Helm hook runs migrate (and optionally seed) before any pod rolls. If the Job fails, helm upgrade aborts and the previous ReplicaSet keeps serving traffic. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>