How to Apply an Emergency Bosh Release to Operations Manager

Products

• Operations Manager

Issue/Introduction

In certain scenarios, such as a high severity CVE, an individual Bosh release package will be available before an official patch release of VMware Tanzu Operations Manager.  This procedure applies to those rare situations and should never be applied without specific recommendation from Support. 

This Article will describe how to apply an early bosh release to both Operations Manager and the Bosh Director.  

NOTE: Currently this procedure only support UAA and Credhub Bosh releases

Resolution

Download the patch release

The patch release will be made available from a public link that will be referenced from a product alert or KB article. 

For the purpose of this procedure we will use the UAA Bosh release as an example.

1. First identify the release name as it is installed on operations manager.  in this case we will update the uaa release and the name of this release in /var/tempest/internal_releases is "uaa".

   1. sudo -u tempest-web ls -w 1 /var/tempest/internal_releases/  | egrep -v tgz
      backup-and-restore-sdk
      bosh
      bosh-system-metrics-server
      bpm
      cpi
      credhub
      dns
      networking
      os-conf
      syslog
      system-metrics
      uaa
      windows-syslog

2. Download the release
   1. replace URL-FOR-APPROPRIATE-UAA-RELEASE with the actual URL of the release.
   2. replace RELEASE_NAME with the the name of the package.  in this example "uaa"

   3. sudo -u tempest-web wget -O /var/tempest/internal_releases/RELEAES_NAME https://URL-FOR-APPROPRIATE-UAA-RELEAS

Extracting the UAA release

This applies to uaa release only

sudo -u tempest-web bash -c "tar -Oxf /var/tempest/internal_releases/uaa packages/uaa.tgz | tar -Ozx ./uaa/cloudfoundry-identity-uaa.war > /home/tempest-web/uaa/tomcat/webapps/uaa.war"

 

Complete the procedure

1. Restart Operations Manager

   1. service tempest-web restart

2. Apply Changes to Bosh Director Tile