4 docs tagged with "root-cause-analysis"

The Ansible vault password was available to PR-controlled workflow code, creating a path for any contributor to exfiltrate the credential that unlocks every secret in TheBurrow.

A compound failure across three bugs left Pi-hole VRRP failover silently broken for weeks — no keepalived on mistborn, wrong VIP ownership, and Kea serving raw IPs instead of VIPs.

Step-CA failed to initialize after vault_edit.py wrote a Python dict string representation instead of valid JSON for the JWK encryptedKey field in ca.json, breaking CA initialization fleet-wide.

During the Ansible vault restructure into per-service files, changes were committed directly to main, bypassing all CI gates and violating the branch protection governance workflow.