This guide describes the procedure how to upgrade Portworx in Kubernetes environment as OCI container, which is the default and recommended method of running Portworx in Kubernetes.

We do not recommend upgrading Portworx using Kubernetes instructions (e.g. via kubectl set image ds/portworx portworx=portworx/XXXX:### -n kube-system).
Instead, please follow the instructions below for best practice how to upgrade Portworx in Kubernetes environment.

Upgrading Portworx

The Portworx Daemonset is using RollingUpdate update strategy, which greatly simplifies the upgrade process.

Step 1: Apply updated YAML-spec

To upgrade Portworx, we will just have to re-apply the YAML spec-file generated from the site, which is very similar to how we installed Portworx.

If you have the original URL that you used to generate your first YAML-spec, you can just download and reapply the updated YAML-spec from the same URL, e.g.:
kubectl apply -f '<original url>'

HINT: If you have preseved the original YAML-spec from your previous install or upgrade, take a look at the first line of the spec-file (i.e. head px-spec.yaml), it should contain a comment with the URL used to generate it.

If you did not preserve the original installation URL, not to worry, in most cases the configuration is very easy to reconstruct using your current Kubernetes configuration, like so:

$ kubectl get ds/portworx -n kube-system -o jsonpath='{.spec.template.spec.containers[*].args}'

[-k etcd:,etcd: -c cluster123 \
 -s /dev/sdb1 -s /dev/sdc -x kubernetes]
  • if you were using multiple storage devices, you will need to collapse them into a single parameter (i.e. “-s dev1 -s dev2 …” => “s=dev1,dev2”),
  • you can ignore the “-x kubernetes” parameter (will be applied by default).

You can re-enter the parameters on the YAML web-form at, or convert them manually. The final YAML-spec URL from our example above would look similar to this:

VER=$(kubectl version --short | awk -Fv '/Server Version: /{print $3}')
curl -o px-spec.yaml \
kubectl apply -f px-spec.yaml

Once you have applied the new YAML-spec, Kubernetes will start applying the Portworx upgrade in a “RollingUpdate” fashion, one node at a time.

Step 2: Monitor the rolling upgrade

Rollout status:
One can monitor the upgrade process by running the “kubectl rollout status” command:

$ kubectl rollout status ds/portworx -n kube-system
Waiting for rollout to finish: 0 out of 4 new pods have been updated...
Waiting for rollout to finish: 1 out of 4 new pods have been updated...
Waiting for rollout to finish: 2 out of 4 new pods have been updated...
Waiting for rollout to finish: 3 out of 4 new pods have been updated...
Waiting for rollout to finish: 3 of 4 updated pods are available...
daemon set "portworx" successfully rolled out

Note that this command will inform us of general upgrade progress, but it will not point out which exact node is being upgraded and when.

Pods status:
To get more information about the status of Portworx daemonset across the nodes, run:

$ kubectl get pods -o wide -n kube-system -l name=portworx
NAME             READY   STATUS              RESTARTS   AGE   IP              NODE
portworx-9njsl   1/1     Running             0          16d   minion4
portworx-fxjgw   1/1     Running             0          16d   minion5
portworx-fz2wf   1/1     Running             0          5m   minion3
portworx-x29h9   0/1     ContainerCreating   0          0s   minion2

As we can see in the example output above:

  • looking at the STATUS and READY, we can tell that the rollout-upgrade is currently creating the container on the “minion2” node
  • looking at AGE, we can tell that:
    • “minion4” and “minion5” have Portworx up for 16 days (likely still on old version, and to be upgraded), while the
    • “minion3” has Portworx up for only 5 minutes (likely just finished upgrade and restarted Portworx)
  • if we keep on monitoring, we will observe that the upgrade will not switch to the “next” node until STATUS is “Running” and the READY is 1/1 (meaning, the “readynessProbe” reports Portworx service is operational).

Portworx cluster list:
Finally, one can run the following command to inspect the Portworx cluster:

$ PX_POD=$(kubectl get pods -n kube-system -l name=portworx -o jsonpath='{.items[0]}')
$ kubectl exec -it $PX_POD -n kube-system /opt/pwx/bin/pxctl cluster list

Nodes in the cluster:
ID      DATA IP         CPU        MEM TOTAL  ...   VERSION             STATUS
minion5   1.530612   4.0 GB     ...    Online
minion4   3.836317   4.0 GB     ...    Online
minion3   3.324808   4.1 GB     ...   Online
minion2   3.316327   4.1 GB     ...   Online
  • from the output above, we can confirm that the:
    • “minion4” and “minion5” are still on the old Portworx version (, while
    • “minion3” and “minion2” have already been upgraded to the latest version (in our case, v1.2.11.10).

Migrating from Legacy Portworx

The legacy Portworx installations (v1.2.10 and older) have been deploying as PX-Containers Kubernetes daemonsets (i.e. Portworx running directly as Docker container), but since then we have changed the deployments as via OCI runC, which eliminates cyclical dependancies, speeds up service restarts, and brings other improvements.

There are no special instructions required to migrate your old PX-Container into the latest OCI runC Daemonset - please follow the instructions listed above to generate a new YAML spec-file, reapply it on your Kubernetes cluster, and this will automatically migrate Portworx to OCI containers deployment.

Since Portworx v1.2.11 installing PX-Containers as Kubernetes daemonset is no longer recommended. If you are looking for legacy instructions how to manually upgrade and retain PX-Container deployment, you can find them here.