Upgrading Secure Tunnel

Upgrading Secure Tunnel from IBM Cloud Pak for AIOps

Secure Tunnel is upgraded when you upgrade IBM Cloud Pak for AIOps. For details about upgrading IBM Cloud Pak for AIOps, see Upgrading.

Upgrading Secure Tunnel as a stand-alone component in your Red Hat OpenShift cluster

1. Configure automatic catalog polling

   1. Log in to the console for your OpenShift cluster.

   2. Go to Administration > Cluster Settings.

   3. Click Configuration, then scroll down and click OperatorHub.

   4. Select Sources, then scroll down and click ibm-aiops-catalog.

   5. Click YAML to switch to the YAML view, and if spec.image is not set to icr.io/cpopen/ibm-aiops-catalog@sha256:1652f745216637eed1f25eddab55181d8b55538c56f5c427a7122d61d467b23e, then update the YAML to have the following entry in the spec block, and save it.

      spec:
        displayName: ibm-aiops-catalog
        publisher: IBM Content
        sourceType: grpc
        image: icr.io/cpopen/ibm-aiops-catalog@sha256:1652f745216637eed1f25eddab55181d8b55538c56f5c427a7122d61d467b23e
      

2. Update the operator subscription

   Use the following steps to update the spec.channel value of the Secure Tunnel subscription to the release that you want to upgrade to.

   1. Log in to the console for your OpenShift cluster.

   2. Select Home > Search.

   3. From the Project list, select the project (namespace) that your Secure Tunnel subscription is deployed in. This is your Secure Tunnel project if your deployment is namespace scoped, or openshift-operators if your deployment has a cluster wide scope.

   4. In the Resources list, select SUB Subscription. A list of subscriptions is displayed.

   5. Click the subscription that has the name ibm-secure-tunnel-operator. A new window with the subscription details for ibm-secure-tunnel-operator is displayed.

   6. Click the value for the Update channel box. A new window called Change Subscription update channel is displayed.

   7. Change the channel to the version that you want and click Save.

      If the subscription has been configured with Manual for the Update approval, then you need to click Upgrade available on the Upgrade status > Preview InstallPlan > Approve to approve this upgrade.

      Note: You need to upgrade the channel versions one by one. For example, if your current channel version is 3.7.x, you cannot skip the 4.1.x to change the channel to 4.2.x. You must upgrade it to 4.1.x and then upgrade it to 4.2.x.

3. Verify the deployment

   Use the following procedure to check the status of your upgraded Secure Tunnel deployment. It takes around 2-10 minutes for the upgrade to complete (subject to the speed with which images can be pulled).

   1. Log in to the console for your OpenShift cluster.

   2. Click Operators > Installed Operators.

   3. From the Project list, select the project (namespace) that Secure Tunnel is deployed in if your deployment is namespace scoped, or openshift-operators if your deployment has a cluster-wide scope.

   4. Locate IBM Secure Tunnel in the list and verify that the annotation shows the version that is required.