True Causes
ZH
← 大厅
7/7 · 行动 · 正在查看提出阶段
30 人 · 30 个想法
点击任意已完成的阶段进行查看
✓
提出
✓
澄清
✓
归类
✓
选择
✓
结构
✓
地图
7
行动
演示 · 不计入
障碍 · 持有链接的任何人 · 公开列出 · 已开启联盟
主持人:它的主持人(已封存)
30 人 · 30 个想法 · 2 个小组
通行证 → · 逻辑 → · 记录
↗ 分享这张地图
在其他网站上,作为实时地图:
作为图片: https://truecauses.org/d/6708d57/map.svg
作为数据: 本房间每一个已判断的卡片对(CSV). 每个主张都有自己的地址 /c/6708d57/<card>,列在地图下方。
发布时请注明出处: Causal map: True Causes, https://truecauses.org/d/6708d57
问题

Why does the same outage keep recurring?

已关闭 · 返回行动阶段
正以访客身份查看。输入用户名即可加入并参与。
关闭 ✕
The service map in the wiki is two years old
类别 6
还没有人发言。
Tests that fail intermittently are retried until green
Customers report outages before monitoring does
I mean the pattern over the last two quarters, not a single incident.
类别 5讨论
The on-call rota has the same two people on it most weeks
Leadership asks for a root cause within the hour, so the first plausible one wins
I mean the pattern over the last two quarters, not a single incident.
Reliability has no budget line of its own
To be precise: this is about the process, not the person on call that night.
类别 4讨论
Every team has its own logging format
类别 4讨论
Success is measured in features shipped per quarter
Dependencies are upgraded only when something breaks
Meaning the repeat outages, not the one-off hardware failure in March.
The service map in the wiki is two years old
Deploys go out on Friday afternoons because that is when the sprint ends
Post-mortem actions are written up and then never scheduled
类别 2讨论
Rollbacks take longer than the outage they are meant to end
To be precise: this is about the process, not the person on call that night.
Runbooks are out of date within a month of being written
To be precise: this is about the process, not the person on call that night.
Migrations are run by hand from a laptop
类别 3讨论
Post-mortems assign actions to people who were not in the room
Scope: the services this team runs, not the whole platform.
Feature work always outranks reliability work in planning
Scope: the services this team runs, not the whole platform.
There is no time set aside after an incident, so the write-up is done at midnight
Feature flags are never cleaned up, so nobody knows which paths are live
Meaning the repeat outages, not the one-off hardware failure in March.
类别 2讨论
Config lives in five places and drifts between them
I mean the pattern over the last two quarters, not a single incident.
类别 3讨论
Incidents are declared late because declaring one feels like blame
Load tests were last run before the customer base doubled
The same three services cause most of the pages
类别 1讨论
One engineer knows how the payment path actually works
Scope: the services this team runs, not the whole platform.
Error budgets exist on a slide and nowhere else
The staging environment does not resemble production
The incident channel fills with people asking for status instead of giving it
Nobody owns the shared database schema
To be precise: this is about the process, not the person on call that night.
Retries are unbounded, so a slow dependency becomes a flood
Alerts fire so often that on-call mutes them
I mean the pattern over the last two quarters, not a single incident.
类别 5讨论
Capacity is added after the outage, never before