Tenant Control Plane

    
        

    Customers are updated one at a time, oldest first. The first is the trial run: if it does not come up healthy, the rest are not touched. Each customer's database is backed up first.