This is a retrospective incident: Healthchecks on user workloads were failing for the period between 7:10 and 7:40am UTC due to the implementation of an overrestrictive firewall rule. This caused new deployments on services with a healthcheck configured to fail due to a failed healthcheck. We reverted the rule, and healthchecks began operating normally.