Who takes a database backup before migrations run, and what it has to cover #8

New Issue

2026-09-21T07:18:04Z

cgalo5758 commented

2026-09-21 07:18:04 +00:00

The question

Migrations run at boot with nothing taking a backup first. Whether that backup is the console's job, the deployment's, or the database platform's has never been settled, so no document says who takes it, what it covers or how a migration is undone once it has run.

What depends on the answer

Whether a bad migration on a running deployment is recoverable, and whether the console grows a dependency on database tooling it does not ship today.

Options known so far

The console dumps the schemas it is about to migrate and refuses to migrate when the dump fails.
The deployment takes a snapshot before the upgrade, and the deployment document states it as a required step with a check the operator can run.
The database platform's own point-in-time recovery is declared sufficient and the console does nothing, which is a real answer if it is written down.

Decided when

The deployment document states who takes the backup, what it covers, how long it is kept, and what an operator does when a migration has to be rolled back.

Migrated from status/issues.md at b7a0e15

## The question Migrations run at boot with nothing taking a backup first. Whether that backup is the console's job, the deployment's, or the database platform's has never been settled, so no document says who takes it, what it covers or how a migration is undone once it has run. ## What depends on the answer Whether a bad migration on a running deployment is recoverable, and whether the console grows a dependency on database tooling it does not ship today. ## Options known so far - The console dumps the schemas it is about to migrate and refuses to migrate when the dump fails. - The deployment takes a snapshot before the upgrade, and the deployment document states it as a required step with a check the operator can run. - The database platform's own point-in-time recovery is declared sufficient and the console does nothing, which is a real answer if it is written down. ## Decided when The deployment document states who takes the backup, what it covers, how long it is kept, and what an operator does when a migration has to be rolled back. Migrated from status/issues.md at b7a0e15

cgalo5758 added the

kind

design

area/ops labels 2026-09-21 07:18:04 +00:00

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: wiki-cafe/member-console#8