Topic81 problems· 1 reviewed

Cluster Maintenance

81 incident problems about Cluster Maintenance. Start with the reviewed ones.

All problems (81)

K8S-1384A Rancher-managed cluster upgrade completes and one node pool never rejoinsA Rancher-managed cluster upgrade completes and one node pool never rejoins focuses on Identity And Access and asks the reader to isolate the key signal in Kubernetes. Managed cluster reconnect failures often live in agent bootstra...KubernetesAdvanced15 minProK8S-1389A service mesh egress gateway looks healthy and outbound TLS still failsA service mesh egress gateway looks healthy and outbound TLS still fails focuses on Identity And Access and asks the reader to isolate the key signal in Kubernetes. Mesh trust rotations can fail asymmetrically when some namespa...KubernetesAdvanced15 minProK8S-1385A StatefulSet with local PVs keeps one pod PendingA StatefulSet with local PVs keeps one pod Pending focuses on cluster-maintenance and asks the reader to isolate the key signal in Kubernetes. Storage binding failures often come from stale locality metadata surviving longer than the no...KubernetesAdvanced15 minProCICD-1390A Terraform destroy plan targets the right stack and fails halfwayA Terraform destroy plan targets the right stack and fails halfway focuses on cluster-maintenance and asks the reader to isolate the key signal in hashicorp. Destroy failures often reveal stale read paths in provider aliases that normal ap...CI/CDAdvanced15 minProLINUX-1318A Vault template updates the file and the service reload hook never runsA secret rotation system updates files reliably and the consuming service still never reloads the new material.LinuxAdvanced15 minProK8S-1317An HPA looks idle (metrics-adapter-cached-old-label-discovery)An HPA looks idle (the key signal) focuses on cluster-maintenance and asks the reader to isolate the key signal in Kubernetes. Visible metrics do not prove the autoscaler is querying them through the same cached path.KubernetesAdvanced15 minProLINUX-1378An nftables migration looks successful and one rootless service still loses egressA host firewall migration is completed and later one rootless service can no longer reach external systems although general host egress still works.LinuxAdvanced15 minProK8S-1355An OpenSearch cluster on Kubernetes stays yellowA zone-label migration is rolled out and later stateful search replicas remain Pending even though enough nodes exist in the cluster.KubernetesAdvanced15 minProK8S-1343An OpenSearch operator rollout restarts pods foreverA chart rename seems harmless and later one custom resource keeps failing reconcile with admission or validation errors.KubernetesAdvanced15 minProK8S-1375An OpenSearch StatefulSet keeps a replica PendingA zone-label migration completes and later one search replica remains Pending despite enough nodes across zones.KubernetesAdvanced15 minProK8S-1365An OpenSearch StatefulSet keeps one replica PendingA label migration finishes and later one search replica remains unschedulable despite apparent cluster capacity.KubernetesAdvanced15 minProLINUX-1304Logrotate appears successful but a high-volume service still loses linesAn application under peak traffic rotates logs cleanly and later operators discover a silent gap around the rotate time.LinuxAdvanced15 minProNETWORK-1372Two OSPF neighbors stay in EXSTART after a VLAN migrationA routed VLAN migration completes and later one OSPF adjacency never progresses beyond EXSTART despite matching interface configs at the subinterface layer.NetworkAdvanced15 minProLINUX-1309Vault Agent keeps rotating certificates but the service never reloadsA host renews certificates automatically and the consumer still serves the old cert until manually restarted.LinuxAdvanced15 minProK8S-1351A Cilium upgrade keeps policy green and one namespace loses east-west trafficA Cilium upgrade keeps policy green and one namespace loses east-west traffic focuses on cluster-maintenance and asks the reader to isolate the key signal in Kubernetes. Node-local dataplane state can outlive a healthy-looking Cilium r...KubernetesAdvanced16 minProCICD-1304A remote state lock looks cleared in DynamoDB but the next plan still refuses to runAn interrupted deployment unblocks the lock table but later runs still refuse to proceed with a lock-style error.CI/CDAdvanced16 minProK8S-1303Leader election looks healthy until the controller is Helm-migratedA controller is reinstalled or moved between namespaces and begins flapping without an obvious RBAC denial.KubernetesAdvanced16 minProK8S-1283A PodDisruptionBudget looks permissive enough but cluster upgrades still stallA managed cluster upgrade stalls on one workload even though operators believe the PodDisruptionBudget should allow at least one eviction.KubernetesAdvanced17 minProK8S-1295A rollout stalls on only one zoneA cluster drain starts cleanly and one workload never reschedules despite enough total cluster capacity.KubernetesAdvanced18 minProK8S-1287A StatefulSet recovers after reboot but one member keeps attaching the wrong volumeA stateful workload is migrated or restored and one ordinal repeatedly boots with the wrong persistent data.KubernetesAdvanced18 minPro