69 questions · Gitops Terminology topic · All types, answers revealed
When setting up Argo CD, which TWO components are essential to define a GitOps workflow?
AppProject is used to logically group applications and enforce security boundaries.
Why this answer
An Application object defines the source and destination, and a Project organizes them.
Which THREE of the following are potential risks of ignoring drift in a GitOps environment?
If drift is not fixed, the Git repo stops representing reality.
Why this answer
Ignoring drift leads to configuration loss, security gaps, and deployment failures.
What does the term 'Self-Healing' mean in a GitOps context?
This is the core functionality of a GitOps operator.
Why this answer
Self-healing refers to the operator's ability to revert manual changes back to the state defined in Git.
What is the primary benefit of a 'pull' deployment model compared to a 'push' model in GitOps?
The operator initiates outbound connections, making the cluster more secure.
Why this answer
Pull-based models eliminate the need to open inbound firewall ports or expose credentials to external services.
What is the role of a 'Webhook' in a GitOps setup?
Webhooks reduce latency by pushing notification of commits.
Why this answer
Webhooks allow the Git provider to notify the GitOps operator immediately when a change occurs, rather than waiting for the next polling interval.
What is the purpose of a 'Kustomization' resource in a GitOps workflow?
Kustomization is a tool for managing variations of Kubernetes configurations.
Why this answer
Kustomization allows for templating and patching Kubernetes manifests for different environments without changing the base code.
What is the purpose of a 'Sync Window' in Argo CD?
This allows teams to prevent deployments during peak hours or maintenance windows.
Why this answer
Sync windows restrict when automated syncs are allowed, preventing deployments during sensitive times.
What is an 'Image Updater' in the GitOps ecosystem?
This automates the image promotion process.
Why this answer
An Image Updater is a controller that automatically updates image tags in the Git repository when a new version is available in a registry.
A cluster is flagged as 'OutOfSync' in Argo CD. What does this status specifically indicate?
Argo CD compares the live cluster objects with the Git-defined objects; any difference triggers the OutOfSync status.
Why this answer
The OutOfSync status indicates that the live cluster state does not match the desired state defined in the Git repository.
What is the impact of having multiple GitOps operators in the same cluster?
Two controllers trying to manage the same resource is a conflict.
Why this answer
Multiple operators can lead to resource contention and conflicting state management, which is generally discouraged.
Which TWO of the following are true about 'Pull' vs 'Push' deployment models?
This is the main architectural benefit of pull-based GitOps.
Why this answer
Pull is initiated by the cluster; Push is initiated by the external CI system.
In an Argo CD 'Application' manifest, what does the 'destination' field specify?
Destination provides the target context for the sync operation.
Why this answer
The destination defines the cluster URL and namespace where the resources should be deployed.
You are auditing your GitOps deployment strategy. Which TWO of the following statements correctly describe the 'Source of Truth' in a GitOps architecture?
This synchronization is the core goal of the GitOps model.
Why this answer
The Git repository is the canonical state, and the cluster is a reflection of that state.
Which TWO of the following are valid ways to configure an Argo CD 'Application'?
Argo CD Applications are Kubernetes objects.
Why this answer
Applications can be configured using Kubernetes manifests (YAML) or the CLI.
A company transitions from a push-based CI/CD pipeline (using Jenkins) to a pull-based GitOps model (using Flux). What is the primary security architectural change regarding cluster access?
Pull-based models allow the agent within the cluster to reconcile state, eliminating the need to expose cluster API credentials to external build systems.
Why this answer
In push models, the CI server requires cluster credentials. In pull models, the operator inside the cluster initiates the fetch, removing the need for external cluster-admin access.
When a manual change is made directly to a Kubernetes Service via 'kubectl edit', what behavior is expected from a properly configured GitOps operator set to 'Automatic Sync'?
This is the core definition of GitOps Self-Heal in tools like Argo CD and Flux.
Why this answer
If 'Self-Heal' is enabled in the GitOps operator, it will detect the drift caused by the manual 'kubectl edit' and overwrite the live change with the version defined in Git.
How do you handle 'Environment-specific' configurations in a GitOps repository?
Overlays allow for shared code with specific environment overrides.
Why this answer
Using tools like Kustomization or Helm allows for managing common base configurations with environment-specific overlays.
You are configuring an Argo CD application. After a developer manually modifies a Kubernetes Service via kubectl, the application status changes to 'OutOfSync'. Which GitOps principle is this monitoring process specifically identifying?
The process of identifying discrepancies between the desired state in Git and the actual cluster state is known as drift detection.
Why this answer
The reconciliation loop continuously compares the live state with the desired state defined in Git, flagging manual changes as drift.
Which GitOps tool is primarily associated with the 'pull' deployment model?
Flux is a well-known GitOps operator designed for pull-based workflows.
Why this answer
Flux and Argo CD are both popular examples of pull-based GitOps operators.
Which TWO of the following are standard ways to structure environment configurations?
This is a robust approach for strict separation.
Why this answer
Using directories or separate repos are the standard patterns.
In the context of GitOps, what is the primary role of the 'Source of Truth'?
Git acts as the record of what the infrastructure and application state should be.
Why this answer
The Source of Truth (typically a Git repository) holds the desired state of the entire system, ensuring that all cluster changes are versioned, audited, and reproducible.
An application is configured with 'Automated Sync'. What happens when a developer merges a change to the main branch?
The reconciliation loop detects the change and pushes the new configuration to the API server.
Why this answer
The controller detects the commit and immediately triggers a sync to update the cluster.
Which of the following is a potential downside of using a 'Pull' model?
An operator is a component that must be deployed, monitored, and updated.
Why this answer
Pull models require an agent to be installed in the cluster, which adds complexity to the management of that agent.
Which THREE of the following represent common symptoms of 'drift' in a GitOps-managed cluster?
Often caused by automated cluster tools that are not GitOps-aware.
Why this answer
Drift occurs when the runtime state deviates from the Git-stored state.
In a GitOps environment, what is the 'Reconciliation Loop' primarily responsible for?
The loop is a control mechanism that maintains consistency.
Why this answer
The loop calculates the difference between current and desired state and applies actions to minimize that difference.
Which TWO of the following are considered 'Anti-Patterns' in a GitOps workflow? (Choose two)
Secrets must be encrypted using tools like Sealed Secrets or Vault.
Why this answer
Making manual changes via kubectl and committing secrets in plain text are significant security and operational anti-patterns.
What is the primary function of a 'Namespace' in an Argo CD Application?
Namespaces allow for multi-tenancy and resource segregation.
Why this answer
The namespace defines the logical boundary within the cluster where the resources should be deployed.
What is the primary role of a 'GitOps controller'?
This is the primary function of the controller.
Why this answer
The controller (or operator) is the brain of the GitOps platform that manages the lifecycle of the infrastructure.
Which TWO of the following are benefits of using Git as the 'Source of Truth'?
Git commits provide a timestamped and signed history of changes.
Why this answer
Git provides history, auditability, and collaboration features.
Which THREE of the following are common components of a GitOps platform?
CI validates changes before they land in the GitOps repo.
Why this answer
A GitOps platform consists of a Git repo, an operator, and a target infrastructure.
Which TWO of the following are characteristics of a 'GitOps Operator'?
Operators are native to the cluster environment.
Why this answer
Operators run inside the cluster and act autonomously.
What happens if the Git repository is temporarily unavailable during a sync cycle?
Operators are designed to be resilient and will retry after failures.
Why this answer
The operator will fail to fetch, and the application will remain in its last known state, usually showing a sync error.
Which term best describes the process of ensuring the live cluster matches the desired state stored in Git?
Syncing is the act of aligning the actual state with the target state.
Why this answer
Syncing or Reconciliation is the process of applying the Git-defined state to the cluster.
Which THREE of the following are common tasks performed by a GitOps Operator? (Choose three)
The operator executes the necessary changes to match Git.
Why this answer
The operator watches Git for changes, reconciles the live state, and provides visibility into drift/sync status.
You are troubleshooting a Flux installation. The operator is failing to pull updates from a private GitHub repository. What component is most likely misconfigured?
The GitRepository object refers to a secret containing authentication credentials; if missing or incorrect, the operator cannot fetch the repo.
Why this answer
Flux uses Kubernetes Secrets to store the SSH keys or tokens required for authentication with Git providers.
What does the 'prune' setting in a GitOps controller do?
Pruning keeps the live state clean by removing orphaned objects.
Why this answer
Pruning ensures that resources not present in Git are removed from the cluster.
Which TWO of the following are common GitOps terminology used to describe the state of an application?
The state described in Git.
Why this answer
'Desired' vs 'Live' (or 'Current') are standard terms in GitOps.
What is the primary benefit of version controlling your cluster manifests?
Version control is the foundation for reliable change management.
Why this answer
Version control provides an audit trail, rollback capability, and consistency.
You are using Flux and need to ensure that specific resources are ignored by the reconciliation process. Which feature should you utilize?
These annotations instruct the Flux controller to skip specific resources during sync.
Why this answer
Flux allows using annotations to mark resources as 'ignore' or 'skip' to prevent the operator from modifying them.
What does 'Declarative Configuration' imply in GitOps?
GitOps relies on manifests to define the target state.
Why this answer
It means specifying the desired state in files rather than using imperative commands.
What does the status 'Healthy' mean in an Argo CD application?
Health is the assessment of the live, running workload.
Why this answer
A 'Healthy' status indicates that the application is running as intended in the cluster.
In a GitOps environment using Argo CD, what is the primary purpose of the reconciliation loop?
The operator continuously polls Git to ensure the live state matches the desired state.
Why this answer
The reconciliation loop constantly compares the desired state in Git to the actual state in the cluster to identify and address configuration drift.
Which TWO of the following are standard GitOps workflows for promoting changes?
Promoting by file/folder change is a common pattern.
Why this answer
Promotion usually happens by updating manifests in different directories or branches.
What happens when a resource's 'SyncPolicy' is set to 'Manual'?
Manual sync requires an explicit user action.
Why this answer
The operator will detect the drift, but it will not automatically apply the changes to the cluster until a user clicks 'Sync'.
Your team wants to implement GitOps. Which of the following is a critical prerequisite for 'Drift Detection' to be effective?
Comparison requires access to both the source (Git) and the target (Cluster).
Why this answer
For an operator to detect drift, it must be able to periodically compare the live state in the cluster against the specific declarative manifests stored in Git.
What is the primary function of an 'Operator' in the context of GitOps?
Operators continuously reconcile the live state with the desired state.
Why this answer
An operator is a Kubernetes controller that manages the lifecycle of applications by reconciling state.
What is the difference between a 'Sync' and a 'Refresh' in Argo CD?
Refresh pulls metadata; sync performs the state transition.
Why this answer
A refresh updates the application status from the Git repo, while a sync actually applies changes to the cluster.
How does an operator manage 'Secrets' in a GitOps repository?
Tools like SealedSecrets allow encrypted secrets to be stored in Git safely.
Why this answer
Since secrets shouldn't be in plaintext, GitOps tools use tools like SealedSecrets or external providers to inject them at runtime.
You are architecting a multi-cluster deployment. What is the benefit of using an 'Operator' based architecture over a standard CI/CD Push approach in this context?
By pulling from within, the cluster does not need to expose an API endpoint to an external CI tool's service account.
Why this answer
Operator-based GitOps keeps the cluster-specific credentials inside the cluster itself, rather than needing to store them in an external CI system.
Which TWO of the following are NOT recommended in a GitOps workflow?
Manual changes cause drift and bypass audit trails.
Why this answer
Manual changes and plain-text secrets are anti-patterns.
Which THREE of the following are valid ways to trigger a sync in a GitOps environment?
The operator detects the new commit and triggers the sync.
Why this answer
Syncing can be manual, automated via commit, or triggered by a webhook.
Which THREE of the following are core responsibilities of a GitOps operator?
Drift detection is the primary function of the reconciliation loop.
Why this answer
Operators are designed to observe, analyze, and act to reconcile differences.
In a GitOps environment, what is the role of a 'CI Pipeline'?
CI acts as the gatekeeper for the source of truth.
Why this answer
The CI pipeline prepares the deployment manifests, which are then picked up by the CD GitOps operator.
Which THREE of the following represent key concepts in 'GitOps'?
IaC is the core foundation for GitOps manifests.
Why this answer
GitOps is defined by declarative infrastructure, version control, and automated reconciliation.
What does the status 'OutOfSync' indicate in Argo CD?
This status signifies a discrepancy between desired and actual state.
Why this answer
It means the live state of the resources in the cluster does not match the desired state in the Git repository.
If you want to view the history of changes made to your cluster configuration, where should you look in a GitOps model?
The commit history is the canonical log of every change made to the system.
Why this answer
Because Git is the source of truth, the git log provides a complete history of all configuration changes.
Which THREE of the following are benefits of using a GitOps operator for CD?
The operator ensures the cluster is always in the target state.
Why this answer
Operators provide continuous, secure, and automated deployment.
Which TWO of the following are primary benefits of adopting a GitOps 'Pull' model compared to a 'Push' model? (Choose two)
Credentials stay internal, reducing the attack surface.
Why this answer
Pull models enhance security by removing the need for external access to the cluster and improve reliability through continuous, self-healing reconciliation.
When a GitOps tool reports a 'Sync Error', what is the most likely cause?
Malformed YAML prevents the API server from accepting the resource.
Why this answer
Sync errors often result from resource conflicts or permission issues when applying manifests.
In a GitOps workflow, how does an operator handle a situation where a user manually deletes a resource that is defined in Git?
The operator identifies that the live state is missing the resource and applies the Git manifest.
Why this answer
The reconciliation loop detects the absence of the resource and redeploys it to match the source of truth.
Which of the following is considered 'best practice' for GitOps repository structure?
Separating environment config allows for cleaner promotion flows.
Why this answer
Separating application code from infrastructure/environment configuration is a GitOps best practice.
You are comparing GitOps deployment models. Which scenario best describes a 'Pull' deployment model?
Flux pulls the configuration from Git and applies it locally, adhering to the Pull model.
Why this answer
In a Pull model, an agent inside the cluster (like Flux or Argo CD) periodically fetches the desired state from a repository, eliminating the need for external access to the cluster's API.
In GitOps, what should happen if a configuration file is deleted from the Git repository?
The operator ensures the cluster perfectly mirrors the repo.
Why this answer
The operator will reconcile the state by deleting the corresponding resource from the cluster.
What is the purpose of 'App-of-Apps' pattern in Argo CD?
This allows for hierarchical management of multiple services.
Why this answer
The App-of-Apps pattern allows managing multiple applications using a single parent application, simplifying deployment for complex architectures.
Why is 'Git' used as the source of truth rather than a standard database?
The Git workflow is specifically optimized for tracking changes over time.
Why this answer
Git provides built-in version control, audit trails, and collaborative workflows that databases lack.
Which THREE of the following are critical security considerations for a GitOps implementation?
Ensures the integrity and authenticity of configuration changes.
Why this answer
Access control, secure credential storage, and commit signing are essential for security.
When using an 'Image Updater' with a GitOps operator, what is the automated workflow?
This is the standard flow: watch registry -> update Git -> operator pulls change.
Why this answer
The updater monitors registries for new images and updates the Git repository automatically.
Which THREE of the following are best practices for managing GitOps secrets?
SealedSecrets allows keeping secrets in Git while preventing unauthorized access.
Why this answer
Secrets should be encrypted, managed outside Git, and rotated frequently.
An administrator notices that the 'sync' status of an Argo CD application is 'Synced' but the health status is 'Degraded'. What does this indicate?
Sync status refers to configuration parity, while health status refers to runtime execution success.
Why this answer
The desired state in Git has been successfully applied to the cluster, but the workloads (e.g., Pods) are failing to run correctly.
Ready to test yourself?
Try a timed practice session using only Gitops Terminology questions.