Symptom384 problems· 9 reviewed

Rollout Stuck

384 incident problems that show up as “Rollout Stuck”.

All problems (384)

NETWORK-075IPv6 RA guard blocks the real router after a campus template is copied to the uplinkIPv4 still works, but IPv6 clients lose their gateway because the edge protection template was applied to the wrong interface type.NetworkIntermediate15 minFreeNETWORK-087Router-on-a-stick subinterface works for one VLAN but the allowed list omits the new segmentInter-VLAN routing exists overall, but the newly added segment remains isolated because the trunk never allowed that VLAN onto the router link.NetworkIntermediate15 minFreeLINUX-076tmpfiles.d recreates the runtime directory with the wrong owner after rebootPermissions look correct before restart, but the service fails after boot because tmpfiles recreated the path with ownership that no longer matches the daemon user.LinuxIntermediate15 minFreeNETWORK-094VLAN exists on both switches but VTP pruning removes the path users think is activeThe database is correct, yet traffic still disappears because dynamic pruning removed the VLAN from a trunk users assumed was always carrying it.NetworkIntermediate15 minFreeCICD-092GitHub Actions reusable workflow loses required secretsThe shared pipeline is healthy overall, but one repository fails because the caller stopped forwarding the secret set the workflow expects.CI/CDIntermediate16 minFreeCICD-074Helm values schema rejects a CI overrideThe chart and environment variable both look right in isolation, but the rendered upgrade fails because the pipeline injects a quoted string where the schema expects a boolean.CI/CDIntermediate16 minFreeCICD-086Monorepo path filter skips the shared library change and one service deploys without rebuildingThe workflow optimization seems valid, but one service ships stale code because its dependency lives outside the path pattern that triggers rebuilds.CI/CDIntermediate16 minFreeK8S-089Probe succeeds on localhost but the service mesh policy blocks real pod-to-pod callsThe container reports healthy, yet callers still fail because the readiness command bypasses the same network policy and sidecar path used in production traffic.KubernetesIntermediate16 minFreeNETWORK-103Root guard blocks the intended new spanning-tree root after maintenance and access switches stay pinned to the old pathThe maintenance plan is correct, yet the protection feature prevents the desired root election because the uplink role changed during rewiring.NetworkIntermediate16 minFreeNETWORK-098Stack member replacement keeps the config but loses the DHCP snooping binding table after reloadUser traffic recovers briefly, then fails after reload because the new member does not retain the dynamic trust state the design relied on.NetworkIntermediate16 minFreeK8S-103ExternalDNS creates the new record but readiness still failsDNS updates succeed outside the pod, yet the app never heals because its resolver library keeps using stale answers through the rollout.KubernetesIntermediate17 minFreeCICD-077GitHub Actions artifact download fails on self-hosted runnersThe workflow is correct, but only one runner cannot fetch artifacts because its local time drift makes a short-lived signed URL look expired immediately.CI/CDIntermediate17 minFreeK8S-075Service mesh sidecar intercept excludes the health port on one Deployment onlyThe mesh is healthy in the cluster overall, but one workload fails readiness because its sidecar capture rules skip the port the probe is supposed to reach.KubernetesIntermediate17 minFreeCICD-082Build cache hides a broken transitive dependency until a clean runner finally fails in production weekMost builds stay green, but a later clean environment fails because the cache had been masking a missing or incompatible transitive dependency path.CI/CDIntermediate18 minFreeLINUX-099Emergency reboot script runs from cron but loses access to the package manager lock namespace inside systemd-runThe fallback script exists, yet repair automation still fails because the execution environment differs from the shell where the operator tested it.LinuxIntermediate18 minFreeCICD-062Reusable GitHub workflow call fails after the default branch renameWorkflows on the main pipeline still run, but the shared reusable workflow is no longer resolved because the referenced branch and published ref policy drifted apart.CI/CDIntermediate18 minFreeLINUX-051systemd-tmpfiles cleanup removes the application socket directory after rebootThe service worked before restart, but after boot its runtime socket path is missing because the tmpfiles policy cleaned the directory more aggressively than expected.LinuxIntermediate18 minFreeNETWORK-065Root guard errdisables the uplink after temporary loop prevention during maintenanceThe spanning-tree design is mostly correct, but a maintenance path unexpectedly presents a superior BPDU and the protected uplink shuts itself down.NetworkIntermediate19 minFreeLINUX-032Systemd service starts manually but fails on boot without network-online targetThe unit runs when started interactively, yet boot-time startup fails because dependency ordering assumes the network is ready earlier than it actually is.LinuxIntermediate19 minFreeK8S-038Private registry pull failsThe imagePullSecret is correct, but the runtime on each node still rejects the registry because the certificate authority was never trusted at the container runtime layer.KubernetesIntermediate23 minFree