---
title: Runbook — AUTH_JWKS_UNAVAILABLE (JWKS 엔드포인트 장애)
category: TRANSIENT_DEPENDENCY
error_codes: [AUTH_JWKS_UNAVAILABLE]
severity: P1
owner: oncall
last_updated: 2026-06-15
status: stub
---

# Runbook: AUTH_JWKS_UNAVAILABLE (`runbook://auth/jwks-unavailable`)

## Symptoms

- HTTP 503 with `error.code=AUTH_JWKS_UNAVAILABLE`
- All authentication failing; JWKS refresh attempts failing

## Diagnosis

- Check IdP JWKS endpoint health: `curl -sf https://<idp-host>/.well-known/jwks.json`
- Check network connectivity from app pods to IdP

## Action

- Enable cached JWKS fallback if available
- Coordinate with IdP team for restoration

## Escalation

- P1 page: IdP team immediately if JWKS endpoint unreachable > 2 minutes

---

> **Stub**: Phase D2 — author body after domain adoption. (feature-operational-runbook-contract D9)