Integration troubleshooting
Fix common Git, registry, backup storage, Azure, and AWS integration failures: reconnect, scopes, keys, and where to read logs.
Start with the symptom below, then open Logs and debugging under Troubleshooting in the sidebar and copy build or deploy output before you contact support. The Troubleshooting overview under Troubleshooting in the sidebar links every major area.
For a shorter symptom list that also points here, see Integration issues under Troubleshooting in the sidebar.
Git: cannot see repositories
- Open Integrations and confirm the provider shows Connected.
- GitHub: open the GitHub Settings for the installed app and verify the repo appears in Repository access. Add it if you use Only select repositories.
- GitLab (connected OAuth): reconnect from Integrations and confirm the OAuth app includes
api,read_user, andread_repository. For self-hosted, verify Test connection succeeds and the redirect URI matches your dashboard URL. See GitLab integration under Integrations in the sidebar. - Token providers (GitLab manual PAT, Bitbucket, Gitea, Azure DevOps): generate a new token with read scopes and reconnect. See Git source integrations.
- Confirm you are in the right Organisation in dFlow. Integration visibility follows Tenant access model under Security and Team Management in the sidebar.
Git: clone or build fails with permission denied
- Re-run connect or re-authorize the GitHub App if the org recently enabled SSO or third-party restrictions.
- Confirm the branch exists and is spelled exactly as in the remote.
- For private submodules or monorepos, ensure the same credentials can reach every URL the build touches (provider dependent).
If you suspect a dFlow role blocked an action another user performed, compare Roles and permissions under Security and Team Management in the sidebar.
Git: push does not trigger a new deploy
- Check whether the Service uses manual deploy; push alone would not roll out.
- GitHub App: confirm webhooks on the installation are healthy in GitHub Settings (delivery logs).
- Confirm automatic deploy is supported for your provider and configuration (App services under Services in the sidebar).
Docker registry: pull denied or manifest unknown
- Open Integrations and edit the registry: re-enter the token, save, Redeploy the Docker Service.
- Compare image:tag to the registry UI; typo or wrong digest causes manifest unknown.
- For rate limits, authenticate with a user or token that has pull rights, then retry.
Guide: Docker registry integration.
Backup storage: test fails, unverified, or external backup errors
- Open Integrations → Backup Storage and edit the provider: confirm bucket, region, and endpoint (blank for AWS S3 only).
- Click Test connection with current keys; rotate keys in the cloud provider if the test fails.
- Use Verify (shield icon) on the card if status is not verified before you select the provider on a database Backups tab.
- If upload fails after a successful test, check bucket policy, object ownership, and that the database Service still has compute for SSH export. See Backups and restore under Databases in the sidebar.
Guide: Backup storage integration.
Azure: connection or provisioning errors
- Open Integrations → Azure and confirm the account shows Connected. If not, click Connect account and sign in with Microsoft again.
- Verify the signed-in identity still has access to the subscription and resource group you select in the worker form.
- If lists load but VM creation fails, check Azure quotas (cores per region), VM size availability in the region, and whether the image is offered there.
- For Advanced network security group mode, confirm your existing NSG allows inbound SSH (22), Tailscale (41641 UDP), monitoring (45876), HTTP (80), and HTTPS (443). Basic mode creates these rules for you.
- If the worker is created in Azure but never shows Connected in dFlow, wait a few minutes, then open Compute troubleshooting under Worker Nodes and Compute in the sidebar.
Guide: Azure integration and Add an Azure server under Worker Nodes and Compute in the sidebar.
AWS: connection or provisioning errors
- Verify Access key ID and Secret access key are current in IAM and in dFlow.
- Open AWS integration and confirm the IAM policy includes the API actions the UI needs.
- If EC2 starts but the server never registers, check Security groups, SSH, and Compute and worker node issues under Troubleshooting in the sidebar. Security groups under Security and Team Management in the sidebar explains network rules.
Mixed-up layers (Git vs SSH vs cloud)
| Problem | Wrong fix | Right layer |
|---|---|---|
| Build cannot clone | Adding SSH keys to the Worker Node only | Git integration or token |
| SSH fails during server setup | Rotating Git token | SSH keys under Security and Team Management in the sidebar and server access |
| API AccessDenied in AWS | Changing Docker registry or Backup Storage | IAM policy and Cloud provider accounts |
| Azure provision or list errors | Rotating Git token | Azure integration and Azure RBAC on the signed-in identity |
| External backup failed | Rotating Git token only | Backup Storage integration and database Backups tab destination |
Still stuck
- Gather build log, deploy log, and a screenshot of the Integration status.
- Read When to contact support under Troubleshooting in the sidebar.
- Security-specific auth questions: Security troubleshooting under Security and Team Management in the sidebar.
Related
Integration permissions and prerequisites
Checklist of provider scopes, IAM and Azure RBAC patterns, and Organisation roles before you connect Git, registries, backup storage, or cloud providers.
Security overview
How dFlow handles access, SSH to Worker Nodes, cloud firewall rules, and Organisation-scoped team RBAC.