← All modules — full architecture

Meridian Logistics — OpenZiti 2.0 architecture

High-level design — click any component to drill into its low-level design
Module 12: The upgrade — 2.0.3 → 2.0.6 · field-built on a throwaway clone, 2026-10-04
M12 · The Upgrade
✕ Close
Backup Controller / canary The window Routers lines: the roll proof
1 · snapshot 2 · on 2.0.6 3–4 · controllers Control plane (M03) ctrl1 · ctrl2 · ctrl3 — 2.0.3 → 2.0.6 the reason: 2.0.4 GHSA-p6gx-g438-rjc8 · High Proof first Steps 1–2 production unchanged · still 2.0.3 backup pre-2.0.6.db · 3 files canary ctrl-restore · 2.0.6 the read-only window ~60 s · READONLY true on all three writes fail · reads and routers fine 4 package routers drain · 2.0.6 · undrain 2 Docker routers one .env line the “no action” checks tunneler 1.18.7 · chart 1.4.0 written down, dated the runbook MERIDIAN_UPGRADE_RUNBOOK written from the lab validation expect 3 ctrl + 6 ER · 2.0.6 17 · 6 · 12 unchanged followers → leader → routers rollback: reinstall 2.0.3 freeze writes until it closes
Tip: click the control plane, the reason, the backup or the canary, the window, the routers, the checks, the runbook, the validation, or a concept chip.
From the course Enterprise Zero Trust Architecture with OpenZiti 2.0 · cawachlabs.com · Guides Meridian Logistics is a fictional company. © 2026 CawachLabs · by Girish Reddy. All rights reserved. Not affiliated with or endorsed by the OpenZiti project. Icons adapted from Lucide (ISC, parts MIT).
TrademarksMicrosoft, Azure and Microsoft Entra are trademarks of the Microsoft group of companies. Docker is a trademark or registered trademark of Docker, Inc. in the United States and/or other countries. Kubernetes, Helm and SPIFFE are registered trademarks of The Linux Foundation in the United States and/or other countries. OpenTofu is a registered trademark of LF Projects, LLC. Ubuntu is a registered trademark of Canonical Ltd. Linux is the registered trademark of Linus Torvalds in the U.S. and other countries. Elasticsearch and Kibana are trademarks of Elasticsearch B.V., registered in the U.S. and in other countries. Grafana is a trademark of Raintank, Inc. dba Grafana Labs. Other names belong to their owners. CawachLabs is independent and not affiliated with or endorsed by these companies.