Runbook — Upgrade

Use this runbook for planned upgrades between Finnest Power versions.

Preconditions

• Release notes and changesets are reviewed.
• Compatibility notes for PostgreSQL migrations, Keycloak realm changes, and Kong declarative config are approved.
• Backup and rollback plans are ready.
• Staging has completed smoke, contract, and FAPI conformance checks.

Steps

1. Freeze deploys for the target environment.
2. Run a pre-upgrade backup.
3. Apply the new chart version with --atomic:

   helm upgrade --install finnest-power oci://ghcr.io/finnestbr/charts/finnest-power \
     --version <chart-version> \
     -n finnest-prod \
     -f infra/helm/finnest-power/values-bundles/<bundle>.yaml \
     --atomic --timeout 15m

4. Run smoke tests, contract checks, and selected regulatory flows.
5. Unfreeze deploys after monitoring stays within baseline.

Verification

• All pods are ready and using the expected image tags.
• Database migration table records the expected migration set.
• FAPI and OPIN/OFB smoke flows pass.
• No PII appears in service logs.