running on all nodes before rebooting a node
- Upgrade the Ceph nodes
- Reboot if kernel or openvswitch version changes
- Requires setting noout and norebalance then rebooting OSDs one at a time
- check ceph health and PG map health after each OSD reboot
- Update compute nodes
- Disable nova-compute and migrate instances off each compute node before updating
- after updating compute, reboot if kernel or openvswitch version changes
- re-enable nova-compute and migrate instances back before proceeding to the next compute
- Run final converge deploy command with --force-postconfig switch
- make sure all pcs services are up and running after converge
- verify new service endpoints are accessible: sahara, aodh, gnocchi