https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/...
states that the CA-Master should be replaced.
How would you proceed if there were multiple servers that needed an
upgrade to 8? Do I need to stop the CA service and disable CRL
generation on three of my four CA servers and migrate the remaining
server from 7 to 8?
Or could I
1) stop ipa servers 2 to 8
2) migrate ipa1 to RHEL8
3) deploy 7 RHEL8 machines
4) setup replicas on these machines
Here's my setup:
Server name: ipa1.linux.mydomain.at
Role name: CA server
Role status: enabled
Server name: ipa2.linux.mydomain.at
Role name: CA server
Role status: enabled
Server name: ipa5.linux.mydomain.at
Role name: CA server
Role status: enabled
Server name: ipa6.linux.mydomain.at
Role name: CA server
Role status: enabled
Server name: ipa1.linux.mydomain.at
Role name: NTP server
Role status: enabled
Server name: ipa2.linux.mydomain.at
Role name: NTP server
Role status: enabled
Server name: ipa3.linux.mydomain.at
Role name: NTP server
Role status: enabled
Server name: ipa4.linux.mydomain.at
Role name: NTP server
Role status: enabled
Server name: ipa5.linux.mydomain.at
Role name: NTP server
Role status: enabled
Server name: ipa6.linux.mydomain.at
Role name: NTP server
Role status: enabled
Server name: ipa7.linux.mydomain.at
Role name: NTP server
Role status: enabled
Server name: ipa8.linux.mydomain.at
Role name: NTP server
Role status: enabled
Server name: ipa1.linux.mydomain.at
Role name: AD trust agent
Role status: enabled
Server name: ipa2.linux.mydomain.at
Role name: AD trust agent
Role status: enabled
Server name: ipa3.linux.mydomain.at
Role name: AD trust agent
Role status: enabled
Server name: ipa4.linux.mydomain.at
Role name: AD trust agent
Role status: enabled
Server name: ipa5.linux.mydomain.at
Role name: AD trust agent
Role status: enabled
Server name: ipa6.linux.mydomain.at
Role name: AD trust agent
Role status: enabled
Server name: ipa7.linux.mydomain.at
Role name: AD trust agent
Role status: enabled
Server name: ipa8.linux.mydomain.at
Role name: AD trust agent
Role status: enabled
Server name: ipa1.linux.mydomain.at
Role name: KRA server
Role status: enabled
Server name: ipa2.linux.mydomain.at
Role name: KRA server
Role status: enabled
Server name: ipa1.linux.mydomain.at
Role name: AD trust controller
Role status: enabled
Server name: ipa2.linux.mydomain.at
Role name: AD trust controller
Role status: enabled
Server name: ipa5.linux.mydomain.at
Role name: AD trust controller
Role status: enabled
Server name: ipa6.linux.mydomain.at
Role name: AD trust controller
Role status: enabled