For AI agents: the docs index is at https://docs.pushops.com/llms.txt. Append .md to any documentation page URL to get its markdown version.

Jump to Content

v1.0

Guides

Jump to Content

Getting Started

What is PushOps
Key Concepts
SVIEW — Overview
Environments
Components and Deployments
Connect a New GitLab Repository or Group
What You Can Do vs. What We Manage
The Boundary in Detail
Why Changes Made in the Cloud Console or with kubectl Are Reverted
Frequently Asked Questions

Access and Identity

Set Up Your PushOps Access
Access Requests
Add or Remove a Team Member
Set Up Teleport Sign-In With an Authenticator App or Security Key
Service Access Control
User Profile
Renew an Expiring SSO Client Secret
GitLab Access for CTO2B
AWS S3 and IAM Access
Temporary AWS Console Access Through Teleport
GCP IAM and GCS Access
GCP Workload Identity — Request Scoping Tip
Cannot Sign In to SVIEW or Teleport
Teleport Shows No Resources After Access Is Approved
Teleport Login Fails With a PEM Private Key Error

Applications and Configuration

Application Dependencies
Dependency Configuration Examples
Inject Database Credentials
Attach a Cloud IAM Role
Variables and Shared Config
Shared ConfigMaps (K8s Config)
Trust a Private Certificate Authority in Your Application
Secrets Manager
Inject Secrets from Parameter Store
Inject Secrets from 1Password
Secret Not Found or Not Reaching Your Application
Container Registry Repositories and CI Push Access
Deploy Without Downtime or Killing Running Work
Restart an Application or a Single Pod
Configuration Versions and Rollback
Deployment Stuck and Never Reaches Synced or Deployed
Workflows
Suspending Non-Production Environments and Databases
Decommission an Application, Database or Environment

Kubernetes

Namespace Access
Workload Resources and Health Checks
CronJobs
Cluster Autoscaling
Event-Driven Autoscaling with KEDA
Prepare for a Planned Traffic Peak
Shared Storage (EFS)
IAM Service Accounts
Traffic Encryption (mTLS)
Pod Keeps Restarting (CrashLoopBackOff)
Pod Killed with OOMKilled
Pod Stuck in Pending (FailedScheduling)
Pod Restarted During Node Maintenance

Data Services

Data Services
Connect to a Database
Database User Privileges
Attach a Database to Your Application
Database Refuses Connections With "Too Many Connections" or "Too Many Clients"
Add a Read Replica to a Database
Redis Replicas and High Availability
Database Backups and Point-in-Time Recovery
RDS Restore from Snapshot
RDS MySQL Version Upgrade
PostgreSQL Login Fails with PAM Authentication Failure
Kafka Access, ACLs and Topics
Kafka Users, Topic Names and ACL Roles
Connect to Kafka From Your Computer
Debezium CDC Connector (GCP Cloud SQL PostgreSQL)
Debezium Output Topics and Event Format
Debezium CDC Troubleshooting
BigQuery Connector

Networking and Ingress

Ingress, Custom Domains and TLS
Use Your Own TLS Certificate
Requesting DNS Record Changes
Transferring a Domain to Cloudflare Registrar
Promoting a Service's Ingress to a New Environment
Ingress Redirects, Rewrites, Headers and Request Limits
IP Allowlisting for Applications and Databases
Requests Blocked by a Web Application Firewall
Egress IP Addresses for Third-Party Allowlisting
Sticky Sessions and WebSockets
Ingress Troubleshooting
Application Cannot Resolve a Hostname (no such host, Temporary Failure in Name Resolution)
Network Policies
Client VPN
Site-to-Site VPN and On-Premises Connectivity

Observability and Monitoring

Observability
Find Your Application Logs
Send Your Application Metrics to Prometheus and Grafana
External Uptime Monitoring
Get Alerted When a Scheduled Job Fails
Environment Heartbeats
Grafana — Querying Google Managed Prometheus

Security and Compliance

CTO2B Access to Your Production Environment
Audit Logs
Commitment to Security & Operational Resilience
Disaster Recovery Plan and DR Testing
Security Monitoring and Threat Detection
Vulnerability Management
SOC 2 Compliance on the PushOps Platform
Digital Operational Resilience Act (DORA)

Support

Getting Help
SLA Policy
How to Raise a Sev-1 Incident
Troubleshooting Common Issues
Lambda Deployment Fails — IAM Role Name Already Exists

Release Notes

Release Notes
September 2026
August 2026
July 2026
June 2026
May 2026
July 2025
June 2025
May 2025
April 2025

Powered by

Security and Compliance

Vulnerability Management

How CTO2B identifies, prioritises and remediates vulnerabilities in the platform and infrastructure it manages, and which parts remain yours.