Eve Troubleshooting

Quick Triage Checklist

eve system health
eve auth status
eve job list --phase active

Common Issues and Fixes

Auth Fails or "Not authenticated"

eve auth logout
eve auth login
eve auth status

Secret Missing / Interpolation Error

eve secrets list --project proj_xxx
eve secrets set MISSING_KEY "value" --project proj_xxx

.eve/secrets.yaml

Deploy Job Failed

eve job follow <job-id>
eve job diagnose <job-id>
eve job result <job-id>

GHCR Push Fails with UNAUTHORIZED

UNAUTHORIZED: authentication required

1. Verify secrets are set:

   eve secrets list --project proj_xxx

2. Confirm token scopes include

   read:packages

   +

   write:packages

3. Check if the package is linked to the repo in GitHub Packages settings
4. Add OCI source label to Dockerfile:

   LABEL org.opencontainers.image.source="https://github.com/ORG/REPO"

Build Failures

Symptoms

• Pipeline fails at build step

• eve build diagnose

  shows run status =

  failed

Triage

eve build list --project <id>          # Find recent builds
eve build diagnose <build_id>          # Full state dump
eve build logs <build_id>              # Raw build output

Common Causes

• Verify GHCR_USERNAME and GHCR_TOKEN (or GITHUB_TOKEN) secrets are set
• Token needs

  write:packages

  scope for GHCR pushes
• Check:

  eve secrets list --project <id>

• Service must have

  build.context

  in manifest pointing to directory with Dockerfile
• Dockerfile path defaults to

  <context>/Dockerfile

• Multi-stage builds work with BuildKit; may fail with Kaniko

• Build requires workspace at the correct git SHA
• Check

  eve build diagnose

  for workspace preparation errors

• OCI labels help link packages to repos: add

  LABEL org.opencontainers.image.source="https://github.com/OWNER/REPO"

  to Dockerfile
• Ensure registry host matches manifest

  registry.host

Job Stuck or Blocked

eve job show <job-id>
eve job dep list <job-id>

eve job update

App Not Reachable After Deploy

• Confirm deploy job succeeded (

  eve job result

  ).
• Validate ingress host pattern:

  {service}.{orgSlug}-{projectSlug}-{env}.{domain}

  .
• Ensure service port matches

  x-eve.ingress.port

  .

Escalation

• eve system health

• eve job diagnose <job-id>

• manifest diff (recent changes)