Upgrade Routing Director
The upgrade functionality provided by Deployment Shell enables you to upgrade your Routing Director installation and all the applications running on it to the latest release.
You can upgrade to the latest Juniper Routing Director Release 2.8.0 from the following releases.
The upgrade paths to release 2.8.0 from your existing older release are listed below.
-
2.7.0 → 2.8.0
-
2.6.0 → 2.8.0
-
2.5.0 → 2.7.0 → 2.8.0
-
2.4.1 → 2.7.0 → 2.8.0
-
2.4.0 → 2.4.1 or 2.5.0 or 2.6.0 → 2.7.0 → 2.8.0
-
2.3.0 → 2.4.1 or 2.5.0 → 2.7.0 → 2.8.0
-
2.2.0 → 2.4.1 → 2.7.0 → 2.8.0
-
2.1.0 → 2.2.0 → 2.4.1 → 2.7.0 → 2.8.0
Here → indicates a direct upgrade.
The upgrade process is automated by a set of Deployment Shell commands and carries out the required system checks, retrieves the upgrade package, and executes the upgrade process on the cluster nodes. You can upgrade using a file that is either downloaded locally on your primary node or downloaded directly from a Web page.
During an upgrade, it is important that no change activities including onboarding of devices, provisioning of services or changing other configurations are done in the system. The upgrade will automatically reboot all components and there will be short unavailability during that time. The upgrade process does not affect the traffic through the network and once the upgrade is complete, the devices and services are not reconfigured.
We recommend that you back up your configuration before upgrading. For information on back up, see the Backup Routing Director Configuration instructions in the Installation and Upgrade Guide of the release corresponding to your existing release.
You can upgrade to the latest release using the upgrade_routing-director-release-build-ID.img disk image file.
Perform the following steps to upgrade to Routing Director Release 2.8.0:
Upgrade Prerequisites—Ensure that all upgrade prerequisites are met.
Upgrade the Routing Director Deployment Cluster—Upgrade the cluster using either Upgrade using the local filename Option or Upgrade using the remote url Option.
Upgrade Deployment Shell and the OVA System Files—Upgrade Deployment Shell and the OVA system files on all the cluster nodes.
Post Cluster Upgrade Tasks—Perform all the post cluster upgrade tasks to complete the upgrade process.
Upgrade Prerequisites
Before you upgrade the Routing Director deployment cluster, ensure the following.
-
Deployment Shell is accessible and operational.
-
The VM disk size is increased to match the recommended system requirements. Perform the steps described in Increase VM Disk Size.
-
(Optional) Check the current build and OVA version of your existing release from Deployment Shell using the
show deployment versioncommand. -
The cluster nodes have the following free disk space available:
-
The primary node from which the cluster was deployed must have 15% of the total disk space + two times the upgrade file size free.
-
The remaining primary nodes must have 15% of the total disk space + the same amount space as the upgrade file size free.
-
The worker node must have 15% of the total disk space free.
To determine the primary and worker nodes as well as the installer node from which the cluster was installed, perform the following steps:
Log in to any of the cluster nodes.
Type
exitto exit to the Linux root shell from the Deployment Shell.Use the
kubectl get nodes -o widecommand to determine the primary and worker nodes of the cluster.Use the
cat /root/epic/host.maincommand to determine the installer primary node.
-
Upgrade the Routing Director Deployment Cluster
Perform the following steps if you want to upgrade to the latest release 2.8.0 from a supported older release.
You can upgrade your installation and all the applications running on it using any
one of the local filename or remote url
options:
Upgrade using the local filename Option
Use this option for air-gapped environments where your Routing Director installation does not have access to the Internet. However, you need to be able to copy the upgrade and upgrade signature files to your primary node.
If you are downloading the upgrade file locally, note that the file is deleted if the cluster upgrade is successful.
To upgrade to release 2.8.0, perform the following steps.
Log in as root user to the primary node from which the existing cluster was installed. You are logged in to Deployment Shell.
Type
exitto exit from Deployment Shell to the Linux root shell.Copy the upgrade_routing-director-release-build-ID.img file to the /root/epic/temp location on the node.
(Optional) If you want to validate the signature of the upgrade file, copy the corresponding upgrade_routing-director-release-build-ID.img.psig signature filesignature file to the same /root/epic/temp folder.
(Optional) Use the
gpg --verify img-psig-file img-filecommand to validate the digital signature of the upgrade file. For example:root@primary1:~/epic/temp# gpg --verify upgrade_routing-director-2.8.0.10975.ge4a31d62bf.img.psig upgrade_routing-director-2.8.0.10975.ge4a31d62bf.img gpg: Signature made Thu Mar 12 07:48:52 2026 UTC gpg: using RSA key 4B7B22C9C4FE32CF gpg: Good signature from "Northstar Paragon Automation 2024 <ca@juniper.net>" [unknown] gpg: WARNING: This key is not certified with a trusted signature! gpg: There is no indication that the signature belongs to the owner. Primary key fingerprint: 1982 58AF 6F28 B0B0 2CFA BB47 4B7B 22C9 C4FE 32CF
Here
primary1is the installer primary node. Validation takes a couple of minutes to complete.Type
clito enter Deployment Shell.Use the following command to upgrade the Routing Director deployment cluster:
request deployment cluster upgrade local filename upgrade_routing-director-release-build-ID.imgFor example:
root@primary1> request deployment cluster upgrade local filename upgrade_routing-director-2.8.0.10975.ge4a31d62bf.img Checking Deployment cluster system health before proceeding with cluster upgrade. This will take a minute... 2026-03-12 17:50:37 Health status checking in manual Mode ====================================================== Overall cluster status ====================================================== GREEN 2026-03-12 17:57:31 Health status checking completed! ======================================================= Deployment cluster is healthy. Proceed with Deployment cluster upgrade. Using local file /root/epic/temp/upgrade_routing-director-2.8.0.10975.ge4a31d62bf.img for upgrade Upgrade is in progress ... Updated to build: routing-director-release-2.8.0.10975.ge4a31d62bf Deployment cluster upgrade is successful! Run 'request deployment health-check' command to check current system health with upgraded Deployment cluster. Please continue to primary host node to upgrade Deployment-shell and update OVA system files by: /root/epic/upgrade_paragon-shell_ova-system.shHere
primary1is the installer primary node. The upgrade command checks the health of the cluster before upgrading. If the cluster health check returns aGREENstatus, the cluster is upgraded requiring no further input. If the cluster health check returns aREDstatus, the cluster is not upgraded. If the cluster health check returns anAMBERstatus, you are prompted to choose to continue or stop the upgrade.Additional upgrade command options:
You can also use any one or more of the following command options along with the upgrade command while upgrading:
no-confirm—Usage example:request deployment cluster upgrade local filename upgrade_routing-director-release-build-ID.img no-confirmUse the
no-confirmoption to ignore theAMBERstatus and continue with the upgrade without being prompted. However, theno-confirmoption does not ignore aREDstatus.skip-health-check—Usage example:request deployment cluster upgrade local filename upgrade_routing-director-release-build-ID.img skip-health-checkUse the
skip-health-checkoption to skip the pre-upgrade cluster health check performed automatically. However, you must ensure that the cluster is in good health before performing the upgrade.detach-process—Usage example:request deployment cluster upgrade local filename upgrade_routing-director-release-build-ID.img detach-processAs the upgrade process takes over an hour to complete, you can let the upgrade run in the background and free up the CLI screen for any other tasks. The command runs the initial health checks and then proceeds with the upgrade. Once the upgrade process starts, the process is detached and moved into the background and you are returned to the command prompt. The upgrade output is logged in the /epic/temp/upgrade.log file. To monitor the status of the upgrade process and print the output onscreen, use the
monitor start /epic/temp/upgrade.logcommand. When the upgrade process completes, a success message similar to the following is displayed on all the cluster nodes:Deployment Cluster upgrade is successful! - Run 'request deployment health-check' command to check current system health with upgraded Deployment cluster. - Please continue to primary host node to upgrade Deployment-shell and update OVA system files by: /root/epic/upgrade_paragon-shell_ova-system.sh
If you get disconnected from the VM during the upgrade process, you can periodically check the upgrade log file for status on the upgrade.
input—Usage example:request deployment cluster upgrade local filename upgrade_routing-director-release-build-ID.img input input-stringUse the
inputoption to pass additional Ansible input parameters to the upgrade command. For example, if you want to enable verbose logging during upgrade, use the-voption.request deployment cluster upgrade local filename upgrade_routing-director-release-build-ID.img input "-v"
Your Routing Director installation and all the applications running on it are upgraded.
Note that, the upgrade process takes over an hour to complete. If you get disconnected from the VM during the upgrade process, you can periodically check the upgrade log file until you see an output similar to this:
root@primary1:~# cat /root/epic/temp/upgrade.log <output snipped> … PLAY [Mark installation as complete] ******************************************* TASK 3317 [Record installation status] ***************************************** Thursday 12 March 2026 19:52:36 +0000 (0:00:04.533) 1:45:24.895 ******** changed: [10.1.2.3] PLAY RECAP ********************************************************************* 10.1.2.3 : ok=2664 changed=672 unreachable=0 failed=0 rescued=0 ignored=2 10.1.2.4 : ok=221 changed=40 unreachable=0 failed=0 rescued=0 ignored=0 10.1.2.5 : ok=221 changed=40 unreachable=0 failed=0 rescued=0 ignored=0 10.1.2.6 : ok=206 changed=37 unreachable=0 failed=0 rescued=0 ignored=0 Thursday 12 March 2026 19:52:37 +0000 (0:00:01.002) 1:45:25.898 ******** =============================================================================== user-registry : Push Docker Images from local registry to paragon registry - 728.37s Verify northstar victoriametrics -------------------------------------- 183.52s Verify routingbotdb victoriametrics ----------------------------------- 183.05s Verify healthbot victoriametrics -------------------------------------- 182.93s delete existing install config-map - if any --------------------------- 119.93s Save installer config to configmap ------------------------------------ 116.27s Install Helm Chart ---------------------------------------------------- 109.82s jcloud/airflow2 : Install Helm Chart ---------------------------------- 101.64s user-registry : Push Helm Charts to paragon registry ------------------- 89.96s force all replica to 1 ------------------------------------------------- 68.64s systemd ---------------------------------------------------------------- 68.38s Create Kafka Topics ---------------------------------------------------- 55.90s prepare kernel settings of targets ------------------------------------- 52.55s jcloud/papi : Install Helm Chart --------------------------------------- 49.12s kubernetes/addons/helper-commands : Copy scripts to /usr/local/bin ----- 42.78s Install Helm Chart ----------------------------------------------------- 40.76s routingbot/routingbot-arango : Wait for Arango Operator fully terminated -- 33.54s kubernetes/addons/resource-reservation : patch default sa in all ns ---- 33.32s kubernetes/addons/helper-commands : Install Pathfinder Utility scripts -- 29.74s kubernetes/addons/helper-commands : Copy profiler to /opt/paragon/bin -- 28.14s Playbook run took 0 days, 1 hours, 45 minutes, 25 seconds Application Cluster upgraded to version build: routing-director-release-2.8.0.10975.ge4a31d62bf!!! Routing Director cluster upgrade is successful on host node!
Upgrade Deployment Shell and the OVA system files.
Upgrade using the remote url Option
Use this option if your Routing Director installation has access to the Internet and the upgrade file is in a remote location.
To upgrade release 2.8.0, perform the following steps.
Log in as root user to the primary node from which your existing cluster was installed. You are logged in to Deployment Shell.
Use the following command to upgrade the Routing Director deployment cluster:
request deployment cluster upgrade remote url "https://juniper.software.download.site/upgrade_routing-director-release-build-ID.img?query_string"For example:
root@primary1> request deployment cluster upgrade remote url "https://cdn.juniper.net/software/routing-director-images/upgrade_routing-director-2.8.0.10975.ge4a31d62bf.img?query_string" Checking Deployment cluster system health before proceeding with cluster upgrade. This will take a minute... 2026-03-12 17:50:37 Health status checking in manual Mode ====================================================== Overall cluster status ====================================================== GREEN 2026-03-12 17:57:31 Health status checking completed! ======================================================= Deployment cluster is healthy. Proceed with Deployment cluster upgrade. Upgrading Deployment cluster from https://cdn.juniper.net/software/routing-director-images/ Downloading upgrade file upgrade_routing-director-2.8.0.10975.ge4a31d62bf.img Download file size: 39,370,883,072 bytes Current disk Usage: Total: 422,144,110,592 bytes Used: 170,895,372,288 bytes Available: 232,979,087,360 bytes Please wait for current download to finish... (File is large. It may take a while.) Upgrade tarball file is downloaded. Upgrade is in progress ... Updated to build: routing-director-release-2.8.0.10975.ge4a31d62bf Deployment cluster upgrade is successful! Run 'request deployment health-check' command to check current system health with upgraded Deployment cluster. Please continue to primary host node to upgrade Deployment-shell and update OVA system files by: /root/epic/upgrade_paragon-shell_ova-system.shHere
primary1is the installer primary node. The upgrade command checks the health of the cluster before upgrading. If the cluster health check returns aGREENstatus, the cluster is upgraded requiring no further input. If the cluster health check returns aREDstatus, the cluster is not upgraded. If the cluster health check returns anAMBERstatus, you are prompted to choose to continue or stop the upgrade.Additional upgrade command options:
You can also use any one or more of the following command options along with the upgrade command while upgrading:
no-confirm—Usage example:request deployment cluster upgrade remote url "https://juniper.software.download.site/upgrade_routing-director-release-build-ID.img?query_string" no-confirmUse the
no-confirmoption to ignore theAMBERstatus and continue with the upgrade without being prompted. However, theno-confirmoption does not ignore aREDstatus.skip-health-check—Usage example:request deployment cluster upgrade remote url "https://juniper.software.download.site/upgrade_routing-director-release-build-ID.img?query_string" skip-health-checkUse the
skip-health-checkoption to skip the pre-upgrade cluster health check performed automatically. However, you must ensure that the cluster is in good health before performing the upgrade.detach-process—Usage example:request deployment cluster upgrade remote url "https://juniper.software.download.site/upgrade_routing-director-release-build-ID.img?query_string" detach-processAs the upgrade process takes over an hour to complete, you can let the upgrade run in the background and free up the CLI screen for any other tasks. The command runs the initial health checks and then proceeds with the upgrade. Once the upgrade process starts, the process is detached and moved into the background and you are returned to the command prompt. The upgrade output is logged in the /epic/temp/upgrade.log file. To monitor the status of the upgrade process and print the output onscreen, use the
monitor start /epic/temp/upgrade.logcommand. When the upgrade process completes, a success message similar to the following is displayed on all the cluster nodes:Deployment Cluster upgrade is successful! - Run 'request deployment health-check' command to check current system health with upgraded Deployment cluster. - Please continue to primary host node to upgrade Deployment-shell and update OVA system files by: /root/epic/upgrade_paragon-shell_ova-system.sh
input—Usage example:request deployment cluster upgrade remote url "https://juniper.software.download.site/upgrade_routing-director-release-build-ID.img?query_string" input input-stringUse the
inputoption to pass additional Ansible input parameters to the upgrade command. For example, if you want to enable verbose logging while upgrading, use the-voption.request deployment cluster upgrade remote url "https://juniper.software.download.site/upgrade_routing-director-release-build-ID.img?query_string" input "-v"
Your Routing Director installation and all the applications running on it are upgraded.
Note that, the upgrade process takes a little over an hour to complete. If you get disconnected from the VM during the upgrade process, you can periodically check the upgrade log file until you see an output similar to this:
root@primary1:~# cat /root/epic/temp/upgrade.log <output snipped> … PLAY [Mark installation as complete] ******************************************* TASK 3317 [Record installation status] ***************************************** Thursday 12 March 2026 19:52:36 +0000 (0:00:04.533) 1:45:24.895 ******** changed: [10.1.2.3] PLAY RECAP ********************************************************************* 10.1.2.3 : ok=2664 changed=672 unreachable=0 failed=0 rescued=0 ignored=2 10.1.2.4 : ok=221 changed=40 unreachable=0 failed=0 rescued=0 ignored=0 10.1.2.5 : ok=221 changed=40 unreachable=0 failed=0 rescued=0 ignored=0 10.1.2.6 : ok=206 changed=37 unreachable=0 failed=0 rescued=0 ignored=0 Thursday 12 March 2026 19:52:37 +0000 (0:00:01.002) 1:45:25.898 ******** =============================================================================== user-registry : Push Docker Images from local registry to paragon registry - 728.37s Verify northstar victoriametrics -------------------------------------- 183.52s Verify routingbotdb victoriametrics ----------------------------------- 183.05s Verify healthbot victoriametrics -------------------------------------- 182.93s delete existing install config-map - if any --------------------------- 119.93s Save installer config to configmap ------------------------------------ 116.27s Install Helm Chart ---------------------------------------------------- 109.82s jcloud/airflow2 : Install Helm Chart ---------------------------------- 101.64s user-registry : Push Helm Charts to paragon registry ------------------- 89.96s force all replica to 1 ------------------------------------------------- 68.64s systemd ---------------------------------------------------------------- 68.38s Create Kafka Topics ---------------------------------------------------- 55.90s prepare kernel settings of targets ------------------------------------- 52.55s jcloud/papi : Install Helm Chart --------------------------------------- 49.12s kubernetes/addons/helper-commands : Copy scripts to /usr/local/bin ----- 42.78s Install Helm Chart ----------------------------------------------------- 40.76s routingbot/routingbot-arango : Wait for Arango Operator fully terminated -- 33.54s kubernetes/addons/resource-reservation : patch default sa in all ns ---- 33.32s kubernetes/addons/helper-commands : Install Pathfinder Utility scripts -- 29.74s kubernetes/addons/helper-commands : Copy profiler to /opt/paragon/bin -- 28.14s Playbook run took 0 days, 1 hours, 45 minutes, 25 seconds Application Cluster upgraded to version build: routing-director-release-2.8.0.10975.ge4a31d62bf!!! Routing Director cluster upgrade is successful on host node!
Upgrade Deployment Shell and the OVA system files.
Upgrade Deployment Shell and the OVA System Files
When your Routing Director installation and all the applications running on it are successfully upgraded, you must upgrade Deployment Shell and the OVA system files.
Type
exitto exit from the installer primary node Deployment Shell to the Linux root shell.Execute the Deployment Shell upgrade script.
root@primary1:~# bash /root/epic/upgrade_paragon-shell_ova-system.sh Upgrading paragon-shell... Updating paragon-shell for primary1...... Container paragon-shell Stopping Container paragon-shell Stopped Container paragon-shell Removing Container paragon-shell Removed paragon-shell Pulling .... <output snipped> .... primaryname update-status primary1 ok primary3 ok primary2 ok primary4 ok paragon-shell upgrade successful! Updating OVA system files... OVA system files update successful!
The Deployment Shell and the OVA system files are upgraded.
(Optional) Check the build and OVA version of your upgraded cluster from Deployment Shell.
root@primary> show deployment version ova: 20260303_0048_ova ova-patch: 20260312_0033_upgrade_version build: routing-director-release-2.8.0.10975.ge4a31d62bf Client Version: v1.29.6 Kustomize Version: v5.0.4-0.20230601165947-6ce0bf390ce3 Server Version: v1.34.1+rke2r1
Ensure that the upgraded cluster is healthy and operational. Execute the
request deployment health-check command before you
proceed.
The Overall Cluster Status must be
GREEN.
Proceed to perform the post cluster upgrade tasks. See Post Cluster Upgrade Tasks.