We have one master PG database and handle upgrades during "planned downtime" during off-peak hours (during weekend nights our B2B app is relatively empty). We

We have one master PG database and handle upgrades during "planned downtime" during off-peak hours (during weekend nights our B2B app is relatively empty). We prep a new instance with the upgrades in place, and then load over the production data during downtime.