8.2.2 to 8.2.3
1. Upgrade From 8.2.2 to 8.2.3
RDAF Platform: From 8.2.2 to 8.2.3
AIOps (OIA) Application: From 8.2.2 to 8.2.3
RDAF Deployment rdafk8s CLI: From 1.5.2 to 1.5.3
RDAF Client rdac CLI: From 8.2.2 to 8.2.3
RDAF Platform: From 8.2.2 to 8.2.3
OIA (AIOps) Application: From 8.2.2 to 8.2.3
RDAF Deployment rdaf CLI: From 1.5.2 to 1.5.3
RDAF Client rdac CLI: From 8.2.2 to 8.2.3
1.1. Prerequisites
Before proceeding with this upgrade, please make sure and verify the below prerequisites are met.
Currently deployed CLI and RDAF services are running the below versions.
-
RDAF Deployment CLI version: 1.5.2
-
Infra Services tag: 1.0.4
-
Platform Services and RDA Worker tag: 8.2.2
-
OIA Application Services tag: 8.2.2
-
RDA Studio: 8.2.2
-
CloudFabrix recommends taking VMware VM snapshots where RDA Fabric infra/platform/applications are deployed
Note
- Check the Disk space of all the Platform and Service Vm's using the below mentioned command, the highlighted disk size should be less than 80%
rdauser@oia-125-216:~/collab-3.7-upgrade$ df -kh
Filesystem Size Used Avail Use% Mounted on
udev 32G 0 32G 0% /dev
tmpfs 6.3G 357M 6.0G 6% /run
/dev/mapper/ubuntu--vg-ubuntu--lv 48G 12G 34G 26% /
tmpfs 32G 0 32G 0% /dev/shm
tmpfs 5.0M 0 5.0M 0% /run/lock
tmpfs 32G 0 32G 0% /sys/fs/cgroup
/dev/loop0 64M 64M 0 100% /snap/core20/2318
/dev/loop2 92M 92M 0 100% /snap/lxd/24061
/dev/sda2 1.5G 309M 1.1G 23% /boot
/dev/sdf 50G 3.8G 47G 8% /var/mysql
/dev/loop3 39M 39M 0 100% /snap/snapd/21759
/dev/sdg 50G 541M 50G 2% /192.168-data
/dev/loop4 92M 92M 0 100% /snap/lxd/29619
/dev/loop5 39M 39M 0 100% /snap/snapd/21465
/dev/sde 15G 140M 15G 1% /zookeeper
/dev/sdd 30G 884M 30G 3% /kafka-logs
/dev/sdc 50G 3.3G 47G 7% /opt
/dev/sdb 50G 29G 22G 57% /var/lib/docker
/dev/sdi 25G 294M 25G 2% /graphdb
/dev/sdh 50G 34G 17G 68% /opensearch
/dev/loop6 64M 64M 0 100% /snap/core20/2379
- Check all MariaDB nodes are sync on HA setup using below commands before start upgrade
Tip
Please run the below commands on the VM host where RDAF deployment CLI was installed and rdafk8s setup command was run. The mariadb configuration is read from /opt/rdaf/rdaf.cfg file.
MARIADB_HOST=`cat /opt/rdaf/rdaf.cfg | grep -A3 haproxy| grep advertised_external_host | awk '{print $3}'`
MARIADB_USER=`cat /opt/rdaf/rdaf.cfg | grep -A3 mariadb | grep user | awk '{print $3}' | base64 -d`
MARIADB_PASSWORD=`cat /opt/rdaf/rdaf.cfg | grep -A3 mariadb | grep password | awk '{print $3}' | base64 -d`
mysql -u$MARIADB_USER -p$MARIADB_PASSWORD -h $MARIADB_HOST -P3307 -e "show status like 'wsrep_local_state_comment';"
Please verify that the mariadb cluster state is in Synced state.
+---------------------------+--------+
| Variable_name | Value |
+---------------------------+--------+
| wsrep_local_state_comment | Synced |
+---------------------------+--------+
Please run the below command and verify that the mariadb cluster size is 3.
mysql -u$MARIADB_USER -p$MARIADB_PASSWORD -h $MARIADB_HOST -P3307 -e "SHOW GLOBAL STATUS LIKE 'wsrep_cluster_size'";
+--------------------+-------+
| Variable_name | Value |
+--------------------+-------+
| wsrep_cluster_size | 3 |
+--------------------+-------+
Warning
Make sure all of the above pre-requisites are met before proceeding with the upgrade process.
Warning
Kubernetes: Though Kubernetes based RDA Fabric deployment supports zero downtime upgrade, it is recommended to schedule a maintenance window for upgrading RDAF Platform and AIOps services to newer version.
Important
Please make sure full backup of the RDAF platform system is completed before performing the upgrade.
Kubernetes: Please run the below backup command to take the backup of application data.
Run the below command on RDAF Management system and make sure the Kubernetes PODs are NOT in restarting mode (it is applicable to only Kubernetes environment)
- Verify that RDAF deployment
rdafcli version is 1.5.2 on the VM where CLI was installed for docker on-prem registry managing Kubernetes or Non-kubernetes deployments.
- On-premise docker registry service version is 1.0.4
0889e08f0871 docker2.cloudfabrix.io:443/external/docker-registry:1.0.4 "/entrypoint.sh /bin…" 7 days ago Up 7 days deployment-scripts-docker-registry-1
- RDAF Infrastructure services version is 1.0.4 except for below services.
Run the below command to get rdafk8s Infra service details
+--------------------------+-----------------+-------------------+--------------+--------------------------------+
| Name | Host | Status | Container Id | Tag |
+--------------------------+-----------------+-------------------+--------------+--------------------------------+
| rda-nats | 192.168.108.114 | Up 19 Minutes ago | bbb50d2dacc5 | 1.0.4 |
| rda-minio | 192.168.108.114 | Up 19 Minutes ago | d26148d4bf44 | RELEASE.2024-12-18T13-15-44Z |
| rda-mariadb | 192.168.108.114 | Up 19 Minutes ago | 02975e0eec89 | 1.0.4 |
| rda-opensearch | 192.168.108.114 | Up 18 Minutes ago | 1494be76f694 | 1.0.4 |
+--------------------------+-----------------+-------------------+--------------+--------------------------------+
- RDAF Platform services version is 8.2.2
Run the below command to get RDAF Platform services details
+---------------+-----------------+---------------+--------------+---------+
| Name | Host | Status | Container Id | Tag |
+---------------+-----------------+---------------+--------------+---------+
| rda-api- | 192.168.108.119 | Up 14 Hours | 2ca4370a175a | 8.2.2 |
| server | | ago | | |
| rda-api- | 192.168.108.120 | Up 14 Hours | cce0d6bcba36 | 8.2.2 |
| server | | ago | | |
| rda-registry | 192.168.108.120 | Up 14 Hours | e029a9ff96fe | 8.2.2 |
| | | ago | | |
| rda-registry | 192.168.108.119 | Up 14 Hours | eacbc82ae8c9 | 8.2.2 |
| | | ago | | |
| rda-identity | 192.168.108.120 | Up 14 Hours | 45409c977c7c | 8.2.2 |
| | | ago | | |
| rda-identity | 192.168.108.119 | Up 14 Hours | 584458932e2c | 8.2.2 |
+---------------+-----------------+---------------+--------------+---------+
- RDAF Worker version is 8.2.2
Run the below command to get RDAF Worker details
+------------+----------------+------------+--------------+---------+
| Name | Host | Status | Container Id | Tag |
+------------+----------------+------------+--------------+---------+
| rda_worker | 192.168.125.63 | Up 7 weeks | cfe1fe65c692 | 8.2.2 |
+------------+----------------+------------+--------------+---------+
- RDAF OIA Application services version is 8.2.2
Run the below command to get RDAF App services details
+-------------------------------+-----------------+-----------------+--------------+---------+
| Name | Host | Status | Container Id | Tag |
+-------------------------------+-----------------+-----------------+--------------+---------+
| rda-alert-correlator | 192.168.108.118 | Up 14 Hours ago | afdbbe6453e4 | 8.2.2 |
| rda-alert-correlator | 192.168.108.117 | Up 14 Hours ago | 631b7978dcb0 | 8.2.2 |
| rda-alert-ingester | 192.168.108.117 | Up 14 Hours ago | 33322e0b9cb9 | 8.2.2 |
| rda-alert-ingester | 192.168.108.118 | Up 14 Hours ago | 8178c043bd04 | 8.2.2 |
| rda-alert-processor | 192.168.108.117 | Up 14 Hours ago | b342b582ea1d | 8.2.2 |
| rda-alert-processor | 192.168.108.118 | Up 14 Hours ago | b6f85413c2df | 8.2.2 |
+-------------------------------+-----------------+-----------------+--------------+---------+
Currently deployed CLI and RDAF services are running the below versions.
-
RDAF Deployment CLI version: 1.5.2 / 1.5.2.1
-
Infra Services tag: 1.0.4
-
Platform Services and RDA Worker tag: 8.2.2 / 8.2.2.1 (Selected Services)
-
OIA Application Services tag: 8.2.2
-
RDA Studio: 8.2.2 / 8.2.2.1
-
CloudFabrix recommends taking VMware VM snapshots where RDA Fabric infra/platform/applications are deployed
Note
- Check the Disk space of all the Platform and Service Vm's using the below mentioned command, the highlighted disk size should be less than 80%
rdauser@oia-125-216:~/collab-3.7-upgrade$ df -kh
Filesystem Size Used Avail Use% Mounted on
udev 32G 0 32G 0% /dev
tmpfs 6.3G 357M 6.0G 6% /run
/dev/mapper/ubuntu--vg-ubuntu--lv 48G 12G 34G 26% /
tmpfs 32G 0 32G 0% /dev/shm
tmpfs 5.0M 0 5.0M 0% /run/lock
tmpfs 32G 0 32G 0% /sys/fs/cgroup
/dev/loop0 64M 64M 0 100% /snap/core20/2318
/dev/loop2 92M 92M 0 100% /snap/lxd/24061
/dev/sda2 1.5G 309M 1.1G 23% /boot
/dev/sdf 50G 3.8G 47G 8% /var/mysql
/dev/loop3 39M 39M 0 100% /snap/snapd/21759
/dev/sdg 50G 541M 50G 2% /192.168-data
/dev/loop4 92M 92M 0 100% /snap/lxd/29619
/dev/loop5 39M 39M 0 100% /snap/snapd/21465
/dev/sde 15G 140M 15G 1% /zookeeper
/dev/sdd 30G 884M 30G 3% /kafka-logs
/dev/sdc 50G 3.3G 47G 7% /opt
/dev/sdb 50G 29G 22G 57% /var/lib/docker
/dev/sdi 25G 294M 25G 2% /graphdb
/dev/sdh 50G 34G 17G 68% /opensearch
/dev/loop6 64M 64M 0 100% /snap/core20/2379
Warning
Make sure all of the above pre-requisites are met before proceeding with the upgrade process.
Warning
Non-Kubernetes: Upgrading RDAF Platform and AIOps application services is a disruptive operation. Schedule a maintenance window before upgrading RDAF Platform and AIOps services to newer version.
Important
Please make sure full backup of the RDAF platform system is completed before performing the upgrade.
Non-Kubernetes: Please run the below backup command to take the backup of application data.
Note: Please make sure this backup-dir is mounted across all infra,cli vms.- Verify that RDAF deployment
rdafcli version is 1.5.2 on the VM where CLI was installed for docker on-prem registry managing Kubernetes or Non-kubernetes deployments.
- On-premise docker registry service version is 1.0.4
173d38eebeab docker2.cloudfabrix.io:443/external/docker-registry:1.0.4 "/entrypoint.sh /bin…" 45 hours ago Up 45 hours deployment-scripts-docker-registry-1
- RDAF Infrastructure services version is 1.0.4 except for below services.
Run the below command to get RDAF Infra service details
+-------------------+----------------+-------------+--------------+------------------------------+
| Name | Host | Status | Container Id | Tag |
+-------------------+----------------+-------------+--------------+------------------------------+
| nats | 192.168.125.63 | Up 2 months | aff2eb1f37c9 | 1.0.4 |
| minio | 192.168.125.63 | Up 2 months | ed6bb3ea036a | RELEASE.2024-12-18T13-15-44Z |
| mariadb | 192.168.125.63 | Up 2 months | 616a98d6471c | 1.0.4 |
| opensearch | 192.168.125.63 | Up 2 months | 7edeede52a9b | 1.0.4 |
| kafka | 192.168.125.63 | Up 2 months | d1426429da4c | 1.0.4 |
| graphdb[operator] | 192.168.125.63 | Up 2 months | 8a53795f6ee4 | 1.0.4 |
| graphdb[server] | 192.168.125.63 | Up 2 months | 06c187c7dfa2 | 1.0.4 |
| haproxy | 192.168.125.63 | Up 2 months | fde40536be0c | 1.0.4 |
+-------------------+----------------+-------------+--------------+------------------------------+
- RDAF Platform services version is 8.2.2
Run the below command to get RDAF Platform services details
+--------------------------+----------------+------------+--------------+--------+
| Name | Host | Status | Container Id | Tag |
+--------------------------+----------------+------------+--------------+--------+
| rda_api_server | 192.168.125.63 | Up 7 weeks | c6500e23738f | 8.2.2 |
| rda_registry | 192.168.125.63 | Up 7 weeks | 34f008691fd4 | 8.2.2 |
| rda_scheduler | 192.168.125.63 | Up 7 weeks | 8b358f65a7d3 | 8.2.2 |
| rda_collector | 192.168.125.63 | Up 7 weeks | 1888441693c0 | 8.2.2 |
| rda_identity | 192.168.125.63 | Up 7 weeks | 10e43ae93430 | 8.2.2 |
| rda_asm | 192.168.125.63 | Up 7 weeks | f98c2c79539a | 8.2.2 |
+--------------------------+----------------+------------+--------------+--------+
- RDAF Worker version is 8.2.2
Run the below command to get RDAF Worker details
+------------+----------------+------------+--------------+---------+
| Name | Host | Status | Container Id | Tag |
+------------+----------------+------------+--------------+---------+
| rda_worker | 192.168.125.63 | Up 7 weeks | bc46556f64d2 | 8.2.2 |
+------------+----------------+------------+--------------+---------+
- RDAF OIA Application services version is 8.2.2
Run the below command to get RDAF App services details
+-----------------------------------+----------------+------------+--------------+-------+
| Name | Host | Status | Container Id | Tag |
+-----------------------------------+----------------+------------+--------------+-------+
| cfx-rda-app-controller | 192.168.125.63 | Up 7 weeks | 1bae5abb4e9c | 8.2.2 |
| cfx-rda-reports-registry | 192.168.125.63 | Up 7 weeks | 925a97ecb0a3 | 8.2.2 |
| cfx-rda-notification-service | 192.168.125.63 | Up 7 weeks | 1628da0a7a30 | 8.2.2 |
| cfx-rda-file-browser | 192.168.125.63 | Up 7 weeks | 237c85c6cb9f | 8.2.2 |
| cfx-rda-configuration-service | 192.168.125.63 | Up 7 weeks | 0fe8f3ee7596 | 8.2.2 |
| cfx-rda-alert-ingester | 192.168.125.63 | Up 7 weeks | d58452342e72 | 8.2.2 |
| cfx-rda-webhook-server | 192.168.125.63 | Up 7 weeks | f3578f725d9c | 8.2.2 |
+-----------------------------------+----------------+------------+--------------+-------+
RDAF Deployment CLI Upgrade:
Please follow the below given steps.
Note
Upgrade RDAF Deployment CLI on both on-premise docker registry VM and RDAF Platform's management VM if provisioned separately.
Login into the VM where rdaf deployment CLI was installed for docker on-premise registry and managing Kubernetes or Non-kubernetes deployment.
- Download the RDAF Deployment CLI's newer version 1.5.3 bundle.
wget https://macaw-amer.s3.us-east-1.amazonaws.com/releases/rdaf-platform/1.5.3/rdafcli-1.5.3.tar.gz
- Upgrade the
rdafk8sCLI to version 1.5.3
- Verify the installed
rdafk8sCLI version is upgraded to 1.5.3
- Download the RDAF Deployment CLI's newer version 1.5.3 bundle and copy it to RDAF CLI management VM on which
rdafdeployment CLI was installed.
- Download the RDAF Deployment CLI's newer version 1.5.3 bundle
wget https://macaw-amer.s3.us-east-1.amazonaws.com/releases/rdaf-platform/1.5.3/rdafcli-1.5.3.tar.gz
- Upgrade the
rdafCLI to version 1.5.3
- Verify the installed
rdafCLI version is upgraded to 1.5.3
- Download the RDAF Deployment CLI's newer version 1.5.3 bundle and copy it to RDAF management VM on which
rdaf & rdafk8sdeployment CLI was installed.
1.2. Upgrade Steps
1.2.1 Download the new Docker Images
Login into the VM where rdaf deployment CLI was installed for docker on-premise registry and managing kubernetes & Non-kubernetes deployment.
Download the new docker image tags for RDAF Platform and OIA (AIOps) Application services and wait until all of the images are downloaded.
Note
If the Download of the images fail, Please re-execute the above command
Run the below command to verify above mentioned tags are downloaded for all of the RDAF Platform and OIA (AIOps) Application services.
Please make sure 8.2.3 image tag is downloaded for the below RDAF Platform services.
- rda-client-api-server
- rda-registry
- rda-scheduler
- rda-collector
- rda-identity
- rda-fsm
- rda-asm
- rda-access-manager
- rda-resource-manager
- rda-user-preferences
- onprem-portal
- onprem-portal-nginx
- rda-worker-all
- onprem-portal-dbinit
- cfxdx-nb-nginx-all
- rda-event-gateway
- rda-chat-helper
- rdac
- bulk_stats
Please make sure 8.2.3 image tag is downloaded for the below RDAF OIA (AIOps) Application services.
- cfx rda-app-controller
- cfx rda-alert-processor
- cfx rda-file-browser
- cfx rda-smtp-server
- cfx rda-ingestion-tracker
- cfx rda-reports-registry
- cfx rda-ml-config
- cfx rda-event-consumer
- cfx rda-webhook-server
- cfx rda-irm-service
- cfx rda-alert-ingester
- cfx rda-collaboration
- cfx rda-notification-service
- cfx rda-configuration-service
- cfx rda-alert-processor-companion
Downloaded Docker images are stored under the below path.
/opt/rdaf-registry/data/docker/registry/v2/ or /opt/rdaf/data/docker/registry/v2/
Run the below command to check the filesystem's disk usage on offline registry VM where docker images are pulled.
If necessary, older image tags that are no longer in use can be deleted to free up disk space using the command below.
Note
Run the command below if /opt occupies more than 80% of the disk space or if the free capacity of /opt is less than 25GB.
1.2.2 Upgrade Script
Note
The upgrade script applies only to Non-Kubernetes
The upgrade script described in this section applies only to Non-Kubernetes deployments and is not applicable to Kubernetes deployments.
Please download the below python script (rdaf_upgrade_152_153.py)
wget https://macaw-amer.s3.us-east-1.amazonaws.com/releases/rdaf-platform/1.5.3/rdaf_upgrade_152_153.py
The below step will generate values.yaml.latest files for all RDAF Infrastructure, Platform and Application services in the /opt/rdaf/deployment-scripts directory.
Please run the downloaded python upgrade script rdaf_upgrade_152_153.py as shown below
Note
The above command will show the available options for the upgrade script
rdauser@infra108122:~$ python rdaf_upgrade_152_153.py -h
usage: rdaf_upgrade_152_153.py [-h] {upgrade} ...
options:
-h, --help show this help message and exit
options:
{upgrade} Available options
upgrade upgrade the setup
This below given command will execute the upgrade process after user has downloaded the script and reviewed the available options with the help command.
rdauser@infra108122:~$ python rdaf_upgrade_152_153.py upgrade
Generating values.yaml.latest
Creating /opt/rdaf/deployment-scripts/values.yaml.latest
After running the upgrade script, values.yaml.latest file is generated. Compare it with the existing values.yaml file and update the api-server and portal backend parameters to match the latest file.
API Server Configuration
Portal Backend Configuration
| Portal Backend (existing config) | Portal Backend (updated config) |
|---|---|
|
|
Note
If parameters are already set, make sure to replace the values with the highlighted values shown in the examples above.
1.2.3 Upgrade RDAF Platform Services
Step-1: Run the below command to initiate upgrading RDAF Platform services.
As the upgrade procedure is a non-disruptive upgrade, it puts the currently running PODs into Terminating state and newer version PODs into Pending state.
Step-2: Run the below command to check the status of the existing and newer PODs and make sure atleast one instance of each Platform service is in Terminating state.
Step-3: Run the below command to put all Terminating RDAF platform service PODs into maintenance mode. It will list all of the POD Ids of platform services along with rdac maintenance command that required to be put in maintenance mode.
Note
If maint_command.py script doesn't exist on RDAF deployment CLI VM, it can be downloaded using the below command.
Step-4: Copy & Paste the rdac maintenance command as below.
Step-5: Run the below command to verify the maintenance mode status of the RDAF platform services.
Step-6: Run the below command to delete the Terminating RDAF platform service PODs
for i in `kubectl get pods -n rda-fabric -l app_category=rdaf-platform | grep 'Terminating' | awk '{print $1}'`; do kubectl delete pod $i -n rda-fabric --force; done
Note
Wait for 120 seconds and Repeat above steps from Step-2 to Step-6 for rest of the RDAF Platform service PODs.
Please wait till all of the new platform service PODs are in Running state and run the below command to verify their status and make sure all of them are running with 8.2.3 version.
+--------------------+----------------+-------------------+--------------+-------+
| Name | Host | Status | Container Id | Tag |
+--------------------+----------------+-------------------+--------------+-------+
| rda-api-server | 192.168.131.44 | Up 44 Minutes ago | f3a7c9e1b6d2 | 8.2.3 |
| rda-api-server | 192.168.131.45 | Up 46 Minutes ago | 8b2d6f4a9c1e | 8.2.3 |
| rda-registry | 192.168.131.45 | Up 46 Minutes ago | c5e1a8d3f7b2 | 8.2.3 |
| rda-registry | 192.168.131.44 | Up 46 Minutes ago | 7d4c9b2e6f1a | 8.2.3 |
| rda-identity | 192.168.131.44 | Up 46 Minutes ago | e9b3f6a1c8d4 | 8.2.3 |
| rda-identity | 192.168.131.47 | Up 45 Minutes ago | 4a7d2c9e5f1b | 8.2.3 |
| rda-fsm | 192.168.131.44 | Up 46 Minutes ago | b6e1f9c3a7d5 | 8.2.3 |
| rda-fsm | 192.168.131.45 | Up 46 Minutes ago | d2a8f4b7c1e9 | 8.2.3 |
| rda-asm | 192.168.131.44 | Up 46 Minutes ago | 9c5e2a7f3b1d | 8.2.3 |
| rda-asm | 192.168.131.45 | Up 46 Minutes ago | a1f6d8c4e9b2 | 8.2.3 |
| rda-asm | 192.168.131.47 | Up 2 Weeks ago | 5b9e3c7a2f1d | 8.2.3 |
| rda-asm | 192.168.131.46 | Up 2 Weeks ago | e4c8a1f6d3b9 | 8.2.3 |
| rda-chat-helper | 192.168.131.44 | Up 46 Minutes ago | 7f2b9d5c1a6e | 8.2.3 |
| rda-chat-helper | 192.168.131.45 | Up 45 Minutes ago | c3e7a1d9f5b2 | 8.2.3 |
| rda-access-manager | 192.168.131.45 | Up 46 Minutes ago | 6a9f4c2e8b1d | 8.2.3 |
| rda-access-manager | 192.168.131.46 | Up 45 Minutes ago | b7d3e9f1c5a8 | 8.2.3 |
| rda-resource- | 192.168.131.44 | Up 45 Minutes ago | 2e6c9a4f8b1d | 8.2.3 |
| manager | | | | |
| rda-resource- | 192.168.131.45 | Up 45 Minutes ago | f8a3d7c1e5b9 | 8.2.3 |
| manager | | | | |
+--------------------+----------------+-------------------+--------------+-------+
Run the below command to check the rda-scheduler service is elected as a leader under Site column.
+-------+----------------------------------------+-------------+--------------+----------+-------------+-----------------+--------+--------------+---------------+--------------+
| Cat | Pod-Type | Pod-Ready | Host | ID | Site | Age | CPUs | Memory(GB) | Active Jobs | Total Jobs |
|-------+----------------------------------------+-------------+--------------+----------+-------------+-----------------+--------+--------------+---------------+--------------|
| Infra | api-server | True | rda-api-server | 9c0484af | | 11:41:50 | 8 | 31.33 | | |
| Infra | api-server | True | rda-api-server | 196558ed | | 11:40:23 | 8 | 31.33 | | |
| Infra | asm | True | rda-asm-5b8fb9 | bcbdaae5 | | 11:42:26 | 8 | 31.33 | | |
| Infra | asm | True | rda-asm-5b8fb9 | 232a58af | | 11:42:40 | 8 | 31.33 | | |
| Infra | collector | True | rda-collector- | d06fb56c | | 11:42:03 | 8 | 31.33 | | |
| Infra | collector | True | rda-collector- | a4c79e4c | | 11:41:59 | 8 | 31.33 | | |
| Infra | registry | True | rda-registry-6 | 2fd69950 | | 11:42:03 | 8 | 31.33 | | |
| Infra | registry | True | rda-registry-6 | fac544d6 | | 11:41:59 | 8 | 31.33 | | |
| Infra | scheduler | True | rda-scheduler- | b98afe88 | *leader* | 11:42:01 | 8 | 31.33 | | |
| Infra | scheduler | True | rda-scheduler- | e25a0841 | | 11:41:56 | 8 | 31.33 | | |
| Infra | worker | True | rda-worker-5b5 | 99bd054e | rda-site-01 | 11:33:40 | 8 | 31.33 | 0 | 0 |
| Infra | worker | True | rda-worker-5b5 | 0bfdcd98 | rda-site-01 | 11:33:34 | 8 | 31.33 | 0 | 0 |
+-------+----------------------------------------+-------------+----------------+----------+-------------+----------+--------+--------------+---------------+--------------+
Run the below command to check if all services has ok status and does not throw any failure messages.
Warning
For Non-Kubernetes deployment, upgrading RDAF Platform and AIOps application services is a disruptive operation when rolling-upgrade option is not used. Please schedule a maintenance window before upgrading RDAF Platform and AIOps services to newer version.
Run the below command to initiate upgrading RDAF Platform services with zero downtime
Note
timeout <10> mentioned in the above command represents as Seconds
Note
The rolling-upgrade option upgrades the Platform services running in high-availability mode on one VM at a time in sequence. It completes the upgrade of Platform services running on VM-1 before upgrading them on VM-2, followed by VM-3, and so on.
During this upgrade sequence, RDAF platform continues to function without any impact to the application traffic.
After completing the Platform services upgrade on all VMs, it will ask for user confirmation to delete the older version Platform service PODs. The user has to provide YES to delete the old docker containers (in non-k8s)
2026-08-06 12:24:41,776 [rdaf.component.platform] INFO - Gathering platform container details.
2026-08-06 12:24:44,983 [rdaf.component.platform] INFO - Gathering rdac pod details.
+----------+--------------------------+---------+---------+--------------+-------------+------------+
| Pod ID | Pod Type | Version | Age | Hostname | Maintenance | Pod Status |
+----------+--------------------------+---------+---------+--------------+-------------+------------+
| 3bd01cd1 | registry | 8.2.2 | 7:59:37 | 632b6752daf1 | None | True |
| 5052e8fe | scheduler | 8.2.2 | 7:59:32 | 4250178e6e28 | None | True |
| a6586de1 | authenticator | 8.2.2 | 7:59:34 | 3883a5943ded | None | True |
| 4c8d7963 | asm | 8.2.2 | 7:59:37 | 370116f3378d | None | True |
| a1b89779 | fsm | 8.2.2 | 7:59:31 | 11659cef45e6 | None | True |
| d1e7bf2c | cfxdimensions-app- | 8.2.2 | 7:59:03 | 895b583460dd | None | True |
| | resource-manager | | | | | |
| 723fe3f0 | user-preferences | 8.2.2 | 7:58:47 | 69b952185564 | None | True |
+----------+--------------------------+---------+---------+--------------+-------------+------------+
Continue moving above pods to maintenance mode? [yes/no]: yes
2026-08-06 12:25:45,825 [rdaf.component.platform] INFO - Initiating Maintenance Mode...
2026-08-06 12:27:04,926 [rdaf.component.platform] INFO - Following container are in maintenance mode
+----------+--------------------------+---------+---------+--------------+-------------+------------+
| Pod ID | Pod Type | Version | Age | Hostname | Maintenance | Pod Status |
+----------+--------------------------+---------+---------+--------------+-------------+------------+
| 4c8d7963 | asm | 8.2.2 | 8:01:07 | 370116f3378d | maintenance | False |
| a6586de1 | authenticator | 8.2.2 | 8:01:04 | 3883a5943ded | maintenance | False |
| d1e7bf2c | cfxdimensions-app- | 8.2.2 | 8:00:33 | 895b583460dd | maintenance | False |
| | resource-manager | | | | | |
| a1b89779 | fsm | 8.2.2 | 8:01:01 | 11659cef45e6 | maintenance | False |
| 3bd01cd1 | registry | 8.2.2 | 8:01:07 | 632b6752daf1 | maintenance | False |
| 5052e8fe | scheduler | 8.2.2 | 8:01:02 | 4250178e6e28 | maintenance | False |
| 723fe3f0 | user-preferences | 8.2.2 | 8:00:17 | 69b952185564 | maintenance | False |
+----------+--------------------------+---------+---------+--------------+-------------+------------
Run the below command to check the rda-scheduler service is elected as a leader under Site column.
+-------+----------------------------------------+-------------+----------------+----------+-------------+------------------+--------+--------------+---------------+--------------+--------------+----------------------------+
| Cat | Pod-Type | Pod-Ready | Host | ID | Site | Age | CPUs | Memory(GB) | Active Jobs | Total Jobs | Pod-Status | Last Seen |
|-------+----------------------------------------+-------------+----------------+----------+-------------+------------------+--------+--------------+---------------+--------------+--------------+----------------------------|
| App | alert-correlator | True | e346984d967e | dcc46c65 | | 8 days, 20:08:13 | 8 | 31.3 | | | | 2026-08-13T07:58:22.858594 |
| App | alert-correlator | True | e346984d967e | f78f4825 | | 8 days, 20:08:14 | 8 | 31.3 | | | | 2026-08-13T07:58:22.862754 |
| App | alert-correlator | True | 58fcb3c31dc2 | 5fde62fd | | 8 days, 20:08:20 | 8 | 31.3 | | | | 2026-08-13T07:58:22.841160 |
| App | alert-correlator | True | e346984d967e | 0884b97e | | 8 days, 20:08:13 | 8 | 31.3 | | | | 2026-08-13T07:58:22.848362 |
| App | alert-correlator | True | 58fcb3c31dc2 | 9ff92fda | | 8 days, 20:08:20 | 8 | 31.3 | | | | 2026-08-13T07:58:22.837685 |
| App | alert-correlator | True | 58fcb3c31dc2 | 6c3c9d76 | | 8 days, 20:08:20 | 8 | 31.3 | | | | 2026-08-13T07:58:22.840103 |
| App | alert-ingester | True | dc522f405b1f | 37635ef4 | | 8 days, 20:07:55 | 8 | 31.3 | | | | 2026-08-13T07:58:22.844710 |
| App | alert-ingester | True | d85d144acbef | 69a283c2 | | 8 days, 20:08:28 | 8 | 31.3 | | | | 2026-08-13T07:58:22.838746 |
| App | alert-ingester | True | d85d144acbef | cf7804a2 | | 8 days, 20:08:27 | 8 | 31.3 | | | | 2026-08-13T07:58:22.850012 |
| App | alert-ingester | True | d85d144acbef | 167ecd3d | | 8 days, 20:08:28 | 8 | 31.3 | | | | 2026-08-13T07:58:22.838814 |
| App | alert-ingester | True | dc522f405b1f | 2a7b8c3b | | 8 days, 20:07:56 | 8 | 31.3 | | | | 2026-08-13T07:58:22.842634 |
| App | alert-ingester | True | d85d144acbef | 91edbfc8 | | 8 days, 20:08:27 | 8 | 31.3 | | | | 2026-08-13T07:58:22.837802 |
| App | alert-ingester | True | dc522f405b1f | 2babb63a | | 8 days, 20:07:56 | 8 | 31.3 | | | | 2026-08-13T07:58:22.858105 |
| App | alert-ingester | True | dc522f405b1f | 832018dc | | 8 days, 20:07:56 | 8 | 31.3 | | | | 2026-08-13T07:58:22.849512 |
| App | alert-processor | True | d8ea03673169 | a54bd8f4 | | 8 days, 20:08:00 | 8 | 31.3 | | | | 2026-08-13T07:58:22.858759 |
| App | alert-processor | True | 5ecab813ecf6 | ca1d7a0a | | 8 days, 20:08:25 | 8 | 31.3 | | | | 2026-08-13T07:58:22.852581 |
Run the below command to check if all services has ok status and does not throw any failure messages.
+-----------+----------------------------------------+--------------+----------+-------------+-----------------------------------------------------+----------+-------------------------------------------------------------+
| Cat | Pod-Type | Host | ID | Site | Health Parameter | Status | Message |
|-----------+----------------------------------------+--------------+----------+-------------+-----------------------------------------------------+----------+-------------------------------------------------------------|
| rda_app | alert-ingester | 7f75047e9e44 | daa8c414 | | service-status | ok | |
| rda_app | alert-ingester | 7f75047e9e44 | daa8c414 | | 192.168-connectivity | ok | |
| rda_app | alert-ingester | 7f75047e9e44 | daa8c414 | | service-dependency:configuration-service | ok | 2 pod(s) found for configuration-service |
| rda_app | alert-ingester | 7f75047e9e44 | daa8c414 | | service-initialization-status | ok | |
| rda_app | alert-ingester | 7f75047e9e44 | daa8c414 | | kafka-connectivity | ok | Cluster=NTc1NWU1MTQxYmY3MTFlZg, Broker=1, Brokers=[1, 2, 3] |
| rda_app | alert-ingester | f9ec55862be0 | f9b9231c | | service-status | ok | |
| rda_app | alert-ingester | f9ec55862be0 | f9b9231c | | 192.168-connectivity | ok | |
| rda_app | alert-ingester | f9ec55862be0 | f9b9231c | | service-dependency:configuration-service | ok | 2 pod(s) found for configuration-service |
| rda_app | alert-ingester | f9ec55862be0 | f9b9231c | | service-initialization-status | ok | |
| rda_app | alert-ingester | f9ec55862be0 | f9b9231c | | kafka-connectivity | ok | Cluster=NTc1NWU1MTQxYmY3MTFlZg, Broker=3, Brokers=[1, 2, 3] |
| rda_app | alert-processor | c6cc7b04ab33 | b4ebfb06 | | service-status | ok | |
| rda_app | alert-processor | c6cc7b04ab33 | b4ebfb06 | | 192.168-connectivity | ok | |
+-----------+----------------------------------------+--------------+----------+-------------+-----------------------------------------------------+----------+-------------------------------------------------------------+
1.2.4 Upgrade rdac CLI
1.2.5 Upgrade RDA Worker Services
Note
If the worker was deployed in a HTTP proxy environment, please make sure the required HTTP proxy environment variables are added in /opt/rdaf/deployment-scripts/values.yaml file under rda_worker configuration section as shown below before upgrading RDA Worker services.
rda_worker:
terminationGracePeriodSeconds: 300
replicas: 6
sizeLimit: 1024Mi
privileged: true
resources:
requests:
memory: 100Mi
limits:
memory: 24Gi
env:
WORKER_GROUP: rda-prod-01
CAPACITY_FILTER: cpu_load1 <= 7.0 and mem_percent < 95
MAX_PROCESSES: '1000'
RDA_ENABLE_TRACES: 'no'
WORKER_PUBLIC_ACCESS: 'true'
DISABLE_REMOTE_LOGGING_CONTROL: 'no'
RDA_SELF_HEALTH_RESTART_AFTER_FAILURES: 3
extraEnvs:
- name: http_proxy
value: http://test:1234@192.168.122.107:3128
- name: https_proxy
value: http://test:1234@192.168.122.107:3128
- name: HTTP_PROXY
value: http://test:1234@192.168.122.107:3128
- name: HTTPS_PROXY
value: http://test:1234@192.168.122.107:3128
....
....
Step-1: Please run the below command to initiate upgrading the RDA Worker service PODs.
Step-2: Run the below command to check the status of the existing and newer PODs and make sure atleast one instance of each RDA Worker service POD is in Terminating state.
NAME READY STATUS RESTARTS AGE
rda-worker-77f459d5b9-9kdmg 1/1 Running 0 73m
rda-worker-77f459d5b9-htsmr 1/1 Running 0 74m
Step-3: Run the below command to put all Terminating RDAF worker service PODs into maintenance mode. It will list all of the POD Ids of RDA worker services along with rdac maintenance command that is required to be put in maintenance mode.
Step-4: Copy & Paste the rdac maintenance command as below.
Step-5: Run the below command to verify the maintenance mode status of the RDAF worker services.
Step-6: Run the below command to delete the Terminating RDAF worker service PODs
for i in `kubectl get pods -n rda-fabric -l app_component=rda-worker | grep 'Terminating' | awk '{print $1}'`; do kubectl delete pod $i -n rda-fabric --force; done
Note
Wait for 120 seconds between each RDAF worker service upgrade by repeating above steps from Step-2 to Step-6 for rest of the RDAF worker service PODs.
Step-7: Please wait for 120 seconds to let the newer version of RDA Worker service PODs join the RDA Fabric appropriately. Run the below commands to verify the status of the newer RDA Worker service PODs.
+------------+----------------+---------------+--------------+---------+
| Name | Host | Status | Container Id | Tag |
+------------+----------------+---------------+--------------+---------+
| rda-worker | 192.168.108.17 | Up 1 Hour ago | a1b2c3d4e5f0 | 8.2.3 |
| rda-worker | 192.168.108.18 | Up 1 Hour ago | f9e8d7c6b5a4 | 8.2.3 |
+------------+----------------+---------------+--------------+---------+
Step-8: Run the below command to check if all RDA Worker services has ok status and does not throw any failure messages.
Note
If the worker was deployed in a HTTP proxy environment, please make sure the required HTTP proxy environment variables are added in /opt/rdaf/deployment-scripts/values.yaml file under rda_worker configuration section as shown below before upgrading RDA Worker services.
rda_worker:
mem_limit: 8G
memswap_limit: 8G
privileged: false
environment:
RDA_ENABLE_TRACES: 'no'
RDA_SELF_HEALTH_RESTART_AFTER_FAILURES: 3
http_proxy: "http://test:1234@192.168.122.107:3128"
https_proxy: "http://test:1234@192.168.122.107:3128"
HTTP_PROXY: "http://test:1234@192.168.122.107:3128"
HTTPS_PROXY: "http://test:1234@192.168.122.107:3128"
- Upgrade RDA Worker Services
Please run the below command to initiate upgrading the RDA Worker Service with zero downtime
Note
timeout <10> mentioned in the above command represents as seconds
Note
The rolling-upgrade option upgrades the Worker services running in high-availability mode on one VM at a time in sequence. It completes the upgrade of Worker services running on VM-1 before upgrading them on VM-2, followed by VM-3, and so on.
After completing the Worker services upgrade on all VMs, it will ask for user confirmation, the user has to provide YES to delete the older version Worker service PODs.
2026-08-06 13:12:22,039 [rdaf.component.worker] INFO - Collecting worker details for rolling upgrade
2026-08-06 13:12:47,207 [rdaf.component.worker] INFO - Rolling upgrade worker on 192.168.133.65
+----------+----------+---------+---------+--------------+-------------+------------+
| Pod ID | Pod Type | Version | Age | Hostname | Maintenance | Pod Status |
+----------+----------+---------+---------+--------------+-------------+------------+
| 8e3f97f5 | worker | 8.2.2 | 7:54:32 | 45debd60c77c | None | True |
+----------+----------+---------+---------+--------------+-------------+------------+
Continue moving above pod to maintenance mode? [yes/no]: yes
2026-08-06 13:12:54,749 [rdaf.component.worker] INFO - Initiating maintenance mode for pod 8e3f97f5
2026-08-06 13:13:43,544 [rdaf.component.worker] INFO - Following worker container is in maintenance mode
+----------+----------+---------+---------+--------------+-------------+------------+
| Pod ID | Pod Type | Version | Age | Hostname | Maintenance | Pod Status |
+----------+----------+---------+---------+--------------+-------------+------------+
| 8e3f97f5 | worker | 8.2.2 | 7:55:32 | 45debd60c77c | maintenance | False |
+----------+----------+---------+---------+--------------+-------------+------------+
2026-08-06 13:13:43,545 [rdaf.component.worker] INFO - Waiting for timeout of 10 seconds.
Run the following command to check the worker status.
+------------+----------------+-------------------+--------------+---------+
| Name | Host | Status | Container Id | Tag |
+------------+----------------+-------------------+--------------+---------+
| rda_worker | 192.168.108.53 | Up 57 Minutes ago | 42a37703fd2a | 8.2.3 |
| rda_worker | 192.168.108.54 | Up 4 hours | f53807d9ce35 | 8.2.3 |
+------------+----------------+-------------------+--------------+---------+
+-----------+----------------------------------------+--------------+----------+-------------+-----------------------------------------------------+----------+-----------------------------------------------------------------------------------------------------------------------------+
| Cat | Pod-Type | Host | ID | Site | Health Parameter | Status | Message |
|-----------+----------------------------------------+--------------+----------+-------------+-----------------------------------------------------+----------+-----------------------------------------------------------------------------------------------------------------------------|
| rda_infra | api-server | 1b0542719618 | 1845ae67 | | service-status | ok | |
| rda_infra | api-server | 1b0542719618 | 1845ae67 | | 192.168-connectivity | ok | |
| rda_infra | api-server | d4404cffdc7a | a4cfdc6d | | service-status | ok | |
| rda_infra | api-server | d4404cffdc7a | a4cfdc6d | | 192.168-connectivity | ok | |
| rda_infra | asm | 8d3d52a7a475 | 418c9dc1 | | service-status | ok | |
| rda_infra | asm | 8d3d52a7a475 | 418c9dc1 | | 192.168-connectivity | ok | |
| rda_infra | asm | ab172a9b8229 | 2ac1d67a | | service-status | ok | |
| rda_infra | asm | ab172a9b8229 | 2ac1d67a | | 192.168-connectivity | ok | |
| rda_app | asset-dependency | 6ac69ca1085c | c2e9dcb9 | | service-status | ok | |
| rda_app | asset-dependency | 6ac69ca1085c | c2e9dcb9 | | 192.168-connectivity | ok | |
| rda_app | asset-dependency | 58a5f4f460d3 | 0b91caac | | service-status | ok | |
| rda_app | asset-dependency | 58a5f4f460d3 | 0b91caac | | 192.168-connectivity | ok | |
| rda_app | authenticator | 9011c2aef498 | 9f7efdc3 | | service-status | ok | |
| rda_app | authenticator | 9011c2aef498 | 9f7efdc3 | | 192.168-connectivity | ok | |
| rda_app | authenticator | 9011c2aef498 | 9f7efdc3 | | DB-connectivity | ok | |
| rda_app | authenticator | 148621ed8c82 | dbf16b82 | | service-status | ok | |
| rda_app | authenticator | 148621ed8c82 | dbf16b82 | | 192.168-connectivity | ok | |
| rda_app | authenticator | 148621ed8c82 | dbf16b82 | | DB-connectivity | ok | |
| rda_app | cfx-app-controller | 75ec0f30cfa3 | 1198fdee | | service-status | ok | |
| rda_app | cfx-app-controller | 75ec0f30cfa3 | 1198fdee | | 192.168-connectivity | ok | |
| rda_app | cfx-app-controller | 75ec0f30cfa3 | 1198fdee | | service-initialization-status | ok | |
| rda_app | cfx-app-controller | 75ec0f30cfa3 | 1198fdee | | DB-connectivity | ok |
+-----------+----------------------------------------+--------------+----------+-------------+-----------------------------------------------------+----------+-----------------------------------------------------------------------------------------------------------------------------+
1.2.6 Upgrade OIA Application Services
Step-1: Run the below commands to initiate upgrading RDAF OIA Application services
Step-2: Run the below command to check the status of the newly upgraded PODs.
Step-3: Run the below command to put all Terminating OIA application service PODs into maintenance mode. It will list all of the POD Ids of OIA application services along with rdac maintenance command that are required to be put in maintenance mode.
Step-4: Copy & Paste the rdac maintenance command as below.
Step-5: Run the below command to verify the maintenance mode status of the OIA application services.
Step-6: Run the below command to delete the Terminating OIA application service PODs
for i in `kubectl get pods -n rda-fabric -l app_name=oia | grep 'Terminating' | awk '{print $1}'`; do kubectl delete pod $i -n rda-fabric --force; done
Note
Wait for 120 seconds and Repeat above steps from Step-2 to Step-6 for rest of the OIA application service PODs.
Please wait till all of the new OIA application service PODs are in Running state and run the below command to verify their status and make sure they are running with 8.2.3 version.
+--------------------------------------+-----------------+-----------+--------------+-------+
| Name | Host | Status | Container Id | Tag |
+--------------------------------------+-----------------+-----------+--------------+-------+
| cfx-rda-app-controller | 192.168.105.121 | Up 4 days | a7f3c9e1b5d2 | 8.2.3 |
| cfx-rda-reports-registry | 192.168.105.121 | Up 4 days | 4b8e2d6f1a9c | 8.2.3 |
| cfx-rda-notification-service | 192.168.105.121 | Up 4 days | d5c1a9f7e3b8 | 8.2.3 |
| cfx-rda-file-browser | 192.168.105.121 | Up 4 days | 9e4b7c2a6f1d | 8.2.3 |
| cfx-rda-configuration-service | 192.168.105.121 | Up 4 days | 2f8d5a1c7e9b | 8.2.3 |
| cfx-rda-alert-ingester | 192.168.105.121 | Up 4 days | c6a3e9b5d1f7 | 8.2.3 |
| cfx-rda-webhook-server | 192.168.105.121 | Up 4 days | 7d2f8c4a9e1b | 8.2.3 |
| cfx-rda-smtp-server | 192.168.105.121 | Up 4 days | e1b6a4f9c3d8 | 8.2.3 |
| cfx-rda-event-consumer | 192.168.105.121 | Up 4 days | 5c9e2a7d4f1b | 8.2.3 |
| cfx-rda-alert-processor | 192.168.105.121 | Up 4 days | b3f7d1e8a6c2 | 8.2.3 |
| cfx-rda-alert-correlator | 192.168.105.121 | Up 4 days | 8a5c2e9f3b7d | 8.2.3 |
| cfx-rda-irm-service | 192.168.105.121 | Up 4 days | f4d9b1c7e5a3 | 8.2.3 |
| cfx-rda-ml-config | 192.168.105.121 | Up 4 days | 6e2a8f5c1d9b | 8.2.3 |
| cfx-rda-collaboration | 192.168.105.121 | Up 4 days | 1c7e4b9a6f2d | 8.2.3 |
| cfx-rda-ingestion-tracker | 192.168.105.121 | Up 4 days | 9f3a6d1c8e5b | 8.2.3 |
| cfx-rda-alert-processor-companion | 192.168.105.121 | Up 4 days | 3d8b5f2a7c9e | 8.2.3 |
+--------------------------------------+-----------------+-----------+--------------+-------+
Step-7: Run the below command to verify all OIA application services are up and running.
+-------+----------------------------------------+-------------+----------------+----------+-------------+----------+--------+--------------+---------------+--------------+
| Cat | Pod-Type | Pod-Ready | Host | ID | Site | Age | CPUs | Memory(GB) | Active Jobs | Total Jobs |
|-------+----------------------------------------+-------------+----------------+----------+-------------+----------+--------+--------------+---------------+--------------|
| App | alert-ingester | True | rda-alert-inge | 6a6e464d | | 19:19:06 | 8 | 31.33 | | |
| App | alert-ingester | True | rda-alert-inge | 7f6b42a0 | | 19:19:23 | 8 | 31.33 | | |
| App | alert-processor | True | rda-alert-proc | a880e491 | | 19:19:51 | 8 | 31.33 | | |
| App | alert-processor | True | rda-alert-proc | b684609e | | 19:19:48 | 8 | 31.33 | | |
| App | alert-processor-companion | True | rda-alert-proc | 874f3b33 | | 19:18:54 | 8 | 31.33 | | |
| App | alert-processor-companion | True | rda-alert-proc | 70cadaa7 | | 19:18:35 | 8 | 31.33 | | |
| App | asset-dependency | True | rda-asset-depe | bde06c15 | | 19:44:20 | 8 | 31.33 | | |
| App | asset-dependency | True | rda-asset-depe | 47b9eb02 | | 19:44:08 | 8 | 31.33 | | |
| App | authenticator | True | rda-identity-d | faa33e1b | | 19:44:22 | 8 | 31.33 | | |
| App | authenticator | True | rda-identity-d | 36083c36 | | 19:44:16 | 8 | 31.33 | | |
| App | cfx-app-controller | True | rda-app-contro | 5fd3c3f4 | | 19:19:39 | 8 | 31.33 | | |
| App | cfx-app-controller | True | rda-app-contro | d66e5ce8 | | 19:19:26 | 8 | 31.33 | | |
| App | cfxdimensions-app-access-manager | True | rda-access-man | ecbb535c | | 19:44:16 | 8 | 31.33 | | |
| App | cfxdimensions-app-access-manager | True | rda-access-man | 9a05db5a | | 19:44:06 | 8 | 31.33 | | |
| App | cfxdimensions-app-collaboration | True | rda-collaborat | 61b3c53b | | 19:18:48 | 8 | 31.33 | | |
| App | cfxdimensions-app-collaboration | True | rda-collaborat | 09b9474e | | 19:18:27 | 8 | 31.33 | | |
+-------+----------------------------------------+-------------+----------------+----------+-------------+-------------------+--------+-----------------------------+--------------+
Run the below command to check if all services has ok status and does not throw any failure messages.
+-----------+----------------------------------------+--------------+----------+-------------+-----------------------------------------------------+----------+-----------------------------------------------------------------------------------------------------------------------------+
| Cat | Pod-Type | Host | ID | Site | Health Parameter | Status | Message |
|-----------+----------------------------------------+--------------+----------+-------------+-----------------------------------------------------+----------+-----------------------------------------------------------------------------------------------------------------------------|
| rda_app | alert-ingester | rda-alert-in | 6a6e464d | | service-status | ok | |
| rda_app | alert-ingester | rda-alert-in | 6a6e464d | | 192.168-connectivity | ok | |
| rda_app | alert-ingester | rda-alert-in | 6a6e464d | | service-dependency:configuration-service | ok | 2 pod(s) found for configuration-service |
| rda_app | alert-ingester | rda-alert-in | 6a6e464d | | service-initialization-status | ok | |
| rda_app | alert-ingester | rda-alert-in | 6a6e464d | | kafka-connectivity | ok | Cluster=dKnnkaYSPELK8DBUk0rPig, Broker=0, Brokers=[0, 1, 2] |
| rda_app | alert-ingester | rda-alert-in | 6a6e464d | | kafka-consumer | ok | Health: [{'387c0cb507b84878b9d0b15222cb4226.inbound-events': 0, '387c0cb507b84878b9d0b15222cb4226.mapped-events': 0}, {}] |
| rda_app | alert-ingester | rda-alert-in | 7f6b42a0 | | service-status | ok | |
| rda_app | alert-ingester | rda-alert-in | 7f6b42a0 | | 192.168-connectivity | ok | |
| rda_app | alert-ingester | rda-alert-in | 7f6b42a0 | | service-dependency:configuration-service | ok | 2 pod(s) found for configuration-service |
| rda_app | alert-ingester | rda-alert-in | 7f6b42a0 | | service-initialization-status | ok | |
| rda_app | alert-ingester | rda-alert-in | 7f6b42a0 | | kafka-consumer | ok | Health: [{'387c0cb507b84878b9d0b15222cb4226.inbound-events': 0, '387c0cb507b84878b9d0b15222cb4226.mapped-events': 0}, {}] |
| rda_app | alert-ingester | rda-alert-in | 7f6b42a0 | | kafka-connectivity | ok | Cluster=dKnnkaYSPELK8DBUk0rPig, Broker=1, Brokers=[0, 1, 2] |
| rda_app | alert-processor | rda-alert-pr | a880e491 | | service-status | ok | |
| rda_app | alert-processor | rda-alert-pr | a880e491 | | 192.168-connectivity | ok | |
| rda_app | alert-processor | rda-alert-pr | a880e491 | | service-dependency:cfx-app-controller | ok | 2 pod(s) found for cfx-app-controller |
| rda_app | alert-processor | rda-alert-pr | a880e491 | | service-dependency:configuration-service | ok | 2 pod(s) found for configuration-service |
| rda_app | alert-processor | rda-alert-pr | a880e491 | | service-initialization-status | ok | |
| rda_app | alert-processor | rda-alert-pr | a880e491 | | kafka-connectivity | ok | Cluster=dKnnkaYSPELK8DBUk0rPig, Broker=1, Brokers=[0, 1, 2] |
| rda_app | alert-processor | rda-alert-pr | a880e491 | | DB-connectivity | ok | |
+-----------+----------------------------------------+--------------+----------+-------------+-----------------------------------------------------+----------+-------------------------------------------------------------+
Run the below commands to initiate upgrading the RDA Fabric OIA Application services with zero downtime
Note
timeout <10> mentioned in the above command represents as Seconds
Note
The rolling-upgrade option upgrades the OIA application services running in high-availability mode on one VM at a time in sequence. It completes the upgrade of OIA application services running on VM-1 before upgrading them on VM-2, followed by VM-3, and so on.
After completing the OIA application services upgrade on all VMs, it will ask for user confirmation to delete the older version OIA application service PODs.
2026-08-06 13:29:46,321 [rdaf.component.oia] INFO - Gathering OIA app container details.
2026-08-06 13:29:49,624 [rdaf.component.oia] INFO - Gathering rdac pod details.
+----------+--------------------------+---------+---------+--------------+-------------+------------+
| Pod ID | Pod Type | Version | Age | Hostname | Maintenance | Pod Status |
+----------+--------------------------+---------+---------+--------------+-------------+------------+
| 4f16fd39 | cfx-app-controller | 8.2.2 | 8:46:12 | e6851c36edd7 | None | True |
| 6075286f | reports-registry | 8.2.2 | 8:46:05 | 5088dd396c53 | None | True |
| 5739a4d6 | cfxdimensions-app- | 8.2.2 | 8:45:59 | 7b9620fb4554 | None | True |
| | notification-service | | | | | |
| 8665cdfe | cfxdimensions-app-file- | 8.2.2 | 8:45:53 | 9a2d4921be2e | None | True |
| | browser | | | | | |
| 7574442b | configuration-service | 8.2.2 | 8:45:46 | 711c88ba04c7 | None | True |
| 1fa5f5ea | alert-ingester | 8.2.2 | 8:45:39 | d7d120b328b5 | None | True |
| ce8af979 | webhook-server | 8.2.2 | 8:45:33 | 3424ac73fb93 | None | True |
| 1065b26b | smtp-server | 8.2.2 | 8:45:27 | 4fb66cb1bfa1 | None | True |
| 2281c82b | event-consumer | 8.2.2 | 8:45:20 | f7397bc9bc66 | None | True |
| 2ff30a20 | alert-processor | 8.2.2 | 8:45:11 | 0061184d1425 | None | True |
| a447200b | alert-correlator | 8.2.2 | 8:45:03 | d4d09a3a10fa | None | True |
| b4ea3f1b | cfxdimensions-app- | 8.2.2 | 8:44:57 | b7bd45f77ddb | None | True |
| | irm_service | | | | | |
| e350e6ef | ml-config | 8.2.2 | 8:44:52 | 15633752f0dc | None | True |
| c7091cde | cfxdimensions-app- | 8.2.2 | 7:35:55 | 9de8d93c7954 | None | True |
| | collaboration | | | | | |
| cb6e05cc | ingestion-tracker | 8.2.2 | 8:44:41 | 48ab35583cf8 | None | True |
| 0b995987 | alert-processor- | 8.2.2 | 8:44:35 | 6874c6ce363b | None | True |
| | companion | | | | | |
+----------+--------------------------+---------+---------+--------------+-------------+------------+
Continue moving above pods to maintenance mode? [yes/no]: yes
2026-08-06 13:31:11,222 [rdaf.component.oia] INFO - Initiating Maintenance Mode...
2026-08-06 13:31:54,079 [rdaf.component.oia] INFO - Following container are in maintenance mode
+----------+--------------------------+---------+---------+--------------+-------------+------------+
| Pod ID | Pod Type | Version | Age | Hostname | Maintenance | Pod Status |
+----------+--------------------------+---------+---------+--------------+-------------+------------+
| a447200b | alert-correlator | 8.2.2 | 8:46:43 | d4d09a3a10fa | maintenance | False |
| 1fa5f5ea | alert-ingester | 8.2.2 | 8:47:19 | d7d120b328b5 | maintenance | False |
| 2ff30a20 | alert-processor | 8.2.2 | 8:46:51 | 0061184d1425 | maintenance | False |
| 0b995987 | alert-processor- | 8.2.2 | 8:46:15 | 6874c6ce363b | maintenance | False |
| | companion | | | | | |
| 4f16fd39 | cfx-app-controller | 8.2.2 | 8:47:52 | e6851c36edd7 | maintenance | False |
| c7091cde | cfxdimensions-app- | 8.2.2 | 7:37:35 | 9de8d93c7954 | maintenance | False |
| | collaboration | | | | | |
| 8665cdfe | cfxdimensions-app-file- | 8.2.2 | 8:47:33 | 9a2d4921be2e | maintenance | False |
| | browser | | | | | |
| b4ea3f1b | cfxdimensions-app- | 8.2.2 | 8:46:37 | b7bd45f77ddb | maintenance | False |
| | irm_service | | | | | |
| 5739a4d6 | cfxdimensions-app- | 8.2.2 | 8:47:39 | 7b9620fb4554 | maintenance | False |
| | notification-service | | | | | |
| 7574442b | configuration-service | 8.2.2 | 8:47:26 | 711c88ba04c7 | maintenance | False |
| 2281c82b | event-consumer | 8.2.2 | 8:47:00 | f7397bc9bc66 | maintenance | False |
| cb6e05cc | ingestion-tracker | 8.2.2 | 8:46:21 | 48ab35583cf8 | maintenance | False |
| e350e6ef | ml-config | 8.2.2 | 8:46:32 | 15633752f0dc | maintenance | False |
| 6075286f | reports-registry | 8.2.2 | 8:47:45 | 5088dd396c53 | maintenance | False |
| 1065b26b | smtp-server | 8.2.2 | 8:47:07 | 4fb66cb1bfa1 | maintenance | False |
| ce8af979 | webhook-server | 8.2.2 | 8:47:13 | 3424ac73fb93 | maintenance | False |
+----------+--------------------------+---------+---------+--------------+-------------+------------+
Please wait till all of the new OIA application service containers are in Up state and run the below command to verify their status and make sure they are running with 8.2.3 version.
+-----------------------------------+----------------+------------+--------------+-------+
| Name | Host | Status | Container Id | Tag |
+-----------------------------------+----------------+------------+--------------+-------+
| cfx-rda-app-controller | 192.168.108.51 | Up 3 hours | a8f3c1e7b5d9 | 8.2.3 |
| cfx-rda-app-controller | 192.168.108.52 | Up 3 hours | 4d9b2e6f1a7c | 8.2.3 |
| cfx-rda-reports-registry | 192.168.108.51 | Up 4 hours | e2c7a5f9b3d1 | 8.2.3 |
| cfx-rda-reports-registry | 192.168.108.52 | Up 4 hours | 7f1d8c4a6b9e | 8.2.3 |
| cfx-rda-notification-service | 192.168.108.51 | Up 4 hours | b6e9a3c1f8d5 | 8.2.3 |
| cfx-rda-notification-service | 192.168.108.52 | Up 4 hours | 2a5d7f9c4e1b | 8.2.3 |
| cfx-rda-file-browser | 192.168.108.51 | Up 4 hours | c9f2b6e4a1d8 | 8.2.3 |
| cfx-rda-file-browser | 192.168.108.52 | Up 4 hours | 5e8a1c7d3f9b | 8.2.3 |
| cfx-rda-configuration-service | 192.168.108.51 | Up 4 hours | d4b9f1a6c7e2 | 8.2.3 |
| cfx-rda-configuration-service | 192.168.108.52 | Up 4 hours | 9c3e7a5f1b8d | 8.2.3 |
| cfx-rda-alert-ingester | 192.168.108.51 | Up 4 hours | f7a2d9c4e6b1 | 8.2.3 |
| cfx-rda-alert-ingester | 192.168.108.52 | Up 4 hours | 1b6f3c8e5a9d | 8.2.3 |
| cfx-rda-webhook-server | 192.168.108.51 | Up 4 hours | 6d1a8f4c9e3b | 8.2.3 |
| cfx-rda-webhook-server | 192.168.108.52 | Up 4 hours | e5c7b2a9f1d6 | 8.2.3 |
| cfx-rda-smtp-server | 192.168.108.51 | Up 4 hours | 3f9e6a1c8d4b | 8.2.3 |
| cfx-rda-smtp-server | 192.168.108.52 | Up 4 hours | 8b4d2f7a5c1e | 8.2.3 |
+-----------------------------------+----------------+------------+--------------+-------+
Run the below command to verify all OIA application services are up and running.
+-------+----------------------------------------+-------------+----------------+----------+-------------+----------+--------+--------------+---------------+--------------+
| Cat | Pod-Type | Pod-Ready | Host | ID | Site | Age | CPUs | Memory(GB) | Active Jobs | Total Jobs |
|-------+----------------------------------------+-------------+----------------+----------+-------------+----------+--------+--------------+---------------+--------------|
| App | alert-ingester | True | rda-alert-inge | 6a6e464d | | 19:22:36 | 8 | 31.33 | | |
| App | alert-ingester | True | rda-alert-inge | 7f6b42a0 | | 19:22:53 | 8 | 31.33 | | |
| App | alert-processor | True | rda-alert-proc | a880e491 | | 19:23:21 | 8 | 31.33 | | |
| App | alert-processor | True | rda-alert-proc | b684609e | | 19:23:18 | 8 | 31.33 | | |
| App | alert-processor-companion | True | rda-alert-proc | 874f3b33 | | 19:22:24 | 8 | 31.33 | | |
| App | alert-processor-companion | True | rda-alert-proc | 70cadaa7 | | 19:22:05 | 8 | 31.33 | | |
| App | asset-dependency | True | rda-asset-depe | bde06c15 | | 19:47:50 | 8 | 31.33 | | |
| App | asset-dependency | True | rda-asset-depe | 47b9eb02 | | 19:47:38 | 8 | 31.33 | | |
| App | authenticator | True | rda-identity-d | faa33e1b | | 19:47:52 | 8 | 31.33 | | |
| App | authenticator | True | rda-identity-d | 36083c36 | | 19:47:46 | 8 | 31.33 | | |
| App | cfx-app-controller | True | rda-app-contro | 5fd3c3f4 | | 19:23:09 | 8 | 31.33 | | |
| App | cfx-app-controller | True | rda-app-contro | d66e5ce8 | | 19:22:56 | 8 | 31.33 | | |
| App | cfxdimensions-app-access-manager | True | rda-access-man | ecbb535c | | 19:47:46 | 8 | 31.33 | | |
| App | cfxdimensions-app-access-manager | True | rda-access-man | 9a05db5a | | 19:47:36 | 8 | 31.33 | | |
| App | cfxdimensions-app-collaboration | True | rda-collaborat | 61b3c53b | | 19:22:18 | 8 | 31.33 | | |
| App | cfxdimensions-app-collaboration | True | rda-collaborat | 09b9474e | | 19:21:57 | 8 | 31.33 | | |
| App | cfxdimensions-app-file-browser | True | rda-file-brows | 00495640 | | 19:22:45 | 8 | 31.33 | | |
| App | cfxdimensions-app-file-browser | True | rda-file-brows | 640f0653 | | 19:22:29 | 8 | 31.33 | | |
| App | cfxdimensions-app-irm_service | True | rda-irm-servic | 27e345c5 | | 19:21:43 | 8 | 31.33 | | |
| App | cfxdimensions-app-irm_service | True | rda-irm-servic | 23c7e082 | | 19:21:56 | 8 | 31.33 | | |
| App | cfxdimensions-app-notification-service | True | rda-notificati | bbb5b08b | | 19:23:20 | 8 | 31.33 | | |
| App | cfxdimensions-app-notification-service | True | rda-notificati | 9841bcb5 | | 19:23:02 | 8 | 31.33 | | |
+-------+----------------------------------------+-------------+----------------+----------+-------------+----------+--------+--------------+---------------+--------------+
Run the below command to check if all services has ok status and does not throw any failure messages.
+-----------+----------------------------------------+--------------+----------+-------------+-----------------------------------------------------+----------+-------------------------------------------------------------+
| Cat | Pod-Type | Host | ID | Site | Health Parameter | Status | Message |
|-----------+----------------------------------------+--------------+----------+-------------+-----------------------------------------------------+----------+-------------------------------------------------------------|
| rda_app | alert-ingester | 7f75047e9e44 | daa8c414 | | service-status | ok | |
| rda_app | alert-ingester | 7f75047e9e44 | daa8c414 | | 192.168-connectivity | ok | |
| rda_app | alert-ingester | 7f75047e9e44 | daa8c414 | | service-dependency:configuration-service | ok | 2 pod(s) found for configuration-service |
| rda_app | alert-ingester | 7f75047e9e44 | daa8c414 | | service-initialization-status | ok | |
| rda_app | alert-ingester | 7f75047e9e44 | daa8c414 | | kafka-connectivity | ok | Cluster=NTc1NWU1MTQxYmY3MTFlZg, Broker=1, Brokers=[1, 2, 3] |
| rda_app | alert-ingester | f9ec55862be0 | f9b9231c | | service-status | ok | |
| rda_app | alert-ingester | f9ec55862be0 | f9b9231c | | 192.168-connectivity | ok | |
| rda_app | alert-ingester | f9ec55862be0 | f9b9231c | | service-dependency:configuration-service | ok | 2 pod(s) found for configuration-service |
| rda_app | alert-ingester | f9ec55862be0 | f9b9231c | | service-initialization-status | ok | |
| rda_app | alert-ingester | f9ec55862be0 | f9b9231c | | kafka-connectivity | ok | Cluster=NTc1NWU1MTQxYmY3MTFlZg, Broker=2, Brokers=[1, 2, 3] |
| rda_app | alert-processor | c6cc7b04ab33 | b4ebfb06 | | service-status | ok | |
| rda_app | alert-processor | c6cc7b04ab33 | b4ebfb06 | | 192.168-connectivity | ok | |
+-----------+----------------------------------------+--------------+----------+-------------+-----------------------------------------------------+----------+-------------------------------------------------------------+
1.2.7 Upgrade Event Gateway Services
Step 1. Prerequisites
- Event Gateway with 8.2.2 tag should be already installed
Step 2. Upgrade Event Gateway Using RDAF CLI
- To upgrade the event gateway, log in to the rdaf cli VM and execute the following command.
+-------------------+-----------------+---------------+--------------+-------------+
| Name | Host | Status | Container Id | Tag |
+-------------------+-----------------+---------------+--------------+-------------+
| rda-event-gateway | 192.168.108.118 | Up 1 Days ago | 75e8baae6bbc | 8.2.3 |
| rda-event-gateway | 192.168.108.117 | Up 1 Days ago | 53ea97a898c0 | 8.2.3 |
+-------------------+-----------------+---------------+--------------+-------------+
Step 1. Prerequisites
- Event Gateway with 8.2.2 tag should be already installed
Note
If a user deployed the event gateway using the RDAF CLI, follow Step 2 and skip Step 3 or if the user did not deploy event gateway in RDAF CLI go to Step 3
Step 2. Upgrade Event Gateway Using RDAF CLI
- To upgrade the event gateway, log in to the rdaf cli VM and execute the following command.
Step 3. Upgrade Event Gateway Using Docker Compose File
-
Login to the Event Gateway installed VM
-
Navigate to the location where Event Gateway was previously installed, using the following command
-
Edit the docker-compose file for the Event Gateway using a local editor (e.g. vi) update the tag and save it
version: '3.1' services: rda_event_gateway: image: docker2.cloudfabrix.io:443/external/ubuntu-rda-event-gateway:8.2.3 restart: always network_mode: host mem_limit: 6G memswap_limit: 6G volumes: - /opt/rdaf/network_config:/network_config - /opt/rdaf/event_gateway/config:/event_gw_config - /opt/rdaf/event_gateway/certs:/certs - /opt/rdaf/event_gateway/logs:/logs - /opt/rdaf/event_gateway/log_archive:/tmp/log_archive logging: driver: "json-file" options: max-size: "25m" max-file: "5" environment: RDA_NETWORK_CONFIG: /network_config/rda_network_config.json EVENT_GW_MAIN_CONFIG: /event_gw_config/main/main.yml EVENT_GW_SNMP_TRAP_CONFIG: /event_gw_config/snmptrap/trap_template.json EVENT_GW_SNMP_TRAP_ALERT_CONFIG: /event_gw_config/snmptrap/trap_to_alert_go.yaml AGENT_GROUP: event_gateway_site01 EVENT_GATEWAY_CONFIG_DIR: /event_gw_config LOGGER_CONFIG_FILE: /event_gw_config/main/logging.yml -
Please run the following commands
-
Use the command as shown below to ensure that the RDA docker instances are up and running.
-
Use the below mentioned command to check docker logs for any errors
+-------------------+---------------+---------------+--------------+-------+
| Name | Host | Status | Container Id | Tag |
+-------------------+---------------+---------------+--------------+-------+
| rda_event_gateway | 192.168.108.127 | Up 5 minutes| c22b1cf6900e | 8.2.3 |
| rda_event_gateway | 192.168.108.128 | Up 5 minutes| 36b86a7bdff3 | 8.2.3 |
+-------------------+---------------+---------------+--------------+-------+
1.2.8 RDA Studio Upgrade
Please navigate to the rda-studio.yml file. You need to modify the existing tag version to 8.2.3, ensuring it matches the format shown in the example below, and then save the file
services:
cfxdx:
image: docker2.cloudfabrix.io:443/external/ubuntu-cfxdx-nb-nginx-all:8.2.3
restart: unless-stopped
volumes:
- /opt/rdaf/cfxdx/home/:/root
- /opt/rdaf/cfxdx/config/:/tmp/config/
- /opt/rdaf/cfxdx/output:/tmp/output/
- /opt/rdaf/config/network_config/:/network_config
ports:
- "9998:9998"
environment:
#JUPYTER_TOKEN: cfxdxdemo
NLTK_DATA : "/root/nltk_data"
CFXDX_CONFIG_FILE: /tmp/config/conf.yml
RDA_NETWORK_CONFIG: /network_config/config.json
RDA_USER: xxxxxxx
RDA_PASSWORD: xxxxxxxxxxxx
After updating the rda-studio.yml file to set the tag version to 8.2.3, execute the following commands to pull the latest images and start the services
1.2.9 Upgrade RDAF Bulkstats Services
Note
This service is applicable for Non-K8s only
Note
The RDAF Bulkstats service is optional and only necessary if the Bulkstats data ingestion feature is required. Otherwise, you may ignore the steps below and go to next section.
Run the below command to upgrade bulk_stats services
Run the below command to get the bulk_stats status
+----------------+----------------+------------+--------------+---------+
| Name | Host | Status | Container Id | Tag |
+----------------+----------------+------------+--------------+---------+
| rda_bulk_stats | 192.168.108.51 | Up 4 hours | c7d8e9f0a1b2 | 8.2.3 |
| rda_bulk_stats | 192.168.108.52 | Up 4 hours | a3b4c5d6e7f8 | 8.2.3 |
+----------------+----------------+------------+--------------+---------+
1.2.10 Upgrade RDAF File Object Services
Note
This service is applicable for Non-K8s only, The RDAF File Object service is optional and only necessary if the Bulkstats data ingestion feature is required. Otherwise, you may ignore the steps below and go to next section
Run the below command to upgrade File Object services.
Run the below command to get the file_object status
+-----------------+----------------+---------------+--------------+---------+
| Name | Host | Status | Container Id | Tag |
+-----------------+----------------+---------------+--------------+---------+
| rda_file_object | 192.168.108.51 | Up 54 seconds | e4b7c1f9a3d6 | 8.2.3 |
| rda_file_object | 192.168.108.52 | Up 52 seconds | 7f3a9c2d1e4b | 8.2.3 |
+-----------------+----------------+---------------+--------------+---------+
1.2.11 Upgrade Self Monitoring
- To Upgrade the self-monitoring service, run the following command
- Run the below command to get the self-monitoring status
+------------------+-----------------+---------------+--------------+-------+
| Name | Host | Status | Container Id | Tag |
+------------------+-----------------+---------------+--------------+-------+
| cfx_self_monitor | 192.168.108.114 | Up 51 minutes | 50f4954bf4c8 | 8.2.3 |
+------------------+-----------------+---------------+--------------+-------+
- To Upgrade the self-monitoring service, run the following command
- Run the below command to get the self-monitoring status
+-------------------+-----------------+---------------+--------------+-------+
| Name | Host | Status | Container Id | Tag |
+-------------------+-----------------+---------------+--------------+-------+
| cfx_self_monitor | 192.168.108.123 | Up 59 minutes | c0d1a13a6792 | 8.2.3 |
+-------------------+-----------------+---------------+--------------+-------+
1.2.12 Prune Images
After upgrading the services, run the below command to clean up the un-used docker images. This command helps to clean up and free the disk space
1.3. Post Upgrade Steps
Note
To get the latest OIA Alerts and Incidents Dashboard changes, please activate the Fabrix AIOps Fault Management Base Version 14.0.0
1) Upload following RDA Packs (Go to Main Menu --> Configuration --> RDA Administration --> Packs --> Click Upload Packs from Catalog), and activate the packs for the latest dashboard changes for OIA Alerts and Incidents. Upload the following pack (ensure you select the correct versions)
- Fabrix AIOps Fault Management Base Version 14.0.0
1) Download the Fabrix AIOps Fault Management Base Version 14.0.0 from the following Link
- Upload the downloaded RDA Packs (Go to Main Menu --> Configuration --> RDA Administration --> Packs --> Click Upload Pack), and activate the packs for the latest OIA dashboard changes. Upload the following pack (ensure you select the correct versions)
Note
To get the latest OIA Alerts and Incidents Dashboard changes, please activate the Fabrix AIOps Fault Management Base Version 14.0.0
1) Upload following RDA Packs (Go to Main Menu --> Configuration --> RDA Administration --> Packs --> Click Upload Packs from Catalog), and activate the packs for the latest dashboard changes for OIA Alerts and Incidents. Upload the following pack (ensure you select the correct versions)
- Fabrix AIOps Fault Management Base Version 14.0.0
1) Download the Fabrix AIOps Fault Management Base Version 14.0.0 from the following Link
- Upload the downloaded RDA Packs (Go to Main Menu --> Configuration --> RDA Administration --> Packs --> Click Upload Pack), and activate the packs for the latest OIA dashboard changes. Upload the following pack (ensure you select the correct versions)
2). As part of the upgrade, update the following Agentic AI packs to the specified versions:
| AI Pack | Required Version |
|---|---|
| ai_administration_app_ai_projects_pack | 2026.10.16 |
3). Fix XSS and Sandbox Issues in Existing User Dashboards
Use the xss_scan_fix.py Python script to scan and fix specific XSS (Cross-Site Scripting) and sandbox-related issues in existing user dashboards that contain custom widgets.
Complete the following steps..
a) Download and Copy the Python script.
Download and Copy the script to the VM where the API Server is running.
b) Copy the script into the API Server container.
c) Scan for XSS and sandbox-related issues.
Run the following command to scan existing dashboards for XSS and sandbox-related issues.
The script runs in scan-only mode by default and does not make any changes.
Dashboard: diff_check_widget / v3 (3,131 chars)
[Class A] line 29 variable in HTML body (autoescape handles this)
[Class C] line 63 unescaped variable in <script> — verify | tojson or static
============================================================
Dashboards scanned: 539
Class A: 129 issue(s) (autoescape handles — no template change needed)
Class B: 50 issue(s) (autoescape handles — no template change needed)
Class C: 8 issue(s)
Total issues: 187
Run with --fix to apply automatic fixes (Classes C/D/E/sandbox).
Note
Class A and Class B findings are reported as handled by template autoescaping. Class C findings require further attention. Review the scan results to understand which issues may require fixes. If no issues are reported, you can skip the below given steps.
d) Review the changes using dry-run mode.
To see what changes would be made without actually modifying the dashboards, run:
[FIX DRY-RUN] Scanning 556 MinIO objects...
'workflow_job_status' / 'workflowView': C/D/Cu/Ci:3 fix(es)
→ [DRY RUN] Would update user-dashboards/meta/981fce4b-workflow_job_status.yml
'diff_check_widget' / 'v3': C/D/Cu/Ci:3 fix(es)
→ [DRY RUN] Would update user-dashboards/meta/f62bde9e-diff_check_widget.yml
============================================================
Dashboards scanned: 539
Would update: 3 dashboard(s)
Class C/D fixes: 8
Class E fixes: 0
Sandbox fixes: 0
Review the output to identify the dashboards that would be updated and the fixes that would be applied.
e) Apply the fixes.
After reviewing the dry-run output, apply the fixes by running:
This applies the identified fixes to the affected dashboards.
[FIX] Scanning 556 MinIO objects...
'workflow_job_status' / 'workflowView': C/D/Cu/Ci:3 fix(es)
→ Wrote user-dashboards/meta/981fce4b-workflow_job_status.yml
'diff_check_widget' / 'v3': C/D/Cu/Ci:3 fix(es)
→ Wrote user-dashboards/meta/f62bde9e-diff_check_widget.yml
============================================================
Dashboards scanned: 539
Updated: 3 dashboard(s)
Class C/D fixes: 8
Class E fixes: 0
Sandbox fixes: 0
f) Verify the results.
Run the scan command given below again to review the applied Fix XSS.
Dashboard: diff_check_widget / v3 (3,140 chars)
[Class A] line 29 HTML body — autoescape=True handles this
{{ comp_name }}
[Class A] line 31 HTML body — autoescape=True handles this
{{ curr_version }}
[Class A] line 33 HTML body — autoescape=True handles this
{{ sel_version }}
============================================================
Dashboards scanned: 539
Class A: 129 — autoescape=True handles — no action needed
Class B: 50 — autoescape=True handles — no action needed
Total issues: 179
Review the scan results and verify that the affected dashboards and custom widgets continue to work as expected.