We had a production incident after upgrading a CE cluster. The CE nodes couldn't communicate with the backends.

We would like to have the possibility to upgrade only one node of the cluster and test if the application traffic is still flowing normally before upgrading the rest of the nodes.

In addition, we would like to have a rollback procedure in the event that the CE cluster upgrade creates an incident.