Vendor682 problems· 14 reviewed

GitHub

682 incident problems in GitHub environments.

All problems (682)

K8S-1187PVC stays Pending after a chart cleanup removed the explicit storage classA StatefulSet worked before, but a chart refactor removed storageClassName and the cluster default no longer provisions compatible volumes.KubernetesAdvanced26 minProK8S-1189Admission webhook blocks all updatesA public webhook deployment pattern is applied, then cluster updates begin timing out because the control plane cannot reach the webhook service reliably.KubernetesAdvanced27 minProCICD-1182Self-hosted runner leaves root-owned workspace after Docker build stepOne privileged container step writes files as root into the shared workspace, breaking later jobs on the same self-hosted runner.CI/CDAdvanced27 minProCICD-059Artifact attestation exists but the deploy gate verifies the wrong repository subjectSupply-chain verification is enabled, yet trusted artifacts are rejected because the admission or deploy gate expects a different repository identity than the builder actually signs.CI/CDAdvanced28 minProCICD-1181GitHub Actions OIDC trust works on main but fails on pull_requestThe same AWS deploy workflow succeeds on main and fails on pull_request because the OIDC token subject no longer matches the IAM trust policy.CI/CDAdvanced28 minProCICD-1187Concurrency cancellation leaves a half-finished promotion state in the release pathCancel-in-progress helps reduce overlap, but one release run exits after mutating shared promotion state and before the next run can safely continue.CI/CDAdvanced29 minProK8S-1182Private registry pulls fail with x509 unknown authority after node image refreshOnly refreshed nodes fail to pull from the internal registry because the new node image no longer trusts the custom CA chain.KubernetesAdvanced29 minProCICD-1184Buildx push succeeds but downstream deploy still uses an older digestA multi-platform image publish looks healthy, but the promotion logic keeps pointing the environment at an older digest.CI/CDAdvanced30 minProCICD-1584A Jenkins controller rotates its URL and one webhook still posts to the old pathOne Jenkins webhook keeps hitting the old path after controller URL rotation.CI/CDIntermediate8 minProCICD-1604A Jenkins controller URL is fixed and one webhook still posts to the old hostOne Jenkins webhook still posts to the old host after URL cleanup.CI/CDIntermediate8 minProCICD-1566A Jenkins plugin update succeeds and one branch never turns greenOne repo never turns green after Jenkins plugin and protection updates.CI/CDIntermediate8 minProSECURITY-1576A JWKS cache is refreshed and one verifier still rejects new tokensOne verifier still rejects new tokens after JWKS refresh.SecurityIntermediate8 minProSECURITY-1586A JWKS refresh succeeds and one verifier still rejects new tokensOne verifier still rejects new tokens after JWKS refresh.SecurityIntermediate8 minProSECURITY-1596A JWKS refresh succeeds and one verifier still rejects new tokensOne verifier still rejects new tokens after JWKS refresh.SecurityIntermediate8 minProCICD-1589A release freeze is lifted and one stage still blocksOne deployment stage remains frozen after schedule consolidation.CI/CDIntermediate8 minProSECURITY-1566A JWKS key set rotates and one verifier still trusts the old keyOne verifier continues trusting a retired JWKS key after rotation.SecurityIntermediate9 minProCICD-1564An Argo CD sync hook runs and one app still reports stale healthOne Argo CD app stays unhealthy after a sync-hook secret rotation.CI/CDIntermediate9 minProCICD-1571A GitHub deploy is approved and one environment still blocksOne protected environment keeps using the wrong value after moving secrets to environments.CI/CDAdvanced10 minProCICD-1601A GitHub environment deploy still failsOne protected deploy still fails after a GitHub team rename.CI/CDAdvanced10 minProSECURITY-1556A JWKS rotation succeeds and one verifier still accepts the retired keyA verifier keeps accepting a retired JWKS key after rotation.SecurityIntermediate10 minPro