> ## Documentation Index
> Fetch the complete documentation index at: https://docs.kubox.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# kubox plane upgrade

Move the plane to the release its document names, in place

### Synopsis

Changes what the plane RUNS and nothing it runs ON: the Management API,
the Provisioner and the runner image move to spec.release.version, through
the same install `kubox admin install` performs. The Talos cluster, the state,
the keys, the CloudAccount registrations and the customer's trust are
untouched.

REFUSES rather than rebuilds. The cluster document this release compiles
to is compared with the one the plane was built from, and a difference
anywhere -- a Talos version, a node group, the network -- is not an
upgrade. The plan names it and points at `kubox plane rebuild`; nothing
here turns into one silently.

Preflight proves the release exists in the registry before anything moves.
Afterwards the plane is asked what it reports, and the custody and identity
proofs `plane verify` makes are run.

```
kubox plane upgrade [flags]
```

### Options

```
      --artifact-key-provider string   key sealed artifacts are protected by (env: KUBOX_ARTIFACT_KEY_PROVIDER)
      --cluster-document string        the cluster document the plane was built from (default: <name>.cluster.yaml beside the deployment)
      --context string                 context within it
      --database-url string            record store connection string (env: KUBOX_DATABASE_URL, KUBOX_ARTIFACT_DSN)
  -f, --file string                    the PlaneDeployment naming the release
  -h, --help                           help for upgrade
      --kubeconfig string              path to the plane's kubeconfig
      --plan                           say what would move and what would not, and do nothing
      --settle duration                how long to wait for the plane to report the new release (default 3m0s)
      --stack-key-provider string      key Pulumi state is encrypted with; must be a DIFFERENT key (env: KUBOX_STACK_KEY_PROVIDER)
      --state-backend string           Pulumi state backend (env: PULUMI_BACKEND_URL)
      --tenant stringArray             a tenant this plane builds for: the cloud connection's namespace (kubox-system for Kubox's own); repeatable. Read from the plane's cloud connections when not given
```

### Global options

See [global options](/cli-reference/kubox#global-options).

### SEE ALSO

* [kubox plane](/cli-reference/kubox_plane)	 - Describe and build a management plane from one document