OTA firmware rollout
IDdevice-lifecycle.ota-rollout
DescriptionOperator starts a staged campaign; edge agents download, apply and report firmware updates with health gates between stages.
Keyota-rollout
Tags
firmware
high
100%

Specification

OTA firmware rollout

Rolling out firmware is the highest-risk fleet operation: a bad build can brick devices at scale. This workflow makes rollout staged and reversible — a new version is released to a tiny cohort first, and only advances if health metrics stay green.

Staged by default

Default stages are 1% → 10% → 50% → 100%. Between stages the Progress Tracker evaluates a health gate; a regression auto-pauses the campaign.

Participants

Steps

Create the campaign

An operator defines the target version, the device cohort and the stage plan in the OTA Service.

Offer and download

Each stage offers the update to its cohort; agents download the signed package from object storage.

Apply and report

Devices stage, apply and reboot; the edge agent reports per-device success or failure.

Gate and advance

If the cohort’s health is within bounds the campaign advances; otherwise it auto-pauses for operator review.

Steps

Workflow steps
NumberSourceDestinationDescription
1OperatorDashboardStart rollout campaign
2DashboardOTA serviceCreate campaign (version, cohort, stages)
- loop For each stage
3OTA serviceEdge agentOffer update to stage cohort
4Edge agentObject storageDownload signed package
5Edge agentDeviceStage and apply
6DeviceEdge agentApply result
7Edge agentOTA serviceReport progress
- if Health gate passed
8OTA serviceOTA serviceAdvance to next stage
else Failure rate too high
9OTA serviceDashboardAuto-pause for review
end
end
10OTA serviceDashboardCampaign metrics
Open diagram editor (read-only in guest)