After you have successfully upgraded the RaaS node, you can then upgrade any Salt masters that use the Master Plugin to connect to SaltStack Config.
Before you upgrade the Salt master(s), ensure that the pip3 application is installed on the Salt masters. If you are upgrading from the latest version of the Master Plugin, this application is already installed.
To upgrade the Master Plugin on a Salt master:
- Stop the
salt-master
service using the following command:sudo systemctl stop salt-master
- Check which version of Python is running on the Salt master. If it is running Python 3.6 or higher, no changes are needed. Otherwise, delete the prior version of the SSEAPE module. (The SSEAPE is the SaltStack Config plugin for the Salt master). For example:
RHEL/CentOS
sudo rm -rf /usr/lib/python3.6/site-packages/SSEAPE*
Ubuntu
sudo rm /usr/lib/python3.6/dist-packages/SSEAPE*
- Upgrade the Master Plugin by manually installing the updated Python wheel. Use the following example commands, replacing the exact name of the wheel file:
RHEL/CentOS
sudo pip3 install SSEAPE-file-name.whl --prefix /usr
Ubuntu
sudo pip3 install SSEAPE-file-name.whl
Note:Some users might need to alter the syntax to
pip3.6
orpip36
for their operating systems. - Update the API (RaaS) module paths by editing the
/etc/salt/master.d/eAPIMasterPaths.conf
file to reference the paths to the various modules. For example, you might change allpython2.7
references in this file topython3.6
.Note:Depending on how you initially installed SaltStack Config, the eAPI Salt master paths could instead be in the
/etc/salt/master.d/raas.conf
file instead. - Check the
engines
section in/etc/salt/master.d/raas.conf
to confirm that it matches the following:engines: - sseapi: {} - eventqueue: {} - rpcqueue: {} - jobcompletion: {} - keyauth: {}
Note:If a problem occurred, you may need to restore your backups of the
/etc/salt/master.d/raas.conf
and/etc/salt/master.d/eAPIMasterPaths.conf
files. - If you are using the salt-master key authentication (recommended), make sure that the
sseapi_pubkey_path
is configured and thatsseapi_username
andsseapi_password
are commented out in/etc/salt/master.d/raas.conf
.sseapi_pubkey_path: /etc/salt/pki/master/sseapi_key.pub #sseapi_username: #sseapi_password:
- Check that the
master_job_cache
andevent_return
entries are set tosseapi
. Thepgjsonb
returner is no longer available. - Start the
salt-master
service with the following command:sudo systemctl start salt-master
The upgrade process is now complete. If you encounter any other errors, refer to the Troubleshootingpage or Contact Support.