Identity And Access
604 incident problems about Identity And Access. Start with the reviewed ones.
먼저 읽을 가이드
추천 문제
All problems (604)
SECURITY-1604An External Secrets template is fixed and one pod still renders the old credentialOne pod still renders the old credential after an External Secrets fix.SecurityAdvanced9 minProK8S-1599An IRSA mapping is fixed and one pod still fails STSOne pod still fails STS after an IRSA mapping fix.KubernetesAdvanced9 minProK8S-1609An IRSA mapping is fixed and one pod still fails STSOne pod still fails STS after an IRSA mapping fix.KubernetesAdvanced9 minProSECURITY-1568A PAM radius failover recovers and one host still rejects valid usersOne host rejects valid users only on radius failover paths.SecurityAdvanced10 minProK8S-1579An IRSA issuer changes and one DaemonSet still loses credentialsOne DaemonSet loses credentials after IRSA issuer migration.KubernetesAdvanced10 minProK8S-1589An IRSA service account is corrected and one node still fails STSOne node still fails STS after IRSA service account corrections.KubernetesAdvanced10 minProK8S-1569An IRSA token file rotates and one DaemonSet still loses AWS accessA DaemonSet loses AWS access only on nodes where an init copy path still runs.KubernetesAdvanced10 minProSECURITY-1473A Cloudflare Access policy allows service tokens and still blocks one routeService-token access works for normal paths and fails only when an upstream sends duplicated slashes.SecurityAdvanced11 minProCICD-1501A GitHub OIDC deploy succeeds in test and fails in prodOnly production deploys fail after an AWS federation alias cleanup while test continues to work.CI/CDAdvanced11 minProCICD-1591A GitHub OIDC deployment still fails in one accountDeployments fail only in one account after consolidating environment aliases.CI/CDAdvanced11 minProSECURITY-1382A Grafana auth proxy setup works and admin privileges disappearA Grafana auth proxy setup works and admin privileges disappear focuses on Identity And Access and asks the reader to isolate the key signal in NGINX. Identity regressions can come from harmless-looking canonicalization changes like lowercasing...SecurityIntermediate11 minProSECURITY-1392A Grafana team sync still works and one admin loses elevated accessA Grafana team sync still works and one admin loses elevated access focuses on Identity And Access and asks the reader to isolate the key signal in grafana. SSO regressions often come from type changes in claims, not just from missing values.SecurityIntermediate11 minProSECURITY-1385A Prometheus exporter secret is rotated and alerting still uses the old...A Prometheus exporter secret is rotated and alerting still uses the old... focuses on Identity And Access and asks the reader to isolate the key signal in Kubernetes. Hot-reload automation can succeed technically while watching the...SecurityIntermediate11 minProSECURITY-1493A Vault token revocation succeeds and an app still authenticatesAn application keeps renewing secrets briefly after its Vault parent token was revoked during an incident response action.SecurityAdvanced11 minProSECURITY-1503A Vault token revocation succeeds and the app still authenticatesAn application keeps renewing secrets briefly after its Vault parent token was revoked.SecurityAdvanced11 minProSECURITY-1513A Vault token revocation succeeds and the app still authenticatesAn application keeps renewing secrets briefly after its Vault parent token is revoked.SecurityAdvanced11 minProSECURITY-1523A Vault token revocation succeeds and the app still authenticatesAn application keeps renewing secrets briefly after Vault revocation.SecurityAdvanced11 minProCICD-1578A Vault transit key rotates and one signing job still emits the old key versionOne signing job keeps using an old transit key version after rotation.CI/CDAdvanced11 minProCICD-1507An Argo CD repo-server trust update lands and one Git mirror still failsOnly one Argo CD repo-server pod rejects a rotated Git mirror key after a trust bundle update.CI/CDAdvanced11 minProK8S-1559An IRSA migration completes and one DaemonSet still loses cloud accessA DaemonSet loses AWS access only on older nodes after IRSA migration.KubernetesAdvanced11 minPro