AGIC (App Gateway Ingress Controller) fired a reconciliation during the deployment window, capturing all 16 services mid-transition and pushing all the stale IPs into the App Gateway backend pools. Once the old pods stopped, the App Gateway began health-probing stale IPs, resulting in 502 errors for all sites. The AGIC was restarted to clear the stale IPs.
This incident has been resolved.