I don’t remember much about how to use kubernetes but if you can specify a tag like nextcloud:28
instead of nextcloud:latest
you should have a safer time with upgrades. Then make sure you always upgrade all the way before moving to a newer major version, this is crucial.
There are varying degrees of version specificity available: https://hub.docker.com/_/nextcloud/tags
Make sure you’re periodically evaluating your site with https://scan.nextcloud.com/ and following all of the recommended best practices.
Always works great for me.
I just run it (behind haproxy on a separate public host) in docker compose w/ a redis container and a hosted postgres instance.
Automatically upgrade minor versions daily by pulling new images. Manually upgrade major versions by updating the compose file.
Literally never had a problem in 4 years.
I’ve been running it for about 6 years, literally never did me dirty.
Docker compose pull every couple weeks, bump the major version whenever it’s time, migrations always work.