Non-transitory computer readable media are encoded with instructions which, when executed by one or more processors of a central computing system, cause the central computing system to connect with multiple service domains and determine that at least one service domain of the multiple service domains is eligible for upgrade. The instructions further cause the central computing system to store an upgrade package for the at least one service domain at a storage service separate from the central computing system and communicate access credentials to the storage service to the at least one service domain. The central computing system receives a communication from the at least one service domain indicative of upgrade status responsive to the at least one service domain having accessed the upgrade package at the storage service and updates a state management database based on the communication.