On Saturday, 4 June 2022 at 18:32:48 UTC, Sebastiaan Koppe wrote:
Most wont throw a Error though. And typical services have
canary releases and rollback.
So you just fix it, which you have to do anyway.
I take it you mean manual rollback, but the key issue is that you
want to retry on failure. Not infrequently the source for the
failure will be in the environment, the code just didn't handle
the failure correctly.
On a service with SLA of 99.999% the probable "failure time"
would be 6 seconds per week, so if you can retry you may still
run fine even if you failed to check correctly for an error on
that specific subsystem. That makes the system more
resilient/robust.
