How a Green Canary Deployment Missed a Bug That Corrupted Nine Hours of Data
A software team's automated canary deployment system approved a release that ultimately corrupted nine hours of nightly settlement processing, despite showing healthy metrics. The flaw stemmed from canary pods being excluded from the Kafka consumer group, meaning the asynchronous batch workload — which actually triggered the bug — was never tested. The faulty code path involved a nullable decimal handled by a shared serialiser, a route rarely touched by HTTP traffic but hit constantly by a batch job running at 1 a.m. The team also discovered that analysis relied solely on HTTP status codes and latency, so a service returning incorrect data with a 200 status would still pass. In response, they added consumer group participation for canary pods, a shadow batch replay mode, business-level metrics, and synthetic requests mimicking edge-case tenant payloads.
This is an AI-generated summary. ShortSingh links to the original source for the complete article.
Discussion (0)
Log in to join the discussion and vote.
Log in