Skip to main content
Version: Community Edition v1.5

Upgrade Semaphore

This page explains how to upgrade Semaphore in place and how to deal with expired certificates.

Renew expired TLS certificates​

TLS certificates generated during the installation are only valid for 3 months. The certificates do not autorenew. Follow these steps to generate and install the new certificates.

  1. If required, SSH into the Semaphore server

  2. Go to the semaphore-install directory and load the semaphore-config used in the original installation

    Load Semaphore and cloud configuration
    cd semaphore-install
    source semaphore-config

  3. Re-run the certbot command and follow the on-screen instructions

    Create certificates with certbot
    certbot certonly --manual --preferred-challenges=dns \
        -d "*.${DOMAIN}" \
        --register-unsafely-without-email \
        --work-dir certs \
        --config-dir certs \
        --logs-dir certs

  4. Follow the upgrade steps to Semaphore

Upgrade Semaphore​

To upgrade Semaphore, you must re-run the helm upgrade command used to install it in the first place.

  1. If required, SSH into the Semaphore server

  2. Go to the semaphore-install directory and load the semaphore-config used in the original installation

    Load Semaphore and cloud configuration
    cd semaphore-install
    source semaphore-config

  3. Re-run the Helm upgrade command used in the initial installation. You may select a different --version argument to upgrade or downgrade your Semaphore version. The installation usually takes between 10 and 30 minutes

See also​