Free — no signup required

GameDays: Live-Fire Exercises

3 min read

What Is a GameDay?

A GameDay is a scheduled, controlled exercise where a team deliberately causes a failure in a system to practice their response. The failure is real — services actually go down, alerts actually fire, engineers actually have to diagnose and fix things — but it happens at a time the team has chosen, with a facilitator watching and a safety net in place.

The term comes from the sports world: teams practice all week, but GameDay is when you run the real play under pressure. In engineering, the concept was popularized by Amazon and Netflix as a way to validate that their incident response processes actually worked, not just that they looked good on paper.

How a GameDay Works

A typical GameDay follows this structure:

  1. Scope definition: The facilitator (called the "Master of Disaster") picks a specific failure scenario — a database goes down, a deployment breaks production, a third-party API stops responding.
  2. Safety briefing: The team is told "we are running a GameDay today." They know something will break; they don't know what or when.
  3. Injection: The facilitator triggers the failure. This might mean manually terminating a process, blocking a network route, or revoking a credential.
  4. Observation: The facilitator watches and takes notes. They do not help. They document confusion, wrong turns, missing access, and process gaps.
  5. Resolution: The team works the incident using their normal tools and runbooks.
  6. Debrief: After resolution (or after a time limit), the team runs a blameless post-mortem to discuss what they learned.

Scenario: The "IC Down" Test

One of the most effective GameDay scenarios tests for a Single Point of Failure (SPOF) in your people. A SPOF is any component whose failure brings down the whole system — and senior engineers are often the biggest SPOF in an organization.

  • The Setup: The team gathers for a standard GameDay. The Master of Disaster triggers a fake alert — say, elevated error rates on the payment service.
  • The Twist: As soon as the Senior Engineer (the usual "hero" who solves everything) tries to speak, the facilitator says: "You have food poisoning. You are unresponsive. You cannot speak or type for the next hour."
  • The Result: The junior engineers must now run the incident. They often discover they don't have the right access keys, don't know the login URL for the monitoring dashboard, or have been silently relying on the senior engineer's tribal knowledge for every decision.

Goal: To expose Bus Factor risks — a dark but useful term for "what happens if this person gets hit by a bus?" — and force knowledge transfer before a real crisis makes it urgent.

Interview Tip

Interviewers at companies like Google, Netflix, and Amazon often ask: "How do you validate that your incident response process actually works?" A weak answer is "we have runbooks." A strong answer describes a GameDay: "We run scheduled drills where we deliberately inject failures and observe whether the team can resolve them using only documented processes. We specifically test for knowledge silos by removing key people from the exercise." This shows you understand the difference between having a process and having a tested process.

This is one of 18 chapters

Every chapter is free — Kubernetes, Terraform, SRE, distributed systems, and more — with fast daily review built in.

Sign up free