Upgrading IPsec for VMware Tanzu

This topic tells you how to upgrade IPsec for VMware Tanzu.

For product versions and upgrade paths, see Upgrade Planner.

Assumption about Tanzu Operations Manager Versions

This topic assumes the following about your Tanzu Operations Manager, BOSH CLI, and runtime config.

Tanzu Operations Manager Version	BOSH CLI Version	Runtime Config	More information
1.12 and later	CLI v2+	runtime config in multiple, named files, so that ipsec can be managed separately	BOSH CLI v2 Configs - bosh

Breaking change If you are using TAS for VMs v1.12 or later, you must use named runtime configs. If you have not already split your runtime config into multiple named files, do so before upgrading IPsec for VMware Tanzu. For general information about named runtime config files, see Configs.

Upgrade IPsec

To upgrade IPsec to a later version, do the following:

1. Download the IPsec software binary from the VMware Tanzu Network to your local machine.

2. To copy the software binary to your Tanzu Operations Manager VM, run the following command:

   scp -i PATH-TO-PRIVATE-KEY ipsec-VERSION.tar.gz ubuntu@YOUR-OPS-MANAGER-VM-IP:
   

   For example:

   $ cp -i ~/.ssh/my-key.pem ~/Downloads/ipsec-1.8.14.tgz ubuntu@192.168.0.2: 

3. SSH into the Tanzu Operations Manager VM. For how to do this, see Logging in to Tanzu Operations Manager VMs with SSH.

4. Retrieve the latest runtime config by running the following command:

   bosh -e BOSH-ENVIRONMENT runtime-config  --name ipsec > PATH-TO-SAVE-THE-RUNTIME-CONFIG
   

   For example:

   bosh -e my-env runtime-config  --name ipsec > /tmp/ipsec.yml

5. Upload the latest IPsec release:

   bosh -e BOSH-ENVIRONMENT upload-release PATH-TO-NEW-IPSEC-RELEASE
   

   For example:

   bosh -e my-env upload-release ~/ipsec-1.8.14.tgz

6. Edit the ipsec runtime config to set the new release version.

   For example, edit the version in /tmp/ipsec.yml as follows:

    releases: - {name: ipsec, version: 1.8.14} 

7. Update the runtime config:

   bosh -e BOSH-ENVIRONMENT update-runtime-config --name=ipsec PATH-TO-SAVE-THE-RUNTIME-CONFIG
   

   For example:

   bosh -e my-env update-runtime-config --name=ipsec /tmp/ipsec.yml 

8. Go to your Installation Dashboard in Tanzu Operations Manager.

9. If you are using Tanzu Operations Manager v2.3 or later, click Review Pending Changes. For more information about this Tanzu Operations Manager page, see Reviewing your pending product changes in Tanzu Operations Manager.

10. Click Apply Changes.