Documentation
Operating a vigie: drain, quarantine, updates
A vigie is operated without ceremony: you drain it of its traffic, isolate it if needed, retire it, update it. The principle that makes all of this simple is that a vigie is disposable — its state rebuilds quickly — and that its scope stays bound to your workspace alone. This page describes the routine operations cycle.
Operations cycle
A vigie's operational lifecycle comes down to three gestures that chain together: drain, quarantine, decommission. Each preserves in-flight sessions as much as possible and avoids any abrupt cut.
- 1DrainNew connections stop being assigned to the vigie and in-flight sessions are left to finish or migrate. The vigie empties gradually, without breaking active traffic.
- 2QuarantineThe vigie is isolated from service: it no longer accepts traffic but remains observable, long enough to inspect a suspicious behaviour or prepare an intervention.
- 3DecommissionOnce emptied and verified, the vigie is removed from the fleet. Since its state is rebuildable, this removal destroys no irreplaceable data.
Updates
A vigie update follows the same cycle: drain the target vigie, take it out of service, deploy the new version, then reintegrate it. The fleet keeps serving during the operation, as the other vigies absorb the drained traffic.
The vigie is disposable
A vigie holds no irreplaceable state. It relays and coordinates, but the serving state it carries can be rebuilt from the fleet's source of truth. Losing one is therefore not a data incident, only a replacement.
This property is what makes drain, quarantine and decommission inexpensive: at any moment, replacing a vigie is a normal operation, not disaster recovery.
Supervision
Each vigie exposes a health check endpoint at /healthz. A supervisor queries it to decide whether to assign traffic, trigger a drain or take a vigie out of service; it is the base signal the operations cycle relies on.
The private scope stays bound to your workspace
Operating a vigie never crosses the boundary of your workspace. A vigie serves a single workspace: its traffic, its sessions and its state never mix with another's. Draining, isolating or replacing a vigie therefore only affects your own perimeter.