5.6. Upgrading the restricted network cluster

Prerequisites

• You mirrored the images for the new release to your registry.
• You applied the release image signature ConfigMap for the new release to your cluster.
• You obtained the sha256 sum value for the release from the image signature ConfigMap.
• Install the OpenShift CLI (oc), version 4.4.8 or later.

Procedure

• Update the cluster:

  $ oc adm upgrade --allow-explicit-upgrade --to-image ${LOCAL_REGISTRY}/${LOCAL_REPOSITORY}<sha256_sum_value> 1

  1

  The <sha256_sum_value> value is the sha256 sum value for the release from the image signature ConfigMap, for example, @sha256:81154f5c03294534e1eaf0319bef7a601134f891689ccede5d705ef659aa8c92

  If you use an ImageContentSourcePolicy for the mirror registry, you can use the canonical registry name instead of LOCAL_REGISTRY.

  注意

  You can only configure global pull secrets for clusters that have an ImageContentSourcePolicy object. You cannot add a pull secret to a project.