How FreeIPA servers move between 4.x releases and what recent versions change for existing deployments.
Upgrading a replicated FreeIPA topology to 4.13: replica order and maintenance windows, random serial numbers and expired certificate pruning on new replicas, compat tree and NIS disabled by default, the beta modern Web UI, and checks after each server.
Migrating IdM servers to RHEL 9 by adding RHEL 9 replicas, moving the CA renewal and CRL roles, and retiring RHEL 8 servers, because in-place server upgrades are not supported.
Planning the move off FreeIPA on RHEL 7 or CentOS 7: why a direct jump to RHEL 9 is not supported, the intermediate RHEL 8 replica step, and checks between stages.
Applying FreeIPA package updates across replicas without trouble: order and spacing between servers, maintenance mode during the update, why downgrades are not possible, and checks after each server.
Upgrading enrolled FreeIPA clients to a new OS release without re-enrolling: the leapp in-place path for RHEL 8 to 9 clients, SSSD configuration changes, and when re-enrollment is cleaner.
Keeping containerized FreeIPA servers current: image tags by OS, regular rebuilds, pinning images into your own registry, staged testing, and the upgrade plan the project asks for before production.
Tell us what you're working on, whether it's a deployment, an audit, a security test or a cyber range. You'll speak with an engineer who can help you scope it.