LA QUESTION
Why does the same outage keep recurring?
Les causes profondes, des plus profondes aux moins profondes. Les désaccords restent sur la carte.
fermé · retour à la phase Actions
Mode invité. Choisissez un pseudo pour rejoindre la salle et participer.
La carte
Les causes profondes sont à gauche, encadrées en vert. Touchez une affirmation pour voir sa chaîne.
un lien validé par la salle contesté : la salle n’a pas pu trancher
Chaque affirmation de cette carte, avec sa propre adresse (17)
Chaque page indique ce que la salle a validé autour de l’affirmation, avec les décomptes, et peut être citée, intégrée ou lue en JSON.
TROUVÉ PAR CETTE SALLE · 20
| Retries are unbounded, so a slow dependency becomes a flood | → | The same three services cause most of the pages |
| → | The staging environment does not resemble production | |
| The service map in the wiki is two years old | → | Feature flags are never cleaned up, so nobody knows which paths are li |
| → | The staging environment does not resemble production | |
| Feature work always outranks reliability work in planning | → | Post-mortem actions are written up and then never scheduled |
| One engineer knows how the payment path actually works | → | The on-call rota has the same two people on it most weeks |
| Post-mortems assign actions to people who were not in the room | → | Post-mortem actions are written up and then never scheduled |
| Tests that fail intermittently are retried until green | → | Customers report outages before monitoring does |
| The on-call rota has the same two people on it most weeks | → | Alerts fire so often that on-call mutes them |
| → | Post-mortem actions are written up and then never scheduled | |
| → | Customers report outages before monitoring does | |
| Feature flags are never cleaned up, so nobody knows which paths are li | → | Rollbacks take longer than the outage they are meant to end |
| → | The same three services cause most of the pages | |
| Alerts fire so often that on-call mutes them | → | Every team has its own logging format |
| → | Customers report outages before monitoring does | |
| Rollbacks take longer than the outage they are meant to end | → | Reliability has no budget line of its own |
| The same three services cause most of the pages | → | The staging environment does not resemble production |
| Reliability has no budget line of its own | → | The incident channel fills with people asking for status instead of gi |
| → | The staging environment does not resemble production | |
| Every team has its own logging format | → | Customers report outages before monitoring does |