[chef] Re: Re: Re: Re: chef-server 11 migration

[Daniel DeLeo < >]

On Monday, January 7, 2013 at 11:35 AM, steve . wrote:

IIRC, Chef 11 also includes a change in the encrypted data bag format.  Since nobody (outside of Opscode?) has tried to migrate from Chef 10.x to Chef 11, I don't think anybody really knows what that process will look like yet, but I took a stab at a knife data bag conversion plugin when this was first mentioned.  Here's the code:

https://github.com/leftathome/knife-databag-upgrade

It might help with some of your other migration tasks, as well... to form a basis for those tasks, at the very least.

Good luck and let us all know how it goes!

It's not strictly necessary to migrate your data bags, as Chef 11 chef-client can read the older format encrypted data bags. That said, it's a good idea to do so, as the new format has improved security.

The key thing to be aware of is that only Chef 10.18+ (10.18.0 in testing now) will have forwards compatibility with Chef 11 format encrypted data bags so you need to use Chef 10.x to upload encrypted data bag items until all your chef clients are upgraded to at least 10.18.0.

-- 

Daniel DeLeo