The OTA Service turns “ship firmware v1.8.2 to the EU fleet” into a safe,
observable, staged rollout. It owns the campaign definition, decides which
devices get the update when, and tracks the result device-by-device.
Safety first
Firmware rollouts are the highest-risk fleet operation. The service always rolls out in staged cohorts with health gates between stages, so a bad build is caught on a small percentage before it can reach the whole fleet.
Could not build diagram for model "example-iot".
Update campaigns, target version and rollout schedule.
Selects the next batch of devices for each stage.
Tracks per-device update progress and health.
The service drives the OTA rollout workflow end to end:
Health gates
Between stages the service checks crash-rate and reconnect metrics from observability. If a cohort regresses, the campaign auto-pauses for operator review instead of advancing.