Upgrades & rollback

Verify the candidate, protect the current state, and check readiness after migration.

Plan a maintenance window

The native updater stops the API and worker before migration and release switching. Service continues during candidate checks, but the upgrade is not a zero-downtime operation.

Native appliance commands

cenovelctl backup create
cenovelctl release verify <bundle>
cenovelctl upgrade preflight <bundle>
cenovelctl upgrade apply <bundle>
cenovelctl upgrade status

Replace <bundle> with the signed release bundle. Apply runs candidate checks, stops services, performs the migration, starts the API and worker, and checks readiness. Inspect status and resolve failures before declaring the upgrade complete.

Rollback eligibility

cenovelctl rollback decide

The updater keeps a previous release as a rollback target. Compatibility checks can refuse rollback when that release cannot read the current schema. Use a compatible pre-upgrade backup and the restore procedure when required.

7. Native upgrade and rollback

Plan a maintenance window. Candidate checks run before the native updater
stops the API and worker for migration and release switching. This is not a
zero-downtime upgrade.

    cenovelctl backup create
    cenovelctl release verify <bundle>
    cenovelctl upgrade preflight <bundle>
    cenovelctl upgrade apply <bundle>
    cenovelctl upgrade status

Replace <bundle> with the signed release bundle. Apply runs candidate checks,
stops services, migrates, starts the API and worker, and checks readiness.
Inspect status and resolve any failed stage before declaring completion.

    cenovelctl rollback decide

A previous release is kept as a rollback target. Compatibility checks can
refuse rollback when it cannot read the current schema. Use the compatible
pre-upgrade backup and restore procedure when required.

Reviewed against the current source code. Native appliance administration commands require the appropriate host privileges; validate deployment procedures on your own release before production use.