The Upgrade That Has Been Waiting for Three Versions
In many backlogs there is a ticket that is about to celebrate a birthday. It is called ‘mesh upgrade’ and has been wandering from sprint to sprint for months.
- Date
- Topic
- Lifecycle
- Sources
- 2
- Reading time
- 2 min
- Version
- Translation
In many backlogs there is a ticket that is about to celebrate a birthday. It is called “mesh upgrade” and has been wandering from sprint to sprint for months.
Figure as text
Timeline of upgrade debt with four missed windows (no owner, no time, too risky, audit running), below it a growing red risk wedge and the support window moving on. At the bottom, two risks with no entry in the risk register: the security risk (those far behind cannot simply patch, they jump under time pressure) and the staffing risk (the big jump requires exactly the specialist knowledge that is hardest to get hold of in an emergency).
I see the pattern behind it in many setups. Nobody dares to touch the data path: a mesh upgrade potentially touches every sidecar, and with it every service in the cluster. At the same time, nobody owns it. The mesh belongs to “the platform”, the upgrade belongs to no one. So it waits.
While it waits, the releases keep stacking up out there, and the support window keeps moving on. The gap between “where we are” and “where we should be” grows. The bigger the gap, the bigger the jump. The bigger the jump, the bigger the testing effort, the bigger the fear, the longer the wait. The cycle reinforces itself. Fear is the only part of the system that scales automatically.
How this story ends was already in report #2: when the CVE arrives, it is too late. Patches target current releases. Whoever is far behind cannot simply patch in an emergency. They jump across several versions, under time pressure.
For decision makers, upgrade debt is therefore a double risk. A security risk, because the emergency grants no extensions. And a staffing risk, because the big jump requires exactly the specialist knowledge that is hardest to get hold of in an emergency. Neither shows up in any risk register as long as the ticket keeps obediently wandering.
An upgrade that waits for three versions is no longer an upgrade. It is a migration that no longer gets to pick its moment.
Yet the way out is no question of courage. There is an upgrade pattern with the way back built in from the start. Two control planes, one label, no drama. Next week, right here.
