Critical 4.1.2 -> 4.2.0 upgrade issues/fixes

Follow

 

Summary

This is a summary of critical upgrade issues which are fixed in 4.2.1, ie, the upgrade itself may fail or cause certain functionality to stop working post-upgrade.

If you haven't upgraded to 4.2.x yet, you can skip 4.2.0 and go direct to 4.2.1 (GA'd on 2015-12-07), or you can follow the steps below. We would strongly urge you to upgrade to 4.2.1.


Pre-upgrade Steps

Pre-1. Fix any duplicate public IP addresses of stopped instances (see EUCA-11623 for more info).

This is a one-liner you run on the CLC, while logged in as root (be sure to scroll horizontally to capture the entire command):

psql -h /var/lib/eucalyptus/db/data -p 8777 eucalyptus_shared -c "update \
eucalyptus_cloud.metadata_instances set metadata_vm_public_address = '0.0.0.0', \
version = version + 1 where metadata_vm_public_address != '0.0.0.0' and \
(metadata_vm_public_address = '' or ( metadata_vpc_id is null and \
metadata_state = 'STOPPED' ) );"


Pre-2. Certain security groups might not have their ingressRules correctly generated (see EUCA-11628 for more info).

These are 3 one-liners you run on the CLC, while logged in as root (be sure to scroll horizontally to capture the entire command):

psql -h /var/lib/eucalyptus/db/data -p 8777 eucalyptus_shared -c "update \
eucalyptus_cloud.metadata_network_rule set version=version+1, \
metadata_network_rule_protocol_number=6 where metadata_network_rule_protocol_number is \
null and metadata_network_rule_protocol = 'tcp';"
psql -h /var/lib/eucalyptus/db/data -p 8777 eucalyptus_shared -c "update \
eucalyptus_cloud.metadata_network_rule set version=version+1, \
metadata_network_rule_protocol_number=1 where metadata_network_rule_protocol_number is \
null and metadata_network_rule_protocol = 'icmp';"
psql -h /var/lib/eucalyptus/db/data -p 8777 eucalyptus_shared -c "update \
eucalyptus_cloud.metadata_network_rule set version=version+1, \
metadata_network_rule_protocol_number=17 where metadata_network_rule_protocol_number is \
null and metadata_network_rule_protocol = 'udp';"

Post-upgrade Steps

Post-1. Fix cloud.identifier_canonicalizer property (see EUCA-11624 for more info).

This is a one-liner you run on the CLC, while logged in as root (be sure to scroll horizontally to capture the entire command):

psql -h /var/lib/eucalyptus/db/data -p 8777 eucalyptus_shared -c "update \
eucalyptus_config.config_static_property set config_static_field_name=\
'com.eucalyptus.compute.common.internal.identifier.ResourceIdentifiers.identifier_canonicalizer' where \
config_static_prop_name='cloud.identifier_canonicalizer';"


Post-2. Ensure the new DNS resolver which replaces the legacy framework is enabled (see EUCA-11634 for more info).

This is a one-liner you run on the CLC, while logged in as root. First make sure you have the admin credentials set:

eval `clcadmin-assume-system-credentials`

then run this one-liner:

euctl dns.split_horizon.enabled=true

 

Have more questions? Submit a request

Comments

Powered by Zendesk