Upgrading & agent maintenance

Update the controller

• Back up the database and persistent volumes with all app/worker replicas stopped.
• Pull the current source and review configuration changes.
• Rebuild and restart the deployment.
• Use Finish / verify installation to deploy and verify updated collectors.

git pull --ff-only
docker compose up -d --build

Review existing operations

Regenerate unexecuted release plans after helper changes. Reconcile interrupted jobs and review new provenance identities. Do not update release helpers while an upgrade is running.

Maintain the collector

Agent health and maintenance views report installed artifacts, service state and verification results. Confirm manual upgrade or repair before submission. The browser disables competing agent actions while a request is pending. Legacy bootstrap installations can require a fresh installer from a trusted console. Preserve the exact target fingerprint unless an independently verified host replacement requires a new one.