Runbooks - PatchPulse

← Back to Documentation

Checking System Health

Monitor the health of all PatchPulse components:

Check pod status: kubectl get pods -n patchpulse
Check service health: curl http://backend:8000/health
View metrics: curl http://backend:8000/metrics

Viewing Recent Decisions

Access decisions via the dashboard or API:

Dashboard: Navigate to /dashboard
API: GET /api/v1/decisions?limit=50
Filter by risk: GET /api/v1/decisions?risk_min=70

Updating Policy Mode

Switch between advisory and enforce modes:

Set environment variable: POLICY_MODE=enforce
Restart backend: kubectl rollout restart deployment/patchpulse-backend
Verify: Check decision logs for "mode: enforce"

Troubleshooting Agent Issues

If the agent isn't sending cluster signals:

Check agent logs: kubectl logs -n patchpulse deployment/patchpulse-agent
Verify RBAC permissions
Check backend connectivity
Verify kubeconfig is mounted correctly

Configuring Git Integration

Set up repository monitoring:

Create GitHub/GitLab token with repo read access
Update secret: kubectl create secret generic git-secrets --from-literal=token=YOUR_TOKEN
Configure repositories in ConfigMap
Restart git-poller service

Backup and Recovery

Backup decision data and restore if needed:

Export decisions: Use dashboard export feature or API
Database backup: kubectl exec -it postgres-pod -- pg_dump patchpulse > backup.sql
Restore: kubectl exec -i postgres-pod -- psql patchpulse < backup.sql