Running the ArcSight Platform OMT Upgrade (AWS)

The 23.2 release requires upgrading the underlying infrastructure of the ArcSight Platform to version 2023.05 (the new OPTIC Management Toolkit, abbreviated OMT). This process can take a significant amount of time, depending on the number of master and worker nodes that need to be updated, so please select the most convenient (less busy) time to perform the upgrade.

All commands should be performed from the bastion host.
Ensure the latest version of the AWS CLI is installed on the bastion. Refer to Installing or updating the latest version of the AWS CLI for instructions.

If the AWS CLI version needs to be updated, execute the following command to update the configuration after the AWS CLI update is finished:

aws eks update-kubeconfig --name <eks_cluster_name> --region <your_region>
  1. Log in to the secure network location where you stored the ArcSight Platform Cloud Installers. Move the downloaded files into the bastion, and perform the commands listed in this procedure from the bastion.

  2. Unzip the arcsight-platform-cloud-installer-<VERSION>.zip OMT installer file with this command:

    cd /tmp
    unzip arcsight-platform-cloud-installer-<VERSION>.zip
  3. On the bastion, verify that all pods in core namespaces are in status Running or Completed by running this command:

    kubectl get pods -n core
  4. Also on the bastion, check that all nodes are in Ready state by running this command:

    kubectl get nodes
  5. Switch to the AWS scripts installer directory:

    cd arcsight-platform-cloud-installer-<VERSION>.zip
  6. Unzip aws-scripts.zip:

    unzip aws-scripts.zip
  7. Switch to the scripts directory:

    cd aws-scripts/scripts
  8. Run the following command with your credentials from the ECR:

    ./upload_images_to_ECR -o $(kubectl get cm -n core base-configmap --output=jsonpath={.data.REGISTRY_ORGNAME}) -F arcsight-platform-cloud-installer-<VERSION>.zip/cdf-byok-images.tar -c 4

    Adjust the value of the -c parameter (4 in the instruction above) to up to half your CPU cores in order to increase the speed of the upload (default value is 8).

  9. Change directory to /tmp directory:

    cd /tmp/

  10. Unzip cdf-deployer.zip:

    unzip cdf-deployer.zip

  11. Change to the cdf-deployer directory:

    cd cdf-deployer/

  12. Run the upgrade script with the following command, and follow the prompts:

    ./upgrade.sh -u
    The command upgrade.sh -u may return an error message on Apphub. If this occurs, run the following command:

    helm rollback apphub 1 -n core

    After the command has executed, re-run the upgrade.

  13. When the upgrade completes, check that all pods are Running or Completed with this command:

    kubectl get pods -A

Once the OMT upgrade is complete, the new platform version can be checked by clicking the ? icon in the upper right corner of the OMT UI

Next Step: Configuring Controller Services