Practical game day scenarios for CI/CD: broken rollbacks, permission issues, and slow feedback loops—and how we fixed them.

On this page

What We Learned Running Weekly Game Days on Our CI/CD Pipeline

Most teams say they have a CI/CD pipeline; fewer can explain what happens when a deploy half-fails on a Friday night.

Game Day Scenario: Rollback That Never Rolls Back #

We simulated a bad deploy by merging a PR that intentionally broke a health check.

Observed:

The canary failed, alerts fired, but the pipeline stopped for manual intervention.
On-call engineers had different mental models of how rollback should work.

Fixes:

We made rollback a first-class job in the pipeline:

```yaml jobs: deploy_prod: steps: - run: ./scripts/deploy.sh rollback_prod: if: failure() steps: - run: ./scripts/rollback.sh ```

We documented one canonical rollback path per service.

Game Day Scenario: Missing Permissions #

In another exercise, we revoked a service account permission in staging.

The deploy failed halfway through, leaving stale pods.
Logs showed a generic “Forbidden” error; the pipeline reported only “step failed”.

Changes:

We added structured logging around each infra call.
We taught the pipeline to surface the exact failing command and principal.

Takeaways #

Run game days regularly; don’t wait for production to teach you.
Practice rollback as much as you practice deploy.
Make pipeline failures boring and obvious, not puzzles.

What We Learned Running Weekly Game Days on Our CI/CD Pipeline

What We Learned Running Weekly Game Days on Our CI/CD Pipeline

Game Day Scenario: Rollback That Never Rolls Back #

Game Day Scenario: Missing Permissions #

Takeaways #

Stay Updated

Real-World RAG Incidents: Lessons from a Production Rollout

A Pragmatic Multi-Region Strategy for Small Teams

More from DevOps

Secure Coding Best Practices Every Developer Needs

Software Supply Chain Attacks: How They Work & Defenses

AIOps Explained: AI for IT Operations in 2026

Secure Coding Best Practices Every Developer Needs

Software Supply Chain Attacks: How They Work & Defenses

AIOps Explained: AI for IT Operations in 2026

Terraform Error Troubleshooting — The Complete Guide

Service Mesh Explained — Do You Need One in 2026?

How to Secure Your CI/CD Pipeline (DevSecOps)

You might have missed

Real-World RAG Incidents: Lessons from a Production Rollout

A Pragmatic Multi-Region Strategy for Small Teams

Systemd Tricks We Use to Keep Services Boring

About Kiril Urbonas

What We Learned Running Weekly Game Days on Our CI/CD Pipeline

Game Day Scenario: Rollback That Never Rolls Back#

Game Day Scenario: Missing Permissions#

Takeaways#

Stay Updated

Real-World RAG Incidents: Lessons from a Production Rollout

A Pragmatic Multi-Region Strategy for Small Teams

More from DevOps

Secure Coding Best Practices Every Developer Needs

Software Supply Chain Attacks: How They Work & Defenses

AIOps Explained: AI for IT Operations in 2026

You might have missed

Real-World RAG Incidents: Lessons from a Production Rollout

A Pragmatic Multi-Region Strategy for Small Teams

Systemd Tricks We Use to Keep Services Boring

About Kiril Urbonas

Game Day Scenario: Rollback That Never Rolls Back #

Game Day Scenario: Missing Permissions #

Takeaways #