LATEST VERSION: 1.9 - CHANGELOG
IPsec Add-On for PCF v1.8

Upgrading the IPsec Add-on for PCF

Page last updated:

This topic describes how to upgrade the IPsec Add-on for PCF.

Assumption about Ops Manager Versions

This topic assumes the following about your Ops Manager, BOSH CLI, and runtime config.

Ops Manager Version BOSH CLI Version Runtime Config More information
1.10 and earlier CLI v1 single, default, runtime config file
  • BOSH CLI v1
  • 1.11 and later CLI v2+ runtime config in multiple, named files, so that ipseccan be managed separately

    Breaking Change: If you are using PCF v1.11 or later, you must use named runtime configs. If you have not already split your runtime config into multiple named files, do so before upgrading the IPsec Add-on for PCF. For general information about named runtime config files, see Configs.

    Upgrade IPsec Add-on

    To upgrade the IPsec add-on to a later version, do the following:

    1. Download the IPsec add-on software binary from the Pivotal Network to your local machine.

    2. To copy the software binary to your Ops Manager VM, run the following command:

      scp -i PATH-TO-PRIVATE-KEY ipsec-VERSION.tar.gz ubuntu@YOUR-OPS-MANAGER-VM-IP:
      

      For example:

      $ cp -i ~/.ssh/my-key.pem ~/Downloads/ipsec-1.8.14.tgz ubuntu@192.168.0.2: 
    3. SSH into the Ops Manager VM. For how to do this, see SSH into Ops Manager.

    4. Retrieve the latest runtime config by running one of the following commands:

      For Ops Manager v1.10 or earlier:

      bosh runtime-config > PATH-TO-SAVE-THE-RUNTIME-CONFIG
      

      For example:

      bosh runtime-config > /tmp/ipsec.yml


      For Ops Manager v1.11 or later:

      bosh2 -e BOSH-ENVIRONMENT runtime-config  --name ipsec > PATH-TO-SAVE-THE-RUNTIME-CONFIG
      

      For example:

      bosh2 -e my-env runtime-config  --name ipsec > /tmp/ipsec.yml
    5. Upload the latest IPsec release:

      For Ops Manager v1.10 or earlier:

      bosh upload release PATH-TO-NEW-IPSEC-RELEASE
      

      For example:

      bosh upload release ~/ipsec-1.8.14.tgz


      For Ops Manager v1.11 or later:

      bosh2 -e BOSH-ENVIRONMENT upload-release PATH-TO-NEW-IPSEC-RELEASE
      

      For example:

      bosh2 -e my-env upload-release ~/ipsec-1.8.14.tgz
    6. Edit the ipsec runtime config to set the new release version.
      For example, edit the version in /tmp/ipsec.yml as follows:

      releases:
      - {name: ipsec, version: 1.8.14} 

    7. Update the runtime config:

      For Ops Manager v1.10 or earlier:

      bosh update runtime-config PATH-TO-SAVE-THE-RUNTIME-CONFIG
      

      For example:

      bosh update runtime-config /tmp/ipsec.yml


      For Ops Manager v1.11 or later:

      bosh2 -e BOSH-ENVIRONMENT update-runtime-config --name=ipsec PATH-TO-SAVE-THE-RUNTIME-CONFIG
      

      For example:

      bosh2 -e my-env update-runtime-config --name=ipsec /tmp/ipsec.yml 
    8. Navigate to your Installation Dashboard in Ops Manager.

    9. Click Apply Changes.

    Create a pull request or raise an issue on the source for this page in GitHub