Skip to main content

Degraded mode

Degraded mode controls Stacklok client behavior when the Enterprise Manager is unreachable, such as during a network partition, maintenance window, or outage. It is a client fallback setting and has no enforcement field.

Modes​

ModeBehavior
warnAll operations proceed normally. A warning is shown to the user.
block_newNew MCP server installations are blocked. Servers already running continue to operate.

Configuration​

Add the degraded_mode block to your enterprise configuration.

For Helm deployments, set the values in values.yaml:

values.yaml
enterpriseConfig:
  degraded_mode:
    # One of: warn, block_new
    policy: 'block_new'
    # Optional: how long to wait before the policy takes effect after the
    # server becomes unreachable. Go duration string (e.g., "24h", "30m").
    grace_period: '24h'
    # Optional: message shown to users when degraded mode is active
    message: 'Enterprise Manager unreachable. Contact your administrator.'

For manual Kubernetes deployments, set the same fields in your enterprise-config.json ConfigMap:

enterprise-config.json
{
  "degraded_mode": {
    "policy": "block_new",
    "grace_period": "24h",
    "message": "Enterprise Manager unreachable. Contact your administrator."
  }
}

Grace period​

The grace_period field delays the policy taking effect after the server becomes unreachable. During the grace period, clients use warn mode. This allows brief network interruptions without blocking new server installations.

For example, with grace_period: "24h" and policy: "block_new", clients continue working normally for 24 hours after losing contact with the server. After 24 hours, new server installations are blocked.

Next steps​