Skip to main content
A newer release of this product is available.

Upgrade Rancher on NetApp HCI

Contributors netapp-pcarriga netapp-dbagwell
PDFs

To upgrade Rancher software, you can use the NetApp Hybrid Cloud Control (HCC) UI or REST API. HCC provides an easy button process to upgrade the components of your Rancher deployment, including Rancher server, Rancher Kubernetes Engine (RKE), and the management cluster's node OS (for security updates). You can alternatively use the API to help automate upgrades.

Upgrades are available by component instead of a cumulative package. As such, some component upgrades such as the Ubuntu OS come available on a more rapid cadence. Upgrades affect only your Rancher server instance and the management cluster that Rancher Server is deployed on. Upgrades to the management cluster node's Ubuntu OS are for critical security patches only and do not upgrade the operating system. User clusters cannot be upgraded from NetApp Hybrid Cloud Control.

What you'll need

  • Admin privileges: You have storage cluster administrator permissions to perform the upgrade.

  • Management services: You have updated your management services bundle to the latest version.

Important You must upgrade to the latest management services bundle 2.17 or later for Rancher functionality.

  • System ports: If you are using NetApp Hybrid Cloud Control for upgrades, you have ensured that the necessary ports are open. See Network ports for more information.

  • End User License Agreement (EULA): Beginning with management services 2.20.69, you must accept and save the EULA before using the NetApp Hybrid Cloud Control UI or API to upgrade a Rancher deployment:

    1. Open the IP address of the management node in a web browser:

      https://<ManagementNodeIP>

    2. Log in to NetApp Hybrid Cloud Control by providing the storage cluster administrator credentials.

    3. Select Upgrade near the top right of the interface.

    4. The EULA pops up. Scroll down, select I accept for current and all future updates, and select Save.

Upgrade options

Choose one of the following upgrade processes:

Use NetApp Hybrid Cloud Control UI to upgrade a Rancher deployment

Using the NetApp Hybrid Cloud Control UI, you can upgrade any of these components in your Rancher deployment:

  • Rancher server

  • Rancher Kubernetes Engine (RKE)

  • Node OS security updates

What you'll need

  • A good internet connection. Dark site upgrades (upgrades at a site without external connectivity) are not available.

Steps

  1. Open the IP address of the management node in a web browser:

    https://<ManagementNodeIP>

  2. Log in to NetApp Hybrid Cloud Control by providing the storage cluster administrator credentials.

  3. Select Upgrade near the top right of the interface.

  4. On the Upgrades page, select Rancher.

  5. Select the Actions menu for the software you want to upgrade.

    • Rancher server

    • Rancher Kubernetes Engine (RKE)

    • Node OS security updates

  6. Select Upgrade for Rancher server or RKE upgrades or Apply Upgrade for Node OS security updates.

    Note For node OS, unattended upgrades for security patches are run on a daily basis but the node is not rebooted automatically. By applying upgrades, you are rebooting each node for the security updates to take effect.

A banner appears indicating the component upgrade is successful. There could be up to a 2 minute delay before NetApp Hybrid Cloud Control UI shows the updated version number.

Use NetApp Hybrid Cloud Control API to upgrade a Rancher deployment

You can use APIs to upgrade any of these components in your Rancher deployment:

  • Rancher server

  • Rancher Kubernetes Engine (RKE)

  • Node OS (for security updates)

You can use an automation tool of your choice to run the APIs or the REST API UI available on the management node.

Options

Upgrade Rancher Server

API commands

  1. Initiate the list upgrade versions request:

    curl -X POST "https://<managementNodeIP>/k8sdeployer/1/upgrade/rancher-versions" -H "accept: application/json" -H "Authorization: Bearer ${TOKEN}"
    Note You can find the bearer ${TOKEN} used by the API command when you authorize. The bearer ${TOKEN} is in the curl response.

  2. Get task status using task ID from previous command and copy the latest version number from the response:

    curl -X GET "https://<mNodeIP>/k8sdeployer/1/task/<taskID>" -H "accept: application/json" -H "Authorization: Bearer ${TOKEN}"

  3. Initiate Rancher server upgrade request:

    curl -X PUT "https://<mNodeIP>/k8sdeployer/1/upgrade/rancher/<version number>" -H "accept: application/json" -H "Authorization: Bearer"

  4. Get task status using task ID from upgrade command response:

    curl -X GET "https://<mNodeIP>/k8sdeployer/1/task/<taskID>" -H "accept: application/json" -H "Authorization: Bearer ${TOKEN}"
REST API UI steps

  1. Open the management node REST API UI on the management node:

    https://<ManagementNodeIP>/k8sdeployer/api/

  2. Select Authorize and complete the following:

    1. Enter the cluster user name and password.

    2. Enter the client ID as mnode-client.

    3. Select Authorize to begin a session.

    4. Close the authorization window.

  3. Check for the latest upgrade package:

    1. From the REST API UI, run POST /upgrade​/rancher-versions.

    2. From the response, copy the task ID.

    3. Run GET /task​/{taskID} with the task ID from the previous step.

  4. From the /task​/{taskID} response, copy the latest version number you want to use for the upgrade.

  5. Run the Rancher Server upgrade:

    1. From the REST API UI, run PUT /upgrade​/rancher​/{version} with the latest version number from the previous step.

    2. From the response, copy the task ID.

    3. Run GET /task​/{taskID} with the task ID from the previous step.

The upgrade has finished successfully when the PercentComplete indicates 100 and results indicates the upgraded version number.

Upgrade RKE

API commands

  1. Initiate the list upgrade versions request:

    curl -X POST "https://<mNodeIP>/k8sdeployer/1/upgrade/rke-versions" -H "accept: application/json" -H "Authorization: Bearer ${TOKEN}"
    Note You can find the bearer ${TOKEN} used by the API command when you authorize. The bearer ${TOKEN} is in the curl response.

  2. Get task status using task ID from previous command and copy the latest version number from the response:

    curl -X GET "https://<mNodeIP>/k8sdeployer/1/task/<taskID>" -H "accept: application/json" -H "Authorization: Bearer ${TOKEN}"

  3. Initiate the RKE upgrade request

    curl -X PUT "https://<mNodeIP>/k8sdeployer/1/upgrade/rke/<version number>" -H "accept: application/json" -H "Authorization: Bearer"

  4. Get task status using task ID from upgrade command response:

    curl -X GET "https://<mNodeIP>/k8sdeployer/1/task/<taskID>" -H "accept: application/json" -H "Authorization: Bearer ${TOKEN}"
REST API UI steps

  1. Open the management node REST API UI on the management node:

    https://<ManagementNodeIP>/k8sdeployer/api/

  2. Select Authorize and complete the following:

    1. Enter the cluster user name and password.

    2. Enter the client ID as mnode-client.

    3. Select Authorize to begin a session.

    4. Close the authorization window.

  3. Check for the latest upgrade package:

    1. From the REST API UI, run POST /upgrade​/rke-versions.

    2. From the response, copy the task ID.

    3. Run GET /task​/{taskID} with the task ID from the previous step.

  4. From the /task​/{taskID} response, copy the latest version number you want to use for the upgrade.

  5. Run the RKE upgrade:

    1. From the REST API UI, run PUT /upgrade/rke/{version} with the latest version number from the previous step.

    2. Copy the task ID from the response.

    3. Run GET /task​/{taskID} with the task ID from the previous step.

The upgrade has finished successfully when the PercentComplete indicates 100 and results indicates the upgraded version number.

Apply node OS security updates

API commands

  1. Initiate the check upgrades request:

    curl -X GET "https://<mNodeIP>/k8sdeployer/1/upgrade/checkNodeUpdates" -H "accept: application/json" -H "Authorization: Bearer ${TOKEN}"
    Note You can find the bearer ${TOKEN} used by the API command when you authorize. The bearer ${TOKEN} is in the curl response.

  2. Get task status using task ID from previous command and verify a more recent version number is available from the response:

    curl -X GET "https://<mNodeIP>/k8sdeployer/1/task/<taskID>" -H "accept: application/json" -H "Authorization: Bearer ${TOKEN}"

  3. Apply the node updates:

    curl -X POST "https://<mNodeIP>/k8sdeployer/1/upgrade/applyNodeUpdates" -H "accept: application/json" -H "Authorization: Bearer"
    Note For node OS, unattended upgrades for security patches are run on a daily basis but the node is not rebooted automatically. By applying upgrades, you are rebooting each node sequentially for the security updates to take effect.

  4. Get task status using task ID from the upgrade applyNodeUpdates response:

    curl -X GET "https://<mNodeIP>/k8sdeployer/1/task/<taskID>" -H "accept: application/json" -H "Authorization: Bearer ${TOKEN}"
REST API UI steps

  1. Open the management node REST API UI on the management node:

    https://<ManagementNodeIP>/k8sdeployer/api/

  2. Select Authorize and complete the following:

    1. Enter the cluster user name and password.

    2. Enter the client ID as mnode-client.

    3. Select Authorize to begin a session.

    4. Close the authorization window.

  3. Verify if an upgrade package is available:

    1. From the REST API UI, run GET /upgrade/checkNodeUpdates.

    2. From the response, copy the task ID.

    3. Run GET /task​/{taskID} with the task ID from the previous step.

    4. From the /task​/{taskID} response, verify that there is a more recent version number than the one currently applied to your nodes.

  4. Apply the node OS upgrades:

    Note For node OS, unattended upgrades for security patches are run on a daily basis but the node is not rebooted automatically. By applying upgrades, you are rebooting each node sequentially for the security updates to take effect.

    1. From the REST API UI, run POST /upgrade​/applyNodeUpdates.

    2. From the response, copy the task ID.

    3. Run GET /task​/{taskID} with the task ID from the previous step.

    4. From the /task​/{taskID} response, verify that the upgrade has been applied.

The upgrade has finished successfully when the PercentComplete indicates 100 and results indicates the upgraded version number.

Find more information