|
@@ -12,13 +12,14 @@
|
|
|
|
|
|
### Sensu Go Upgrade History
|
|
|
---
|
|
|
- - [MSOCI-1565 ticket - Upgrade Sensu to 6.2.x](https://jira.xdr.accenturefederalcyber.com/browse/MSOCI-1565)
|
|
|
- - [MSOCI-1908 ticket - Upgrade Sensu to 6.4.3](https://jira.xdr.accenturefederalcyber.com/browse/MSOCI-1908)
|
|
|
- - [MSOCI-1969 ticket - Upgrade Sensu to 6.6.1](https://jira.xdr.accenturefederalcyber.com/browse/MSOCI-1969)
|
|
|
- - [MSOCI-2027 ticket - Upgrade Sensu to 6.7.0](https://jira.xdr.accenturefederalcyber.com/browse/MSOCI-2027)
|
|
|
- - [MSOCI-2173 ticket - Upgrade Sensu to 6.7.2](https://jira.xdr.accenturefederalcyber.com/browse/MSOCI-2173)
|
|
|
- - [MSOCI-2244 ticket - Upgrade Sensu to 6.7.4](https://jira.xdr.accenturefederalcyber.com/browse/MSOCI-2244)
|
|
|
- - [MSOCI-2288 ticket - Upgrade Sensu to 6.7.5](https://jira.xdr.accenturefederalcyber.com/browse/MSOCI-2288)
|
|
|
+ - [MSOCI-1565 ticket - Upgrade Sensu to v6.2.x](https://jira.xdr.accenturefederalcyber.com/browse/MSOCI-1565)
|
|
|
+ - [MSOCI-1908 ticket - Upgrade Sensu to v6.4.3](https://jira.xdr.accenturefederalcyber.com/browse/MSOCI-1908)
|
|
|
+ - [MSOCI-1969 ticket - Upgrade Sensu to v6.6.1](https://jira.xdr.accenturefederalcyber.com/browse/MSOCI-1969)
|
|
|
+ - [MSOCI-2027 ticket - Upgrade Sensu to v6.7.0](https://jira.xdr.accenturefederalcyber.com/browse/MSOCI-2027)
|
|
|
+ - [MSOCI-2173 ticket - Upgrade Sensu to v6.7.2](https://jira.xdr.accenturefederalcyber.com/browse/MSOCI-2173)
|
|
|
+ - [MSOCI-2244 ticket - Upgrade Sensu to v6.7.4](https://jira.xdr.accenturefederalcyber.com/browse/MSOCI-2244)
|
|
|
+ - [MSOCI-2288 ticket - Upgrade Sensu to v6.7.5](https://jira.xdr.accenturefederalcyber.com/browse/MSOCI-2288)
|
|
|
+ - [MSOCI-2313 ticket - Upgrade Sensu to v6.8.0](https://jira.xdr.accenturefederalcyber.com/browse/MSOCI-2313)
|
|
|
|
|
|
### Sensu Go Upgrade Process
|
|
|
---
|
|
@@ -64,74 +65,49 @@ Starting with Moose and Internal infra within `GC TEST`. After deployment is ve
|
|
|
6. `GC Test` first; `GC PROD` second; From target servers; clean out the cache
|
|
|
```
|
|
|
# XDR Infrastructure - be sure to note the different Salt minions to target between TEST and PROD
|
|
|
- date; salt -C '* not ( afs* or nga* or ma-* or dc-c19* or doed* or la-c19* or bas-* or ca-c19* or frtib* or dgi* or vmray* or sensu* )' cmd.run 'yum clean all && yum makecache fast'
|
|
|
+ salt -C '* not ( afs* or bas-* or ca-c19* or dc-c19* or dgi* or doed* or frtib* or la-c19* or ma-* or nga* or vmray* or sensu* )' test.ping --out=txt
|
|
|
|
|
|
- # From target servers; view the available packages
|
|
|
- salt -C '* not ( afs* or nga* or ma-* or dc-c19* or doed* or la-c19* or bas-* or ca-c19* or frtib* or dgi* or vmray* or sensu* )' cmd.run 'yum --disablerepo="*" --enablerepo="msoc" list available'
|
|
|
+ salt -C '* not ( afs* or bas-* or ca-c19* or dc-c19* or dgi* or doed* or frtib* or la-c19* or ma-* or nga* or vmray* or sensu* )' cmd.run 'sensu-agent version'
|
|
|
|
|
|
- # Customer Slices Search Heads Only
|
|
|
- date; salt -C '*-sh* and not *moose* and not fm-shared-search*' cmd.run 'yum clean all && yum makecache fast'
|
|
|
+ date; salt -C '* not ( afs* or bas-* or ca-c19* or dc-c19* or dgi* or doed* or frtib* or la-c19* or ma-* or nga* or vmray* or sensu* )' cmd.run 'yum clean all && yum makecache fast'
|
|
|
|
|
|
- salt -C '*-sh* and not *moose* and not fm-shared-search*' cmd.run 'yum --disablerepo="*" --enablerepo="msoc" list available'
|
|
|
+ # From target servers; view the available packages
|
|
|
+ salt -C '* not ( afs* or bas-* or ca-c19* or dc-c19* or dgi* or doed* or frtib* or la-c19* or ma-* or nga* or vmray* or sensu* )' cmd.run 'yum --disablerepo="*" --enablerepo="msoc" list available'
|
|
|
|
|
|
- # Customer Slices Cluster masters and Heavy Forwarders
|
|
|
- date; salt -C '( *splunk-cm* or *splunk-hf* ) not moose*' cmd.run 'yum clean all && yum makecache fast'
|
|
|
+ #LCPs
|
|
|
+ salt -C '* not *.local not *.pvt.xdr.accenturefederalcyber.com' test.ping --out=txt
|
|
|
|
|
|
- salt -C '( *splunk-cm* or *splunk-hf* ) not moose*' cmd.run 'yum --disablerepo="*" --enablerepo="msoc" list available'
|
|
|
-
|
|
|
- # Customer Slices Indexers
|
|
|
- # us-east-1a
|
|
|
- salt -C '*splunk-i* and ( G@ec2:placement:availability_zone:us-east-1a or G@ec2:placement:availability_zone:us-gov-east-1a ) not moose*' test.ping --out=txt
|
|
|
+ salt -C '* not *.local not *.pvt.xdr.accenturefederalcyber.com' cmd.run 'sensu-agent version'
|
|
|
|
|
|
- salt -C '*splunk-i* and ( G@ec2:placement:availability_zone:us-east-1a or G@ec2:placement:availability_zone:us-gov-east-1a ) not moose*' cmd.run 'sensu-agent version'
|
|
|
+ date; salt -C '* not *.local not *.pvt.xdr.accenturefederalcyber.com' cmd.run 'yum clean all && yum makecache fast'
|
|
|
|
|
|
- date; salt -C '*splunk-i* and ( G@ec2:placement:availability_zone:us-east-1a or G@ec2:placement:availability_zone:us-gov-east-1a ) not moose*' cmd.run 'yum clean all && yum makecache fast'
|
|
|
+ salt -C '* not *.local not *.pvt.xdr.accenturefederalcyber.com' cmd.run 'yum --disablerepo="*" --enablerepo="msoc" list available'
|
|
|
|
|
|
- salt -C '*splunk-i* and ( G@ec2:placement:availability_zone:us-east-1a or G@ec2:placement:availability_zone:us-gov-east-1a ) not moose*' cmd.run 'yum --disablerepo="*" --enablerepo="msoc" list available'
|
|
|
+ #Customer Slices
|
|
|
+ salt -C 'afs*local or afs*com or bas-*com or ca-c19*com or dc*com or dgi*com or doed-*com or frtib*com or la-*com or ma-*com or nga*com or nga*local' test.ping --out=txt
|
|
|
|
|
|
- # us-gov-east-1b
|
|
|
- salt -C '*splunk-i* and ( G@ec2:placement:availability_zone:us-east-1b or G@ec2:placement:availability_zone:us-gov-east-1b ) not moose*' test.ping --out=txt
|
|
|
-
|
|
|
- salt -C '*splunk-i* and ( G@ec2:placement:availability_zone:us-east-1b or G@ec2:placement:availability_zone:us-gov-east-1b ) not moose*' cmd.run 'sensu-agent version'
|
|
|
+ salt -C 'afs*local or afs*com or bas-*com or ca-c19*com or dc*com or dgi*com or doed-*com or frtib*com or la-*com or ma-*com or nga*com or nga*local' cmd.run 'sensu-agent version'
|
|
|
|
|
|
- date; salt -C '*splunk-i* and ( G@ec2:placement:availability_zone:us-east-1b or G@ec2:placement:availability_zone:us-gov-east-1b ) not moose*' cmd.run 'yum clean all && yum makecache fast'
|
|
|
+ salt -C 'afs*local or afs*com or bas-*com or ca-c19*com or dc*com or dgi*com or doed-*com or frtib*com or la-*com or ma-*com or nga*com or nga*local' cmd.run 'yum clean all && yum makecache fast'
|
|
|
|
|
|
- salt -C '*splunk-i* and ( G@ec2:placement:availability_zone:us-east-1b or G@ec2:placement:availability_zone:us-gov-east-1b ) not moose*' cmd.run 'yum --disablerepo="*" --enablerepo="msoc" list available'
|
|
|
+ salt -C 'afs*local or afs*com or bas-*com or ca-c19*com or dc*com or dgi*com or doed-*com or frtib*com or la-*com or ma-*com or nga*com or nga*local' cmd.run 'yum --disablerepo="*" --enablerepo="msoc" list available'
|
|
|
|
|
|
- # us-gov-east-1c
|
|
|
- salt -C '*splunk-i* and ( G@ec2:placement:availability_zone:us-east-1c or G@ec2:placement:availability_zone:us-gov-east-1c ) not moose*' test.ping --out=txt
|
|
|
-
|
|
|
- salt -C '*splunk-i* and ( G@ec2:placement:availability_zone:us-east-1c or G@ec2:placement:availability_zone:us-gov-east-1c ) not moose*' cmd.run 'sensu-agent version'
|
|
|
-
|
|
|
- date; salt -C '*splunk-i* and ( G@ec2:placement:availability_zone:us-east-1c or G@ec2:placement:availability_zone:us-gov-east-1c ) not moose*' cmd.run 'yum clean all && yum makecache fast'
|
|
|
-
|
|
|
- salt -C '*splunk-i* and ( G@ec2:placement:availability_zone:us-east-1c or G@ec2:placement:availability_zone:us-gov-east-1c ) not moose*' cmd.run 'yum --disablerepo="*" --enablerepo="msoc" list available'
|
|
|
-
|
|
|
```
|
|
|
|
|
|
7. Stop / Update / Reload daemon / Start agent on minions `systemctl stop sensu-agent && yum update -y sensu-go-agent && systemctl daemon-reload && systemctl start sensu-agent`
|
|
|
```
|
|
|
# XDR Infrastructure
|
|
|
- salt -C '* not ( afs* or nga* or ma-* or dc-c19* or doed* or la-c19* or bas-* or ca-c19* or frtib* or dgi* or vmray* or sensu* )' cmd.run 'sensu-agent version'
|
|
|
-
|
|
|
- date; salt -C '* not ( afs* or nga* or ma-* or dc-c19* or doed* or la-c19* or bas-* or ca-c19* or frtib* or dgi* or vmray* or sensu* )' cmd.run 'systemctl stop sensu-agent && yum update -y sensu-go-agent && systemctl daemon-reload && systemctl start sensu-agent'
|
|
|
+ date; salt -C '* not ( afs* or bas-* or ca-c19* or dc-c19* or dgi* or doed* or frtib* or la-c19* or ma-* or nga* or vmray* or sensu* )' cmd.run 'systemctl stop sensu-agent && yum update -y sensu-go-agent && systemctl daemon-reload && systemctl start sensu-agent'
|
|
|
|
|
|
# LCPs
|
|
|
- salt -C '* not *.local not *.pvt.xdr.accenturefederalcyber.com' cmd.run 'sensu-agent version'
|
|
|
-
|
|
|
date; salt -C '* not *.local not *.pvt.xdr.accenturefederalcyber.com' cmd.run 'systemctl stop sensu-agent && yum update -y sensu-go-agent && systemctl daemon-reload && systemctl start sensu-agent'
|
|
|
-
|
|
|
- # Customer Slices
|
|
|
- salt -C 'afs*local or afs*com or ma-*com or la-*com or nga*com or nga*local or dc*com or bas-*com or frtib*com or ca-c19*com or dgi*com' cmd.run 'sensu-agent version'
|
|
|
-
|
|
|
- date; salt -C 'afs*local or afs*com or ma-*com or la-*com or nga*com or nga*local or dc*com or bas-*com or frtib*com or ca-c19*com or dgi*com' cmd.run 'systemctl stop sensu-agent && yum update -y sensu-go-agent && systemctl daemon-reload && systemctl start sensu-agent'
|
|
|
|
|
|
# Customer Slices Search Heads Only
|
|
|
salt -C '*-sh* and not *moose* and not fm-shared-search*' cmd.run 'sensu-agent version'
|
|
|
|
|
|
date; salt -C '*-sh* and not *moose* and not fm-shared-search*' cmd.run 'systemctl stop sensu-agent && yum update -y sensu-go-agent && systemctl daemon-reload && systemctl start sensu-agent'
|
|
|
|
|
|
- # Customer Slices Cluster masters and Heavy Forwarders
|
|
|
+ # Customer Slices Cluster Masters and Heavy Forwarders
|
|
|
salt -C '( *splunk-cm* or *splunk-hf* ) not moose*' cmd.run 'sensu-agent version'
|
|
|
|
|
|
date; salt -C '( *splunk-cm* or *splunk-hf* ) not moose*' cmd.run 'systemctl stop sensu-agent && yum update -y sensu-go-agent && systemctl daemon-reload && systemctl start sensu-agent'
|
|
@@ -153,6 +129,8 @@ Starting with Moose and Internal infra within `GC TEST`. After deployment is ve
|
|
|
date; salt -C '*splunk-i* and ( G@ec2:placement:availability_zone:us-east-1c or G@ec2:placement:availability_zone:us-gov-east-1c ) not moose*' cmd.run 'systemctl stop sensu-agent && yum update -y sensu-go-agent && systemctl daemon-reload && systemctl start sensu-agent'
|
|
|
|
|
|
#For VMRAY - Ubuntu
|
|
|
+ salt vmray* cmd.run 'sensu-agent version'
|
|
|
+
|
|
|
salt vmray* cmd.run 'apt list --upgradable' --out=txt
|
|
|
|
|
|
date; salt vmray* cmd.run 'systemctl stop sensu-agent && apt-get --only-upgrade install sensu-go-agent -y && apt autoremove -y' --output-diff
|