Cases2 cases
1 to 2 of 2
IL-0464IONOS Managed Kubernetes control planes went unreachable for minutes at a time as their shared etcd grew and fragmentedIONOS Cloud2026- Symptoms
From 14 to 16 March 2026 a subset of customer control planes on IONOS Managed Kubernetes (MK8s) became unavailable again and again, each time for several minutes. While a cluster was unreachable, operations that depend on the Kubernetes API, such as deployments, scaling and health checks, did not work reliably.
- Root cause
- Component
- Contributing factor
- Remediation
- Defragmented the affected database instances, reclaiming about 3–4 GiB per instance
- Shortened the database compaction intervals on the affected instances
- Deployed a fix for the affected AI Model Hub database services
- Applied final changes to all affected clusters
- Action items
- Expand monitoring dashboards to show control plane health per database instance
- Move the highest-volume clusters to dedicated database backends
- Make incidents of this kind trigger immediate paging
- Roll the updated compaction interval out to all shared control plane database instances
- Run automated, scheduled defragmentation jobs on all instances
- Rebalance clusters across database instances to reduce concentration
- Contact customers whose clusters write disproportionate data, for example to store large security scan reports outside the control plane database
- Introduce per-tenant resource quotas and key-count limits on the shared control plane database
- Re-architect the shared control plane for stronger isolation, with dedicated database instances and better vertical scaling
- Evaluate full database sharding for customers with consistently high data volumes
- Hold regular drills on database resource exhaustion and recovery
IL-0465IONOS Container Registry image pushes and pulls failed with 504 Gateway TimeoutIONOS Cloud2026- Symptoms
On 4 March 2026 customers of the IONOS Container Registry got 504 Gateway Timeout errors when pushing or pulling container images, and deployments that relied on the registry were blocked. The status page first reported an increased error count on the registry at 09:23 UTC, saying customers might be unable to pull images.
- Trigger
A migration combined with a temporary capacity constraint placed two critical control plane components on the same proxy instance, despite anti-affinity rules; the shared proxy then reached its concurrent connection limit.
- Root cause
- Component
- Contributing factor
- Remediation
- Rolled back a component of the Kubernetes control plane to an earlier version
- Provisioned additional proxy capacity
- Moved the affected control plane components onto separate proxy instances
- Action items
- Redesign registry-to-API connectivity so each node uses its own local proxy
- Adjust alert thresholds to warn before proxy connection use approaches capacity
- Deploy more infrastructure clusters and redistribute registries so no cluster exceeds safe capacity, with automation that keeps balancing load
These 2 cases involve Managed Kubernetes control plane and provider API and etcd. kubegap audits a Kubernetes cluster for gaps like these, read-only, from Claude Code or Codex; its checks cite public reports like the ones in this library.
By root cause1
Capacity exhaustion2 cases
- Component
- Organisation