When upgrading contrail from 5.0.2 to 19.12 ssl configuration is wrongly propagated on the analytics units

[peppepetra]

During the upgrade of contrail (controller,analytics and analyticsdb) we found that many containers were constantly restarting on analytics and analyticsdb.

This was because common_analyticsdb.env and /etc/contrail/common_analytics.env had
ANALYTICS_API_SSL_ENABLE and CONFIG_API_SSL_ENABLE set to True while it was False
on the controller and the analytics units were failing when trying to load the ca-cert that was not found

[peppepetra]

To workaround that we had to manually change the value

ctx["ssl_enabled"] = False #config.get("ssl_enabled", False)

in /var/lib/juju/agents/unit-contrail-analyticsdb-2/charm/hooks/contrail_analyticsdb_utils.py
and in /var/lib/juju/agents/unit-contrail-analytics-1/charm/hooks/contrail_analytics_utils.py

[Andrey-mp]

btw - there is no procedure for upgrade. it was not developed and tested.