Updating to an Errata Release

3 Updating to an Errata Release

Important:

The software described in this documentation is either in Extended Support or Sustaining Support. See Oracle Open Source Support Policies for more information.

We recommend that you upgrade the software described by this documentation as soon as possible.

This section describes how to update Oracle Cloud Native Environment to an errata release. You can use this procedure to update Kubernetes to the latest errata release. This updates the environment within the same major.minor release. For example, Release 1.5 is updated to the latest available software.

Perform each step in this chapter in order to update your environment to an errata release.

Important:

Do not change the ULN channel or Oracle Linux yum server repository. They should remain as you set them during the installation.

Updating the Operator Node

Update the operator node with the new Oracle Cloud Native Environment software packages.

To update the operator node:

On the operator node, stop the olcne-api-server service:
```
sudo systemctl stop olcne-api-server.service
```
Update the Platform CLI, Platform API Server, and utilities packages.

On Oracle Linux 8 enter:
```
sudo dnf upgrade olcnectl olcne-api-server olcne-utils
```
On Oracle Linux 7 enter:
```
sudo yum update olcnectl olcne-api-server olcne-utils
```

Start the olcne-api-server service:

sudo systemctl start olcne-api-server.service

Updating the Kubernetes Nodes

Update the Kubernetes nodes with the new Oracle Cloud Native Environment packages.

On the operator node, use the olcnectl environment update command to update the Platform Agent on each Kubernetes node in the environment. This example updates the Platform Agent on all nodes in the myenvironment environment.

olcnectl environment update olcne \
--environment-name myenvironment

The Platform Agent is updated and the service is restarted on each node.

Upgrading qemu-kvm

The Oracle Cloud Native Environment Release 1.5.3 errata update for Oracle Linux 8 requires upgrading the qemu-kvm packages.

If your hosts are running Oracle Linux 8, and you are updating to Oracle Cloud Native Environment Release 1.5.3, you must perform the steps in this section to upgrade qemu-kvm.

If you are updating from a release prior to 1.5.3 to a release after 1.5.3 (that is, not directly updating to Release 1.5.3), and you have not performed this step, you should also upgrade qemu-kvm using the steps below.

Important:

The qemu-kvm packages must be upgraded if you are updating to a errata update after Release 1.5.3 and you have not upgraded them in the Release 1.5.3 errata update. That is, you skipped the errata update for Release 1.5.3.

Run the following commands on all Kubernetes worker and control plane nodes to upgrade the qemu-kvm packages.

To update qemu-kvm:

Enable the ol8_kvm_appstream application stream:

sudo dnf config-manager --set-enabled ol8_kvm_appstream

Enable the virt:kvm_utils module:

sudo dnf module enable -y virt:kvm_utils

Upgrade the qemu-kvm module:
```
sudo dnf update -y qemu-kvm
```

Updating the Kubernetes Cluster

Update the cluster to the latest Kubernetes errata release.

On the operator node, use the olcnectl module update command to update to the latest Kubernetes errata release. This example updates a Kubernetes module named mycluster in the myenvironment environment to the latest Kubernetes errata release.

olcnectl module update \
--environment-name myenvironment \
--name mycluster

If you are using the NGINX load balancer deployed by the Platform CLI, you should also update NGINX on the control plane nodes. You specify the location from which to pull the NGINX container image used to update NGINX using the --nginx-image option. For example, include this additional line in the olcnectl module update command to update NGINX from the Oracle Container Registry:

--nginx-image container-registry.oracle.com/olcne/nginx:1.17.7

Important:

Make sure you update to the latest NGINX release for your Oracle Cloud Native Environment release. To get the version number of the latest NGINX container image, see Release Notes.

The nodes in the cluster are updated to the latest errata release and the cluster's health is validated.

Updating Istio

If you have the Istio module installed, you must also update it.

Note:

Make sure you update to the latest release of Istio. To get the version number of the latest Istio release for Oracle Cloud Native Environment Release 1.5 see Release Notes.

To update Istio:

On the operator node, use the olcnectl module update command to update to the latest Istio release available for Oracle Cloud Native Environment Release 1.5. This example updates an Istio module named myistio in the myenvironment environment to Istio Release 1.15.7.

olcnectl module update \
--environment-name myenvironment \
--name myistio \
--istio-version 1.15.7

The --istio-version option specifies the release to which you want to update. This example uses release number 1.15.7.

When you update Istio, the update iterates through each Istio release up to Release 1.15.7. When each node in the cluster is updated to the next Istio release, the cluster's health is validated. If the cluster is healthy, the cycle of back up, update to the next release, and cluster validation starts again, until all nodes are updated to the latest Istio release.