Identity And Access
604 incident problems about Identity And Access. Start with the reviewed ones.
먼저 읽을 가이드
추천 문제
All problems (604)
CICD-1293A secrets: inherit rollout still breaks one reusable workflowOne shared deployment workflow works in some repos and fails in another after secret inheritance was adopted.CI/CDIntermediate15 minProLINUX-1293A sudo automation works for one command but fails for the nextA hardening rollout lands and only unattended maintenance scripts begin failing while operators can still sudo interactively.LinuxIntermediate15 minProCICD-1284A deployment job can push images but cannot update the registry cacheA team adds registry-backed Buildx caching and only the cache step begins failing while the ordinary push still works.CI/CDIntermediate16 minProCICD-1267A reusable workflow deploys correctly in the caller but silently loses its secret in the called workflowA team modularizes its deployment pipeline and later finds that the reusable workflow cannot access credentials that were available in the original monolithic version.CI/CDIntermediate16 minProCICD-1274A reusable workflow inherits the caller repository but not its permissions, so the deployment step fails after modularization even though the old monolithic job workedThe refactor succeeds syntactically, yet the new called workflow loses privileges because the permissions contract changed at the workflow-call boundary.CI/CDIntermediate16 minProLINUX-1265A reverse proxy only breaks WebSocket auth flowsLinux incident scenario used for structured troubleshooting practice.LinuxIntermediate16 minProLINUX-1270A reverse proxy only breaks WebSocket auth flowsAn authentication layer added at the reverse proxy works for ordinary pages and suddenly breaks upgraded connections or live UI channels.LinuxIntermediate16 minProCICD-1278A workflow can clone the main repo but submodule fetch still failsA monorepo with private submodules starts failing only after nested repositories are switched to SSH references.CI/CDIntermediate16 minProK8S-1274Metrics Server is installed but HPAs stay blindAn HPA remains at unknown metrics even after Metrics Server was installed and the pods appear healthy.KubernetesIntermediate16 minProSECURITY-1235Login throttling exists but password spray still succeedsAn authentication surface throttles requests by source IP and still suffers sustained password spraying from clients rotating IPv6 addresses.SecurityIntermediate17 minProSECURITY-1245Password spray continues despite rate limitingAn authentication surface limits requests by source IP and still sees sustained password spraying from rotating IPv6 clients.SecurityIntermediate17 minProSECURITY-1255Password spray continues despite rate limitingAn authentication surface limits by source IP and still suffers sustained password spraying from clients rotating IPv6 addresses.SecurityIntermediate17 minProSECURITY-1250Password spraying continues despite rate limitingAn authentication surface limits by source IP and still suffers sustained password spray from clients rotating IPv6 addresses.SecurityIntermediate17 minProSECURITY-1230Rate limiting appears to work but attackers still spray passwordsA team relies on IP-based login throttling and later sees abusive authentication continue from rapidly changing IPv6 clients.SecurityIntermediate18 minProCICD-1600A Drone log masking fix lands and one secret still leaksA secret still leaks in one Drone logging path after masking fixes.CI/CDIntermediate7 minProCICD-1610A Drone secret masker is fixed and one multiline token still leaksA multiline token still leaks in one Drone logger path after fixes.CI/CDIntermediate7 minProCICD-1570A Drone pipeline masks secrets correctly and one multiline token still leaks to logsA multiline token leaks only in one legacy Drone executor path.CI/CDIntermediate8 minProCICD-1590A Drone secret masking fix lands and one multiline secret still leaksA multiline secret leaks only in one Drone logging path after masking fixes.CI/CDIntermediate8 minProCICD-1574A Jenkins agent reconnects and one pipeline still failsA single Jenkins agent fails to reconnect after controller TLS rotation.CI/CDIntermediate8 minProCICD-1594A Jenkins inbound agent reconnects and still failsOne Jenkins agent still fails after controller URL and certificate updates.CI/CDIntermediate8 minPro