Troubleshooting Common Issues

Find your symptom and the article that covers it, plus fixes for GitLab SSO login, revoked pipeline tokens, image pulls and a missing OIDC issuer.

Start here when something is not working. Find your symptom in the table and
follow the article that covers it. The few issues with no article of their own
are written out further down this page.

If none of this resolves the problem, raise a request — see Getting Help.

Find your symptom

SymptomWhere to go
Teleport shows "No Resources Found" after access was approvedTeleport Shows No Resources After Access Is Approved
Teleport on Windows fails with "expected PEM encoded private key"Teleport Login Fails With a PEM Private Key Error
A resource in SVIEW denies access even though your role should allow itAccess Requests
The available access durations are too shortAccess Requests
A pod is restarting repeatedly (CrashLoopBackOff)Pod Keeps Restarting (CrashLoopBackOff)
A pod was killed with OOMKilledPod Killed with OOMKilled
A pod stays Pending with FailedScheduling or 0/N nodes are availablePod Stuck in Pending (FailedScheduling)
A deployment never reaches Synced or Deployed, or a Workflow is stuck in NewDeployment Stuck and Never Reaches Synced or Deployed
A pod restarted with no change on your sidePod Restarted During Node Maintenance
You need to restart one application or pod yourselfRestart an Application or a Single Pod
Your URL returns 503, does not resolve, or shows a certificate warningIngress Troubleshooting
Your application logs no such host, Temporary failure in name resolution or a DNS i/o timeoutApplication Cannot Resolve a Hostname
A secret is not found or not reaching your applicationSecret Not Found or Not Reaching Your Application
You cannot find logs or metrics for a workloadObservability
Your database connection fails or is refusedAttach a Database to Your Application
Login to SVIEW or Teleport failsCannot Sign In to SVIEW or Teleport
A deployment fails with "Token revoked" or "Forbidden"See below
An image cannot be pulled (ErrImagePull, ImagePullBackOff)See below
An IAM role is not created because the OIDC issuer is missingSee below

Cannot log in to SVIEW with GitLab SSO

If your organisation uses GitLab as its SSO provider, access to SVIEW is granted
through GitLab group membership. If the expected group no longer exists — it may
have been deleted because it looked unused — or you are not a member of it,
login fails.

  1. Re-create the group in GitLab if it was removed.
  2. Add the affected users to the group.
  3. Retry logging in to SVIEW.

Deployment fails with "token revoked" or "forbidden"

ERROR Deployment failed : {"Error":"Token revoked: subj:static-pipelines","Message":"Forbidden"}

The token your CI/CD pipeline uses to publish to SVIEW was revoked, rotated, or
has expired.

  • Re-issue the token if it has expired, and update the secret your pipeline
    uses.
  • Confirm the token name you are using is still permitted. If it was renamed,
    update your pipeline configuration to match.

Image pull failures

ErrImagePull, ImagePullBackOff, or repository does not exist all mean the
image named in your Component's configuration cannot be found or cannot be
accessed.

  1. Check the image name and tag are spelled correctly.
  2. Use a specific tag such as :v1.0.0 rather than :latest.
  3. Try pulling the image from your own machine. If that fails too, the image is
    not in the registry or your credentials do not allow pulling it.
  4. Correct the image path or tag in the Component's configuration and save.

If a pod that was running fine fails only after it moves to a new node, the image may have been removed by a retention policy; see Container Registry Repositories and CI Push Access.

IAM role not created — missing OIDC issuer

On AWS, this happens when terraform.outputs.platform.oidc_issuer_url is not
set in the Environment's Global variables.

  1. Copy the full OIDC issuer URL from your EKS cluster's configuration in the
    AWS console.
  2. In SVIEW, open Applications → Global variables, select the affected stage and
    Environment, and set terraform.outputs.platform.oidc_issuer_url to that
    value.
  3. Save, then retry the operation that needed the IAM role.

Checking deployment logs

For most issues, the logs are the fastest first step.

  1. In the SVIEW sidebar, go to Applications → Deployments.
  2. Find the deployment and click View Logs.

Logs are available for cluster resources managed through SVIEW. See
Observability for the full picture of logs and metrics.

Still having issues?

Raise a request with the Environment, the Component name, and the exact error
message. See Getting Help.


Did this page help you?