A container stays unhealthy forever after a bad migration

A deployment looks protected by health checks until one release wedges a service in an unhealthy-but-still-running state.