Steps to Upgrade Glasswall Halo

Identify slim/full version

Based on what's purchased, Glasswall provides an OVA/VHD of slim or full version. Please follow the steps according to the version you have.

Slim version steps

• Follow the steps in the deployment page based on VMWare or Hyper-V to create a new VM using the new OVA/VHD.
• Make sure everything is running as expected in the new VM.
• Create a maintenance window of 30 minutes and inform stakeholders.
• If you have a DNS name, update the DNS to replace old IP address with the IP of the new VM.
• If you have Load Balancer, update the load balancer configuration to include the new IP and remove old IP.
• If you don't have a load balancer or a DNS name, inform the stakeholders about the new IP address.

Full version steps

• Backup mongodb data and create a mongodump

kubectl port-forward svc/mongo-svc 27017
# open another terminal on the vm
username=$(kubectl get secret mongodb-cdrplatform-cdrp-user -o json | jq -r '.data.username' | base64 -d)
password=$(kubectl get secret mongodb-cdrplatform-cdrp-user -o json | jq -r '.data.password' | base64 -d)
mongodump -h localhost -p 27017 --db cdrplatform --out halo_backup -u ${username:?} -p ${password:?}
zip -r halo_backup.zip halo_backup

• Copy the backup zip file from the VM to a local machine

scp glasswall@<ip-of-the-old-vm>:~/halo_backup.zip halo_backup.zip

• Follow the steps in the deployment page based on VMWare or Hyper-V to create a new VM using the new OVA/VHD.
• Copy the halo_backup.zip from the local machine to the VM.

scp halo_backup.zip glasswall@<ip-of-the-new-vm>:~/

• Restore the data in the new VM.

kubectl port-forward svc/mongo-svc 27017
# open another terminal on the vm
unzip halo_backup.zip
username=$(kubectl get secret mongodb-cdrplatform-cdrp-user -o json | jq -r '.data.username' | base64 -d)
password=$(kubectl get secret mongodb-cdrplatform-cdrp-user -o json | jq -r '.data.password' | base64 -d)
mongorestore --host localhost --port 27017 -u ${username:?} -p ${password:?}  --authenticationMechanism=SCRAM-SHA-256 --authenticationDatabase=cdrplatform halo_backup
# cleanup the backup files after the restore
rm -rf halo_backup halo_backup.zip