Identity And Access
604 incident problems about Identity And Access. Start with the reviewed ones.
먼저 읽을 가이드
추천 문제
All problems (604)
LINUX-1365A sudoers include works for direct users and fails for bastion usersA host update passes basic access tests and later operators discover that bastion-based sudo no longer enforces MFA consistently.LinuxIntermediate12 minProLINUX-1363An Ubuntu apt migration adds signed-by cleanly and one host still failsA repository trust migration is rolled out and later one host class keeps failing apt update despite the new signed-by config being present.LinuxIntermediate12 minProLINUX-1325sudo stops honoring one permissionA host hardening change adds a new sudoers.d file and later one operational command begins prompting or denying unexpectedly.LinuxIntermediate12 minProCICD-1365A remote Terraform module fetch works from developer laptops and fails in...A remote Terraform module fetch works from developer laptops and fails in... focuses on Identity And Access and asks the reader to isolate the key signal in hashicorp. Remote execution can fail on trust bootstrap even when credentials are correct.CI/CDIntermediate13 minProCICD-1329A reusable workflow loses one environment secretA platform team refactors a shared workflow interface and only one environment later loses the deployment secret at runtime.CI/CDIntermediate13 minProLINUX-1308A sudo command works interactively and fails in a systemd serviceA maintenance script works for an operator shell and later fails only when run from a service timer or oneshot unit.LinuxIntermediate13 minProLINUX-1347A sudo MFA rule works for direct users and fails for SSH jump usersA sudo MFA rule works for direct users and fails for SSH jump users focuses on Identity And Access and asks the reader to isolate the key signal in Linux. Authentication bugs after updates often come from include-order drift, not missing modu...LinuxIntermediate13 minProLINUX-1313A sudo-based maintenance timer works on one host and fails on anotherA sudo-based maintenance timer works on one host and fails on another focuses on Identity And Access and asks the reader to isolate the key signal in Linux. Policy fragments are code; ordering changes behavior even when the file set looks identical.LinuxIntermediate13 minProK8S-1354A cert-manager renewal job stays Pending (webhook-networkpolicy-still-whitelisted-old-apiserver-cidr)A cert-manager renewal job stays Pending (webhook-networkpolicy-still... focuses on Identity And Access and asks the reader to isolate the key signal in Kubernetes. Admission and webhook traffic often comes from a control-plane CIDR...KubernetesIntermediate14 minProK8S-1326A cert-manager renewal succeeds and the new certificate never reaches the appA certificate rotates successfully in cluster state and the application continues presenting the old material until a restart.KubernetesIntermediate14 minProCICD-1353A GitHub Actions deploy to a private cluster works on manual dispatch and...A GitHub Actions deploy to a private cluster works on manual dispatch and... focuses on Deployment Governance and asks the reader to isolate the key signal in GitHub. Release and manual workflows can carry the same code and very dif...CI/CDIntermediate14 minProCICD-1335A Helm deploy from CodeBuild loses AWS auth only in one projectA private CodeBuild environment is hardened with VPC endpoints and later only one deploy job starts failing AWS auth inside the build container.CI/CDIntermediate14 minProLINUX-1258A sudo policy file exists in sudoers.d but is ignoredAn automation role adds a new sudo include file and the target account still cannot use the expected command set.LinuxIntermediate14 minProK8S-1242A CronJob fires on schedule but no useful work happensA copied CronJob template looks valid and still fails every execution when it tries to access cluster or cloud APIs.KubernetesIntermediate16 minProK8S-1247A CronJob schedules correctly but the pod still cannot reach the APIA scheduled maintenance job is cloned from another hardened template and later fails only when it tries to contact cluster or cloud APIs.KubernetesIntermediate16 minProK8S-1252A CronJob starts on schedule but the pod cannot call the APIA maintenance CronJob cloned from another workload begins failing only when it reaches the point that needs API or cloud credentials.KubernetesIntermediate16 minProSECURITY-1620A JWKS endpoint fix is correct and one verifier still rejects tokensOne verifier still rejects tokens after a JWKS endpoint fix.SecurityIntermediate10 minProSECURITY-1630A JWKS key rotates and one edge verifier still failsOne edge verifier still fails after a JWKS rotation.SecurityIntermediate10 minProSECURITY-1690A browser login is fixed and one app path still failsThe main login page works and one interactive app path still fails after the session fix.SecurityIntermediate11 minProSECURITY-1710A browser login succeeds and one app action still failsOne app action still fails after browser login was fixed.SecurityIntermediate11 minPro