Topic47 problems· 2 reviewed

CI/CD Workflow Debugging

47 incident problems about CI/CD Workflow Debugging. Start with the reviewed ones.

All problems (47)

CICD-132An ephemeral runner image misses the internal CA root and only private registry pulls fail after autoscaling adds new workersLegacy workers continue working, but new ones cannot trust the organization registry chain.CI/CDAdvanced17 minProCICD-125Git submodule authentication works during checkout, but the downstream Docker build context cannot re-fetch the private module and image creation failsThe workflow clone step succeeds, yet a later stage rebuilds context in an environment without the same credentials.CI/CDAdvanced17 minProCICD-084GitHub Environment protection waits foreverReviewers approve the release, but the gate never opens because the workflow reports status to a differently cased or aliased environment than the protected one.CI/CDAdvanced17 minProCICD-072GitHub Actions matrix deploy runs twice in productionThe workflow looks serialized, but two production deploys still overlap because the concurrency group ignores environment or region and only keys on the branch name.CI/CDAdvanced19 minProCICD-088Argo CD health check stays degradedThe resource is actually working, but the GitOps controller still blocks promotion because its custom health logic only understands the older API shape.CI/CDAdvanced20 minProCICD-369A preview environment uses feature flags from production defaults and hides one missing secret until the production rollout toggles the path live during a staged decommissionLower environments looked clean only because the risky path never became active there. The service still works through the primary path, but one dependency only fails when the old component is finally drained away.CI/CDIntermediate16 minProCICD-306A preview deployment signs in with a lower-privilege identity and the later promote step assumes those same credentials are still sufficient during a failover rehearsalThe early environment works, but the promotion path needs a broader scope that the pipeline never refreshes. Normal traffic masked the issue until the standby or alternate path became active under rehearsal conditions.CI/CDIntermediate17 minProCICD-345A release workflow restores a cached dependency graph that no longer matches the promoted lockfile lineage during a staged decommissionBuild reproducibility appears intact, but the promoted dependency graph was reconstructed from stale lineage metadata. The service still works through the primary path, but one dependency only fails when the old component is finally drained away.CI/CDAdvanced17 minProCICD-487A preview environment uses feature flags from production defaults and hides...A preview environment uses feature flags from production defaults and hides... focuses on ci-cd-workflow-debugging and asks the reader to isolate Permission Denied in AWS. 실무에서는 ci-cd-workflow-debugging 문제를 볼 때 실패 단계만 보지 말고 최근 변경, 이미지 태그, 시크릿 주입, 롤백 가능 여부를 먼저 함께 확인하는 편이 빠릅니다.CI/CDIntermediate18 minProCICD-264A self-hosted runner image refresh changes the Docker builder version and breaks layer cache reproducibility across the fleet during a failover rehearsalBuilds still run, but cache keys and layer outputs diverge between old and new executors. Normal traffic masked the issue until the standby or alternate path became active under rehearsal conditions.CI/CDAdvanced18 minProCICD-547A preview environment uses feature flags from production defaults and hides...A preview environment uses feature flags from production defaults and hides... focuses on ci-cd-workflow-debugging and asks the reader to isolate Permission Denied in AWS. 실무에서는 ci-cd-workflow-debugging 문제를 볼 때 실패 단계만 보지 말고 최근 변경, 이미지 태그, 시크릿 주입, 롤백 가능 여부를 먼저 함께 확인하는 편이 빠릅니다.CI/CDIntermediate19 minProCICD-667A preview environment uses feature flags from production defaults and hides...A preview environment uses feature flags from production defaults and hides... focuses on ci-cd-workflow-debugging and asks the reader to isolate Permission Denied in AWS. 실무에서는 ci-cd-workflow-debugging 문제를 볼 때 실패 단계만 보지 말고 최근 변경, 이미지 태그, 시크릿 주입, 롤백 가능 여부를 먼저 함께 확인하는 편이 빠릅니다.CI/CDIntermediate21 minProCICD-726A preview environment uses feature flags from production defaults and hides...A preview environment uses feature flags from production defaults and hides... focuses on ci-cd-workflow-debugging and asks the reader to isolate Permission Denied in AWS. 실무에서는 ci-cd-workflow-debugging 문제를 볼 때 실패 단계만 보지 말고 최근 변경, 이미지 태그, 시크릿 주입, 롤백 가능 여부를 먼저 함께 확인하는 편이 빠릅니다.CI/CDIntermediate23 minProCICD-136A coverage gate compares against a stale default-branch baseline after the repository renamed its main branchNew tests are good enough, but the gate keeps failing because it still measures against a branch that no longer receives changes.CI/CDIntermediate14 minProCICD-381A pipeline pins the runner image while the fetched bootstrap script still resolves the latest policy bundle from a mutable channel during a staged decommissionThe execution environment is frozen and its policy input is not. The service still works through the primary path, but one dependency only fails when the old component is finally drained away.CI/CDIntermediate15 minProCICD-146A self-hosted runner group is moved to a new subnet, but the internal package mirror allowlist still trusts only the previous CIDRThe jobs land correctly, yet dependency downloads fail because network identity changed while the workflow labels stayed the same.CI/CDIntermediate15 minProCICD-156A test flake suppressor matches any timeout string, and the real deadlock regression gets auto-muted during release qualificationNoise reduction automation masks the exact new symptom the release gate was meant to catch.CI/CDIntermediate15 minProCICD-149The build step caches test reports by branch name, and a recreated hotfix branch reuses stale pass results from the previous incidentNo tests actually ran for the new code, but the cache key made the workflow appear green.CI/CDIntermediate15 minProCICD-198A branch-based cache key reuses stale test evidence during a failover rehearsalThe workflow turns green even though the current code path never executed fresh validation. Normal traffic masked the issue until the standby or alternate path became active under rehearsal conditions.CI/CDIntermediate16 minProCICD-152A shared action pins the Node runtime version, but the hosted runner image removes that runtime minor line and every workflow begins failing at startupNo application code changed, yet the execution substrate stopped honoring the action's implicit runtime dependency.CI/CDIntermediate16 minPro