Cannot upgrade vRA after an old version of KB 87120 was applied

Products

• VMware Aria Suite

Issue/Introduction

This article provides information on how to prevent upgrade failures to vRA/vRO versions 8.6.2 and below.

Symptoms:

• One hour into the upgrade, you see an error in /var/log/bootstrap/postupdate.log:

Failed to patch /etc/k8s-config/licensing-telemetry.yaml
+ res=1
+ echo 'Script /etc/bootstrap/postupdate.d/71-15-cve-2021-44228.sh failed, error status 1'
Script /etc/bootstrap/postupdate.d/71-15-cve-2021-44228.sh failed, error status 1
+ exit 1

Environment

VMware vRealize Orchestrator 8.2.x
VMware vRealize Automation 8.5.x
VMware vRealize Automation 8.2.x
VMware vRealize Automation 8.4.x
VMware vRealize Automation 8.6.x
VMware vRealize Orchestrator 8.5.x
VMware vRealize Orchestrator 8.3.x
VMware vRealize Automation 8.3.x
VMware vRealize Orchestrator 8.6.x
VMware vRealize Orchestrator 8.4.x

Cause

The first version of the KB 87120 was released without upgrade support. This was noted in the Impact / Risks section of the article with the request to re-install the next version of the KB released on December 20, 2021. On some customer environments this was not done, resulting in the upgrade failure.

Resolution

VMware is aware of this issue and working to resolve this in a future release.

Workaround:
Before starting the upgrade:

1. Take simultaneous VM snapshots, without memory, of all nodes in the cluster.
2. Re-apply steps 1. and 3. of the latest version of the KB: https://kb.vmware.com/s/article/87120

Note: This operation does not cause any downtime.