Installing a HotFix for IBM Financial Services Workbench

Download binary artefacts and backup the old configuration

Download and extract the release from passport advantage.

mkdir SSOB_2.1.0_download
cd SSOB_2.1.0_download
wget -P SSOB_2.1.0_download "https://ssob-releases.s3.eu-de.cloud-object-storage.appdomain.cloud/ssob-2.1.0-ibm-openshift-4.3-cpd-installations.tgz?AWSAccessKeyId=42c39e71952143d388ce1675e1ea2227&Expires=1590424953&Signature=iFz8FJeBeuPCmEmnt%2FTzm505rRY%3D"  --output-document SSOB_2.1.0_download.tar.gz
tar xzvf SSOB_2.1.0_download.tar.gz   

Copy the old config files.

cd SSOB_2.1.0_download/ssob-install/deployments
mv configs configs.bak
mkdir configs
cp ../../../SSOB_2.1.3_download//ssob-install/deployments/configs/* configs

Make sure that the file structure did not change.

vimdiff configs.bak/install_init_data.yaml configs/install_init_data.yaml
vimdiff configs.bak/install.yaml configs/install.yaml
vimdiff configs.bak/solution-designer-values.yaml configs/solution-designer-values.yaml
vimdiff configs.bak/solution-hub-values.yaml configs/solution-hub-values.yaml

Perform the HotFix installation

Make sure that docker is started and that you are logged into openshift as project / cluster admin

systemctl start docker
oc login   

Step 1: Setup cluster-wide resources

cd /root/SSOB_2.1.0_download/ssob-install/deployments
chmod +x ssob_admin_setup.sh
./ssob_admin_setup.sh --accept_license --cpd_namespace=zen --external_address_image_registry=image-registry.apps.ocp43.ibm.com   

Step 2: Upgrade of IBM Financial Services Workbench

Run the install command:

cd /root/SSOB_2.1.0_download/ssob-install/deployments
chmod +x ssob_install.sh
./ssob_install.sh \
  --accept_license \
  --external_address_image_registry=image-registry.apps.ocp43.ibm.com \
  --internal_address_image_registry=image-registry.openshift-image-registry.svc:5000 \
  --cpd_namespace=zen \
  --identity_provider_host=https://keycloak.apps.ocp43.ibm.com \
  --host_domain=apps.ocp43.ibm.com \
  --helm-tls-ca-cert=/root/SSOB_2.1.0_download/zenhelm/ca.cert.pem \
  --helm-tls-cert=/root/SSOB_2.1.0_download/zenhelm/helm.cert.pem \
  --helm-tls-key=/root/SSOB_2.1.0_download/zenhelm/helm.key.pem

Step 3: Validate the installation

The installation will finish with the message The script finished successfully. In case the installation failed, please check the log file /tmp/wdp.install.log .