PRODUCTION MANUALS & DEPLOYMENT RUNBOOKS
Engineering Implementation Guides.
Step-by-step operational runbooks, zero-downtime database migration checklists, and API execution protocols designed for engineering leads and systems architects.
Production Battle-Tested
Zero-Downtime Safe
Copy-Paste Code Snippets
Database & DevOpsExecution Time: ~45 Minutes
Zero-Downtime Database Migration Runbook
A battle-tested operational guide for applying non-blocking schema modifications, index creations, and tenant partition splits on high-throughput PostgreSQL databases.
Operational Execution Phases
1Step 1: Add new nullable columns or tables additively (never DROP or RENAME columns live).
2Step 2: Deploy dual-writing application microservice writing to both legacy and new structures.
3Step 3: Backfill historical records using throttled background worker batches.
4Step 4: Switch read queries to new schema and verify zero replication lag.
5Step 5: Safely deprecate and contract legacy schema paths after 14-day validation window.
Executable Code / Command
ALTER TABLE tenant_ledgers ADD COLUMN IF NOT EXISTS status_v2 VARCHAR(32);
CREATE INDEX CONCURRENTLY idx_ledgers_tenant_status
ON tenant_ledgers (tenant_id, status_v2);Key Prerequisites:
- PostgreSQL 14+ with pg_stat_statements enabled
- PgBouncer connection pooler in transaction mode
- Automated staging replica verified against recent production snapshot
Identity & RBACExecution Time: ~30 Minutes
SAML 2.0 & OAuth 2.0 PKCE Enterprise SSO Playbook
Step-by-step technical guide for configuring single sign-on (SSO) with enterprise Identity Providers (Okta, Microsoft Entra ID, Google Workspace) using scoped OAuth 2.0 tokens.
Operational Execution Phases
1Step 1: Exchange SAML metadata XML endpoints in DEZORYN Security Console.
2Step 2: Map IdP attribute claims (email, firstName, lastName, departmentGroups) to DEZORYN roles.
3Step 3: Configure PKCE code challenge verification for mobile and single-page apps.
4Step 4: Execute end-to-end IdP-initiated login test in isolated staging sandbox.
5Step 5: Enforce mandatory SSO policy with grace periods for external contractors.
Executable Code / Command
curl -X POST https://api.dezoryn.cloud/v1/auth/sso/configure \
-H "Authorization: Bearer sec_live_..." \
-d '{"idp_metadata_url": "https://identity.customer.com/metadata"}'Key Prerequisites:
- Configured IdP application with ACS URL and Entity ID
- TLS 1.3 certificate bound to custom corporate domain
- Active DEZORYN Super Administrator credentials
Integrations & APIsExecution Time: ~20 Minutes
High-Throughput Webhook Delivery & Retry Playbook
How to consume real-time event webhooks with guaranteed delivery, cryptographic HMAC-SHA256 signature verification, and exponential backoff handling.
Operational Execution Phases
1Step 1: Validate inbound X-Dezoryn-Signature header using constant-time string comparison.
2Step 2: Acknowledge payload with immediate HTTP 200 OK before processing heavy business logic.
3Step 3: Push payload into worker queue with event ID for idempotent deduplication.
4Step 4: Configure automatic dead-letter queue (DLQ) alerts for failed downstream handler attempts.
Executable Code / Command
const signature = req.headers["x-dezoryn-signature"];
const expected = crypto.createHmac("sha256", secret).update(rawBody).digest("hex");
if (!crypto.timingSafeEqual(Buffer.from(signature), Buffer.from(expected))) {
return res.status(401).send("Invalid Signature");
}Key Prerequisites:
- Public HTTPS webhook receiver with valid TLS certificate
- Redis or RabbitMQ queue for asynchronous event processing
- Shared webhook secret token configured in DEZORYN Developer Hub
Migration & ArchitectureExecution Time: ~2 to 4 Hours
Legacy Data Sanitization & Staging Cutover Protocol
A structured checklist for extracting dirty historical records from paper or desktop software, running deduplication algorithms, and loading sanitized data into DEZORYN cloud schemas.
Operational Execution Phases
1Step 1: Run automated syntax validation to catch missing foreign keys and invalid email formats.
2Step 2: Execute fuzzy matching to identify and merge duplicate customer accounts.
3Step 3: Load staged records into an isolated preview tenant for administrative sign-off.
4Step 4: Execute weekend delta cutover: freeze legacy updates and apply incremental writes.
5Step 5: Compare opening ledger balances between legacy and cloud systems for 100% parity.
Executable Code / Command
npx @dezoryn/migrate-cli ingest \
--source ./legacy-export.csv \
--target tenant_prod_gamma \
--dry-run --validate-relationsKey Prerequisites:
- CSV/JSON extraction of master entities (students, patients, property units, ledgers)
- Standard schema mapping template provided by DEZORYN engineering
- Stakeholder sign-off on historical balance reconciliation rules
Planning a Complex System Migration?
Our solutions engineering team assists with end-to-end data cutovers, schema reviews, and staging verification.