The key for me is to have a solid backup/disaster recovery plan in place and to first assess what rollback would entail and to verify that backup data is not corrupted. Rollback is more of a final (nuclear) option, but I always need to verify that it is an option...
Data loss from rollback is far better than total corruption (if it ever gets to that point, God forbid).
It also depends greatly on the availability needs for a system of course, but everyone has to be reasonable over things they can't pre-conceive or control in these types of situations because there's no way anything can operate flawlessly and without failure.
Data loss from rollback is far better than total corruption (if it ever gets to that point, God forbid).
It also depends greatly on the availability needs for a system of course, but everyone has to be reasonable over things they can't pre-conceive or control in these types of situations because there's no way anything can operate flawlessly and without failure.
1. The Titanic
2. The Hindenburg
3. The AWS-East Service Outage This Month
:\