On 2023-05-12 15:34 Volenbovskyi, Konstantin wrote:
what are 'source' and 'target' ovirt engine versions?
I was attempting to perform a direct upgrade from 4.3.x to 4.5.4 (nightly). It was said to work properly and I've done this before already, so I wasn't expecting trouble. :)
Indeed, update key&certificate on old engine seems as good way forward It seems that https://myhomelab.gr/linux/2020/01/20/replacing_ovirt_ssl.html and/or https://rhv.bradmin.org/ovirt-engine/docs/Upgrade_Guide/Replacing_SHA-1_Cert... will solve it for you.
Neat, I've bookmarked these guides. Very useful, thanks! However, I found another way to make it work using the following steps: - downgraded ovirt-engine-appliance-4.5 from version 20230501063412.1.el9 (nightly) to 20221206125848.1.el9 (release) - answered "YES" to the setup question "Renew engine PKI on restore if needed" Due to time constraints I could not verify which of these steps did the trick, but the upgrade was successfully. Side note: I also had to downgrade ansible-core to 2.14.1, because version 2.14.2 lead to troubles in early stages of the `hosted-engine --deploy` setup process (a Python error: cannot import name 'Callable' from 'collections'). Regards - Frank