[NOTIFICATIONS] Apache Tomcat upgrade from 9.0.117 to 9.0.118

Title

Status

Due

Scheduled

Context

Project

Category

Notes Saved

## Deployment Procedure (from Santiago Romero, 2026-05-14)

Source: email from Santiago Romero (ICT Solution Designer)
Security advisory: https://tomcat.apache.org/security-9.html

NOTE - rollback typo in email: `ln -s apache-tomcat-9.0.119 tomcat` should be `ln -s apache-tomcat-9.0.117 tomcat` (corrected below).

***

### PRE Environment (notif-e)

**Get latest ansible:**

```
cd /root/
bash get_ansible.sh
cd /root/ansible/
```

**Round 1 - notif-e-app-01 only:**

```
vim playbooks/jobs/notifications-update-tomcat.yml
```

Set hosts block to:

```
- hosts:
    - notif-e-app-01
    #- notif-e-app-02
    #- notif-p-app-01
    #- notif-p-app-02
```

Run:

```
ansible-playbook playbooks/jobs/notifications-update-tomcat.yml
```

Validate notif-e-app-01:

```
ssh root@notif-e-app-01 "ps auxwww | grep tomcat | grep -v grep && ls -l /opt/tomcat"
```

Expected: `/opt/tomcat -> /opt/apache-tomcat-9.0.119`

**Round 2 - notif-e-app-02:**

```
vim playbooks/jobs/notifications-update-tomcat.yml
```

Set hosts block to:

```
- hosts:
    ###- notif-e-app-01
    - notif-e-app-02
    #- notif-p-app-01
    #- notif-p-app-02
```

Run:

```
ansible-playbook playbooks/jobs/notifications-update-tomcat.yml
```

Validate:

```
ssh root@notif-e-app-02 "ls -l /opt/tomcat"
```

**Verify PRE service:**
https://pre-comms.uniteaware.un.org/api/v1/rest/monitor

Wait 2-3 days before proceeding to PROD (Santiago's instruction).

***

### PROD Environment (notif-p)

**Round 1 - notif-p-app-01 only:**

```
vim playbooks/jobs/notifications-update-tomcat.yml
```

Set hosts block to:

```
- hosts:
    ###- notif-e-app-01
    ###- notif-e-app-02
    - notif-p-app-01
    #- notif-p-app-02
```

Run:

```
ansible-playbook playbooks/jobs/notifications-update-tomcat.yml
```

Validate:

```
ssh root@notif-p-app-01 "ls -l /opt/tomcat"
```

**Round 2 - notif-p-app-02:**

```
vim playbooks/jobs/notifications-update-tomcat.yml
```

Set hosts block to:

```
- hosts:
    ###- notif-e-app-01
    ###- notif-e-app-02
    ###- notif-p-app-01
    - notif-p-app-02
```

Run:

```
ansible-playbook playbooks/jobs/notifications-update-tomcat.yml
```

Validate:

```
ssh root@notif-p-app-02 "ls -l /opt/tomcat"
```

**Verify PROD service:**
https://comms.uniteaware.un.org/api/v1/rest/monitor

***

### Post-deployment cleanup (all 4 nodes)

After full PROD validation:

```
ssh root@notif-e-app-01 "rm -rf /opt/apache-tomcat-9.0.117/logs/"
ssh root@notif-e-app-02 "rm -rf /opt/apache-tomcat-9.0.117/logs/"
ssh root@notif-p-app-01 "rm -rf /opt/apache-tomcat-9.0.117/logs/"
ssh root@notif-p-app-02 "rm -rf /opt/apache-tomcat-9.0.117/logs/"
```

***

### Rollback (any node)

```
ssh root@<node>
systemctl stop tomcat
cd /opt/
rm tomcat
ln -s apache-tomcat-9.0.117 tomcat
systemctl start tomcat
```

Supports Markdown: bold, italics, code, lists, links. Auto-saves.

AI Notes - managed by Claude

No AI notes yet.

📂 Activities for this Item

➕ Add Activity

Open Activities

No open activities.

Closed Activities

Service Requests / Work Orders

RFS-1-12938813617

Service Request

WO-RFS-1-12938813623

iNeed Text

Title

Description

UA Notifications - [NOTIFICATIONS] Apache Tomcat upgrade from 9.0.117 to 9.0.118
Assign to Carlos Rodrigo - AOM DS

Asset#

Defined per context on the Taxonomy page.

Normalized time tracking

Last 30 days

Logged: 0:00 · Normalized: 0:00

No normalized entries for this item yet.

Meeting Notes (Project / Context)

Select a meeting to preview details.

Templates

Change Title

Change Description

Change Steps

Template Notes

Communications

Label

Order

Subject

Email Body

Attachments

No attachments yet.