Find the symptom, then follow the link. Component pages carry the detailed fixes.
| Symptom | Likely cause | Where to look |
|---|
504 Gateway Timeout on a public URL | Traefik cannot reach the cluster: NetBird tunnel or route | NetBird peer |
| Every LoadBalancer IP goes dark after a Cilium restart | Stale L2 announcement lease; the holder renews but stops answering ARP | just gateway-repair-l2 — Repairs |
A *.madhan.app host resolves but nothing answers | Service is LAN-only and you are off the LAN and off the VPN | Exposure |
| TLS certificate errors on a service | Wildcard cert, or Cilium’s copy of it in cilium-secrets | cert-manager |
| Argo CD UI loads but lists no applications | Stale aggregated APIService breaks API discovery; kubectl api-resources shows errors | Argo CD |
| Symptom | Likely cause | Where to look |
|---|
GPU pod stays Pending with no clear reason | Missing the dedicated=ai:NoSchedule toleration; worker4 is tainted | GPU |
| GPU pod runs but CUDA is invisible | Missing runtimeClassName: nvidia | GPU |
Multi-Attach error for volume | RWO volume still held by the old pod during a rollout | Harbor |
PVC stuck Pending, pod stuck ContainerCreating | Longhorn volume cannot attach | Longhorn |
| No Longhorn volume on a node attaches after a Talos upgrade | New open-iscsi rejects a record its predecessor wrote | just longhorn-repair-iscsi — Repairs |
| Longhorn or CSI still down after DiskPressure cleared | DaemonSet pods evicted under pressure stay Failed and are never replaced | Delete the Failed pods — Repairs |
| Pod cannot find its Kubernetes Secret | Nothing mounts the CSI volume, so the sync never fires | Secrets |
| ComfyUI returns 503 | It ships scaled to zero | just comfyui on — ComfyUI |
| Symptom | Likely cause | Where to look |
|---|
kubectl top says Metrics API not available | Metrics Server | Metrics Server |
| Metrics missing from Grafana | VMAgent is not scraping the target | VictoriaMetrics |
| Ollama cannot load a model | ComfyUI holds VRAM; the error surfaces on Ollama | GPU, just comfyui off |
| Grafana OIDC login loops or errors | root_url / redirect URI mismatch | Grafana |
| Falco UI never becomes ready | Redis wedged with MISCONF: TTL and volume size | Falco |
App stuck OutOfSync in Argo CD | Sync wave, hook failure, or SSA ownership conflict | Argo CD |
A manual kubectl change reverted itself | selfHeal: true — intended; change it in git | Argo CD |
| Symptom | Likely cause | Where to look |
|---|
| Node will not reboot after a Cilium problem | Unmount blocks on an NFS share-manager ClusterIP it can no longer reach | Power-cycle — Repairs |
| Talos upgrade hangs draining a node | Longhorn and single-instance CNPG PDBs allow zero disruptions | just talos-upgrade <ip> <schematic> false — Talos upgrade |
| Cluster health check fails between node upgrades | Stop and fix before continuing | just talos-health |
just talos-health # cluster-level health
kubectl get applications -n argocd # what Argo CD thinks is wrong
kubectl api-resources 2>&1 >/dev/null # any output means broken discovery
kubectl get events -A --sort-by=.lastTimestamp | tail -30
