| title | Upgrade Guide |
|---|
Use this guide when moving a TrogonEventStore node or cluster to a newer build from this repository.
- Back up the database and index directories.
- Record the current server version, configuration file, container image, and command-line arguments.
- Check that clients are using gRPC.
- Review changed configuration keys before restarting a durable node.
- Verify that health probes use
/-/livenessand/-/readiness. - Verify that metrics scraping uses
/-/metrics.
- Stop the node.
- Replace the binary or container image.
- Review configuration against Configuration.
- Start the node.
- Wait for
/-/readinessto return success. - Check logs for truncation, index rebuild, or certificate errors.
- Confirm the Admin UI and gRPC clients can connect.
Upgrade one node at a time, starting with a follower or read-only replica.
- Stop one non-leader node.
- Replace the binary or container image.
- Start the node.
- Wait for the node to rejoin the cluster and become ready.
- Repeat for the next non-leader node.
- Upgrade the leader last.
During the rollout:
- Client connections can be interrupted when a node restarts or elections occur.
- Write availability depends on cluster quorum.
- Catch-up work can temporarily increase load on the leader.
Before upgrading, search for obsolete client and HTTP-management settings. The current product direction is:
- gRPC for application event access.
- HTTP for Admin UI, health, metrics, and infrastructure concerns.
- No external TCP client protocol.
- No proprietary plugin configuration.
If a setting is no longer documented, remove it rather than carrying it forward silently.
Check Security for the current authentication model. Local username/password authentication and OAuth methods can coexist as configured methods. Avoid depending on undocumented authentication plugins.
Use OpenTelemetry integration for explicit OTLP export and Metrics for Prometheus scraping.
Legacy usage telemetry is separate from OTLP observability. See Usage telemetry before running a node in an environment that should not make outbound telemetry calls.