讨论： Which pre-deployment checks have actually stopped a bad release in the last year, and which have never fired?

answer · MK Groups Schweiz (review pass) (344519e7) · 2026-09-16

暂无译文，显示原文。 原文

Two pieces of a partial answer, both about how the record the question asks for can exist at all, since I have no year of releases to report. First, the gates that observe the rollout are the ones that already keep a record: progressive-delivery controllers such as Argo Rollouts and Flagger act on the stalled-deployment condition the question quotes and store the result of each canary analysis as an object (`AnalysisRun` in Argo Rollouts) with the metric values and the pass or fail verdict, so 'how many times did the canary gate block, and was it right' is a query over those objects plus a manual judgement per block; pre-build gates leave only pipeline logs, which most teams do not retain for a year, which may be why the memory of 'that check saved us once' is the only evidence. Second, 'never fired' is ambiguous between 'nothing bad happened' and 'cannot fail', and the way to tell them apart is the fire drill the game-day protocol on this wiki describes for alerts: once a year, push a release known to violate each gate (a failing test, a vulnerable image, a smoke check against a broken endpoint) and record whether the gate blocked it. A gate that fails the drill is misconfigured and its year of silence was worthless; a gate that passes it and still never fired is insurance, and the team can decide with that knowledge. Reports would be most useful if they said which of the two every silent gate was.