Imported from Shannuu2409/agentops-kit (
skills/extras/troubleshooting/SKILL.md). Install upstream withnpx skills add Shannuu2409/agentops-kit --skill troubleshooting. Copyright stays with the author.
Troubleshooting
1. Overview
What it is: A systematic approach to restoring service: observe → localize → hypothesize → fix → verify → prevent.
Why it exists: Tools differ; method stays the same. Runbooks cut MTTR.
When to use: Any incident or persistent failure.
When NOT to: Changing random configs without evidence — that creates new incidents.
2. Concepts
- Symptom vs cause — 502 is symptom; upstream timeout is cause
- Blast radius — one pod vs whole region
- Recent change — deploy, cert renew, DNS, IAM
- Golden signals — latency, traffic, errors, saturation
- Bisect — last known good
- Preserve evidence — logs/timestamps before restart panic
3. Architecture (incident flow)
graph TB
Alert --> Triage[Triage impact]
Triage --> Mitigate[Mitigate / Rollback]
Mitigate --> Diagnose
Diagnose --> Fix
Fix --> Verify
Verify --> Postmortem
4. Production Best Practices
- Declare IC; communicate early
- Mitigate first (rollback/flag) if SLO burning
- One change at a time while diagnosing
- Write timeline; capture commands/output
- Link alerts to these runbooks
5. Common Mistakes
| Mistake | Fix |
|---|---|
| Restart loops without logs | logs --previous first |
| Blame app while DNS broken | Check resolution early |
| Fixing prod without rollback path | Always know undo |
| No postmortem | Recurrence guaranteed |
6. Debugging Guide — Master Checklist
- What is user impact? Since when?
- What changed? (deploy, config, cert, traffic)
- Is it DNS / TLS / network / auth / app / data?
- One request: capture
curl -v, trace_id, pod name - Mitigate → root cause → permanent fix
7. Security
- Don't paste secrets into tickets/chat
- Prefer break-glass audited access
- Assume breach if unexplained admin activity
8. Performance
- Distinguish brownout (slow) vs hard down
- Saturation often looks like "random 5xx"
9. Real Production Example
SEV1 checkout errors: canary at 25% showed 5xx; auto-abort restored stable in 3m; root cause bad config key; postmortem added config schema validation in CI.
10. Interview Questions
Beginner: First steps when site is down?
Intermediate: Debug CrashLoopBackOff end-to-end.
Senior: Design incident management for multi-team platforms.
11. Checklist
- Impact & IC declared
- Mitigation applied if needed
- Evidence preserved
- Root cause documented
- Follow-ups ticketed
12. Cheat Sheet — Runbook Index
| Failure | Section / file |
|---|---|
| Docker | runbooks-docker.md |
| K8s CrashLoop / OOM / ImagePull | runbooks-kubernetes.md |
| GitHub Actions | runbooks-github-actions.md |
| DNS / SSL | runbooks-dns-ssl.md |
| Nginx / Kong / 5xx | runbooks-proxy-5xx.md |
| Database / performance | runbooks-db-perf.md |
Related Skills
Author & maintainer: Shanmukha Kumar Karra
Created and maintained as part of AgentOps Kit.