Advanced Disciplines
Upgrade Strategy and the Ritual of Continuity
Upgrades are inevitable. The ritual is continuity: the platform changes while service remains intact.
Text
Authored as doctrine; evaluated as operations.
Doctrine
Upgrade strategy is governance over time. You cannot freeze a platform; you can only choose how it evolves.
Kubblai doctrine: upgrades should be routine and boring, not heroic and rare.
Skew and compatibility
Respect version skew rules. Validate add-ons (CNI, CSI, ingress controllers, policy engines) for compatibility. Test CRD conversions and API removals before production.
Most upgrade failures are not in the core—they are in the ecosystem.
Node rotation is the real upgrade
Control plane upgrades matter, but node rotation reveals workload truth: PDB correctness, graceful termination, readiness probes, and data persistence.
If node rotation is painful, your workloads are lying about availability.
Rollback discipline
Define rollback boundaries. Some upgrades are not trivially reversible (etcd schema changes, CRD version shifts). Treat those as planned incidents with explicit risk budgets.
Document the decision points for aborting vs continuing.
Canonical Link
Canonical URL: /library/upgrade-strategy-and-the-ritual-of-continuity
Related Readings
Advanced Disciplines
LibraryStatefulSets and the Burden of Memory
StatefulSets are not Deployments with disks. They encode identity and order—and therefore encode risk.
Advanced Disciplines
LibraryDaemonSets and the Ministry of Every Node
DaemonSets are the cluster’s distributed nervous tissue. When they fail, every node feels it.
Governance & Power
LibraryPolicy as Doctrine, Not Suggestion
Policy is what makes a platform institutional. Without it, every incident is negotiated from scratch.
Advanced Disciplines
LibraryMulti-Cluster Federation and the Politics of Sovereignty
Multi-cluster is not an architecture trophy. It is an institutional choice to pay governance costs for reduced blast radius and improved locality.
Canonical Texts
LibraryThe Final Sermon on Resilience and Failure
Resilience is not optimism. It is engineered humility: bounded blast radius, observable truth, and a platform that can return to intent.