Upgrade

backmesh upgrade [--app-key <pem>] [--fail-running-jobs]

upgrade moves the installation to the release of the backmesh CLI you run, so install the release you want first, with the anycloud version its notes pin. It runs from any machine with Docker and your cloud sign-ins.

It checks that the release supports the installation’s anycloud API, upgrades the API, then restarts the listener on the new image. Running jobs keep going through the listener’s restart; only scaling pauses. An anycloud release that upgrades the cluster itself waits for running jobs to end, and --fail-running-jobs lets it stop them instead.

upgrade ends with the status checks and exits non-zero when any warns.

Rotate the GitHub App key

backmesh status warns when the key is 90 days old. To replace it:

1. In the App’s settings, generate a new private key.
2. Run backmesh upgrade --app-key backmesh.pem with the downloaded file.
3. backmesh checks the key with GitHub, saves it and restarts the listener. It prints the new key’s fingerprint and the App’s settings page.
4. On that page, delete every other key.