Troubleshooting

Use this checklist when diagnosing incidents.

Connectivity Problems

• verify cluster services are reachable on ports 8080 (API) and 8443 (dashboard)
• confirm the reverse proxy forwards the original Host header
• inspect agent logs for TLS handshake failures or expired certificates

Access Denied

• ensure the caller has the correct role and project scope
• check whether the vault is restricted and needs dual approval
• review the audit log for automated policy rejections

Performance

• monitor database CPU and connection pools
• shard large projects into multiple vaults to reduce lock contention
• enable caching on read-heavy workloads via the SDKs