Upgrade the node
Prepare
Section titled “Prepare”- Read release notes for Docker images, Kong, PostgreSQL, HAPI FHIR, and the application revision.
- Confirm FHIR-version and database compatibility.
- Complete and test a backup.
- Capture current image digests and pin target images; do not deploy an unreviewed
latesttag. - Rehearse the upgrade and rollback using restored production-like data.
Execute
Section titled “Execute”Schedule a maintenance window, stop incoming traffic, pull the approved images, and start the stack. Kong schema migration runs through kong-migration; review its logs before allowing Kong traffic. Do not downgrade a migrated database unless the release procedure explicitly supports it.
docker compose pulldocker compose up -ddocker compose logs --tail=200 kong-migrationRun the complete verification checklist before reopening access.
Roll back
Section titled “Roll back”If application rollback is compatible with the migrated schema, restore the recorded image digests and configuration. Otherwise restore both databases and application state from the pre-upgrade backup. Record the failure and retain sanitized logs.

