Azure
131 incident problems in Azure environments.
먼저 읽을 가이드
추천 문제
All problems (131)
SECURITY-312A browser isolation or proxy layer protects the main UI while websocket or export paths bypass the protected route entirely during a failover rehearsalThe most visible path is controlled and a lower-visibility path still leaks data or interactivity. Normal traffic masked the issue until the standby or alternate path became active under rehearsal conditions.SecurityAdvanced18 minProSECURITY-222A conditional access policy requires compliant devices while cross-tenant claims are minted by the wrong tenant context during a failover rehearsalThe rule is correct in principle and one federated identity path never carries the expected compliance signal. Normal traffic masked the issue until the standby or alternate path became active under rehearsal conditions.SecurityAdvanced18 minProSECURITY-153A PKI automation job renews the leaf certificate first, but the pinned intermediate bundle on one appliance is refreshed only the next day and outbound trust breaks overnightThe chain is valid globally, yet one dependent appliance still pins the previous chain layout.SecurityAdvanced18 minProSECURITY-469A SIEM parser update normalizes timestampsA SIEM parser update normalizes timestamps focuses on Incident Response Operations and asks the reader to isolate Resource Exhaustion in Azure. 실무에서는 resource-exhaustion 경보만 보는 대신 자산 범위, 권한 변경 이력, 인증서나 정책 만료, 우회 경로 존재 여부를 같이 확인해야 대응 우선순위를 제대로 잡을 수 있습니다. Incident Response 관점의 점...SecurityIntermediate18 minProSECURITY-300An OAuth client is disabled while previously issued refresh tokens continue minting delegated access for mobile or desktop clients during a failover rehearsalInteractive sign-in is gone and token lifecycle gaps keep API access alive. Normal traffic masked the issue until the standby or alternate path became active under rehearsal conditions.SecurityAdvanced18 minProSECURITY-246An OAuth logout clears browser state while mobile refresh tokens remain active for the same account during a failover rehearsalThe user appears signed out and another client class keeps working as before. Normal traffic masked the issue until the standby or alternate path became active under rehearsal conditions.SecurityAdvanced18 minProK8S-112HorizontalPodAutoscaler sees the custom metric intermittentlyAutoscaling seems random because the adapter is reachable, yet TLS validation fails sporadically between control plane components.KubernetesAdvanced18 minProSECURITY-186Interactive login is disabled while refresh tokens already issued still mint delegated access during a failover rehearsalThe application is gone for humans while API access remains alive through token lifecycle gaps. Normal traffic masked the issue until the standby or alternate path became active under rehearsal conditions.SecurityAdvanced18 minProSECURITY-101SAML audience matches, but ACS URL normalization drops the trailing slash and the login flow loops between the app and IdPAuthentication succeeds at the identity provider, yet the application rejects the response because the callback URL comparison is stricter than the team expected.SecurityAdvanced18 minProLINUX-1229An nftables ruleset looks restored but one legacy iptables service replays a stale NAT table on bootThe new ruleset is correct on disk, yet after restart translated traffic behaves as if the old table still owns packet flow.LinuxAdvanced19 minProSECURITY-589A SIEM parser update normalizes timestampsA SIEM parser update normalizes timestamps focuses on Incident Response Operations and asks the reader to isolate Resource Exhaustion in Azure. 실무에서는 resource-exhaustion 경보만 보는 대신 자산 범위, 권한 변경 이력, 인증서나 정책 만료, 우회 경로 존재 여부를 같이 확인해야 대응 우선순위를 제대로 잡을 수 있습니다. Incident Response 관점의 점...SecurityIntermediate20 minProSECURITY-649A SIEM parser update normalizes timestampsA SIEM parser update normalizes timestamps focuses on Incident Response Operations and asks the reader to isolate Resource Exhaustion in Azure. 실무에서는 resource-exhaustion 경보만 보는 대신 자산 범위, 권한 변경 이력, 인증서나 정책 만료, 우회 경로 존재 여부를 같이 확인해야 대응 우선순위를 제대로 잡을 수 있습니다. Incident Response 관점의 점...SecurityIntermediate21 minProSECURITY-011Reverse proxy strips security header needed for SSO callbackThe identity provider finishes correctly, but the application rejects the callback because a forwarded security header never arrives.SecurityIntermediate22 minProNETWORK-1187VPN client injects a route that silently steals the return path for one private subnetGeneral connectivity remains healthy, but one internal subnet breaks because the host routing table now prefers a path injected by a VPN client.NetworkAdvanced23 minProK8S-1195Draining one node silently breaks a local-path workload that was never truly portableA maintenance drain appears routine, but one workload fails badly because it depended on local storage behavior that was never made portable across nodes.KubernetesAdvanced24 minProSECURITY-1009A SIEM parser update normalizes timestampsA SIEM parser update normalizes timestamps focuses on Incident Response Operations and asks the reader to isolate Resource Exhaustion in Azure. 실무에서는 resource-exhaustion 경보만 보는 대신 자산 범위, 권한 변경 이력, 인증서나 정책 만료, 우회 경로 존재 여부를 같이 확인해야 대응 우선순위를 제대로 잡을 수 있습니다. Incident Response 관점의 점...SecurityIntermediate27 minProCICD-023Artifact signing step succeeds locally but fails in CI runnersThe same signing command works on a developer machine but breaks in ephemeral runners because the key material and trust chain differ.CI/CDAdvanced27 minProNETWORK-1254A manual TCP DNS test succeeds but real clients still failAn operator proves DNS with one command and later finds that the application still cannot resolve names in production.NetworkIntermediate15 minProLINUX-1280A reverse proxy only breaks one websocket clientOne websocket-based UI or client drops repeatedly while ordinary web traffic and even other chatty websocket clients look fine.LinuxIntermediate15 minProLINUX-1293A sudo automation works for one command but fails for the nextA hardening rollout lands and only unattended maintenance scripts begin failing while operators can still sudo interactively.LinuxIntermediate15 minPro