Basically we upgrade the docker images to make sure we’re up-to-date with the latest security releases. In the more customized PS-driven solution we can define whatever policy you prefer and execute it – controlling the maintenance window and any other aspect of the upgrade.