Investigate · workspace
P1rca-readySLA at riskEvidence-backed timeline — every step is read-only, bounded and audited. Select a custom date to review previous history, logs, and graphs.
History window
Sep 18, 05:38 AM → Sep 19, 05:38 AM
Filters timeline, logs, graphs, and workload monitoring
Hostname, IP, application, and cluster identity for SRE / platform triage
2 resources
pay-auth-a3.payments.corp
applicationfs-prod-k8s-api
configStatus
rca-ready
Application
payments-auth
pay-auth-a3.payments.corp
Worker node
fs-prod-app-w3
IP 10.33.12.44
Cluster
fs-prod-k8s
ns payments
Tenant
Nordic Federated Bank
FS Core Banking Platform
RCA confidence
94%
FQDN / endpoint
auth.payments.nordic.internal
eu-north-1
Workload monitoring
Connect Stage-1 API to stream pod health, restart history, and kubelet events.
Severity P1 · 0 of 6 steps in window · expand for formation, load graph, and logs
No timeline steps in Sep 18, 05:38 AM → Sep 19, 05:38 AM. Widen the history window or choose Full day.
Confidence 94% · risk medium · remediation requires approval (console read-only)
Deployment payments-auth v4.21 introduced a hard dependency on AUTH_JWKS_URI. The companion ConfigMap auth-runtime was not updated in the same ArgoCD revision, so the container panics on boot and Kubernetes restarts it into CrashLoopBackOff.
Recommendation
Approve apr-clb-01 to patch ConfigMap auth-runtime with AUTH_JWKS_URI (from vault metadata path only), then trigger a controlled rollout restart via Workflow Studio / StackStorm. Verify ready=1/1 and no CrashLoop before closing ITSM.
Opened Sunday, August 9, 2026 at 8:12:00 AM · inc-clb-01