[CRITICAL] Configuration Drift: Backend container image replaced with generic hello-world image

[yortch]

Configuration Drift Detected

Detected at: 2026-03-16T22:01 UTC
Severity: Critical
Resource: ca-banking-demo-backend in rg-banking-demo
Subscription: 529eddcc-17c4-4834-842d-73670845229b

---

Drift Summary

The backend container app image has been replaced with a generic Azure Container Apps hello-world image. This means the Three Rivers Bank backend API is no longer operational — all card catalog, BIAN API, and H2 database endpoints are unavailable.

Property	Expected	Actual	Status
Container Image	crbankingdemooqaqx.azurecr.io/three-rivers-bank/backend-banking-demo:azd-deploy-*	mcr.microsoft.com/azuredocs/containerapps-helloworld:latest	❌ DRIFT
Revision Name	ca-banking-demo-backend--azd-1773691968	ca-banking-demo-backend--0000004	❌ Changed
BIAN_API_BASE_URL	https://virtserver.swaggerhub.com/B154/BIAN/CreditCard/13.0.0	Same	✅ OK
SPRING_PROFILES_ACTIVE	production	production	✅ OK
SPRING_H2_CONSOLE_ENABLED	false	false	✅ OK
Backend CPU	0.5	0.5	✅ OK
Backend Memory	1Gi	1Gi	✅ OK
Frontend (all checks)	—	—	✅ OK

Impact

• Backend REST API is serving the default hello-world page instead of the Three Rivers Bank credit card API
• Frontend application will fail to load card data (API calls to /api/cards will fail)
• Complete service outage for end users

Recommended Fix

Redeploy the correct backend image using Azure Developer CLI:

# Option 1: Redeploy via azd
azd deploy backend

# Option 2: Update container image directly
az containerapp update \
  -n ca-banking-demo-backend \
  -g rg-banking-demo \
  --subscription 529eddcc-17c4-4834-842d-73670845229b \
  --image crbankingdemooqaqx.azurecr.io/three-rivers-bank/backend-banking-demo:azd-deploy-1773691839

Root Cause Investigation

Investigate what caused the image replacement:

• Check Azure Activity Logs for recent containerapp update or containerapp revision copy operations
• Review CI/CD pipeline runs for unexpected deployments
• Verify ACR image availability: az acr repository show-tags -n crbankingdemooqaqx --repository three-rivers-bank/backend-banking-demo

---

Detected by automated Configuration Drift scheduled task (Task ID: e4ffe597-f021-4d0a-8bdb-adfa31cd0380)

This issue was created by three-rivers-bank-sre--35969ff3
Tracked by the SRE agent here