>DevOps Interview KB

Platform Engineer Interview Questions

33 questions across 3 categories

Internal developer platforms, golden paths, and the self-service tooling that platform teams are actually measured on.

How do Argo CD's resource hooks compare to Helm's pre-install/pre-upgrade hooks, given Argo CD can also deploy Helm charts directly?

AdvancedArgo CDHelm7 min

How would you distinguish 'the migration itself is broken' from 'this was a transient failure worth retrying,' in terms of alerting design?

AdvancedArgo CD7 min

How would you clean up old, hash-named Argo CD migration Jobs so they don't accumulate indefinitely in the cluster?

IntermediateArgo CDKubernetes6 min

What would go wrong if you used content-hash naming for an Argo CD Job that's meant to run on every sync instead?

IntermediateArgo CDKubernetes6 min

How do you control the order Argo CD applies resources within a single Application, e.g. making sure a database migration Job completes before the Deployment that depends on it rolls out?

AdvancedArgo CDKubernetes8 min

What would break if a Helm chart's hooks specifically relied on helm rollback semantics, and how would that manifest when deployed via Argo CD instead?

AdvancedArgo CDHelm7 min

How would you handle a migration that needs to run exactly once across an entire fleet of clusters, not just once per cluster?

ExpertArgo CDKubernetes8 min

How would you handle an Argo CD migration Job that should run on every sync versus one that should only run when the migration itself actually changed?

AdvancedArgo CDKubernetes7 min

Why might Argo CD's sync-wave model be considered more expressive than Helm's own hook-weight system for controlling ordering?

AdvancedArgo CDHelm6 min

If an Argo CD PreSync hook Job fails, does Argo CD retry it automatically? How would you make that retry behavior explicit instead of relying on defaults?

IntermediateArgo CDKubernetes6 min

What happens to a PreSync hook Job that succeeded on a previous sync, if the overall sync is retried after a later hook fails?

AdvancedArgo CDKubernetes6 min

How does Argo CD's syncPolicy.retry backoff configuration work, and how would you tune it for a slow-starting dependency?

IntermediateArgo CD6 min

How would you verify a Helm chart's hooks behave correctly under Argo CD before migrating a production chart from helm install to GitOps?

AdvancedArgo CDHelm7 min

How does Argo CD's ignoreDifferences configuration interact with its automated self-healing (selfHeal) feature?

AdvancedArgo CDKubernetes6 min

A mutating webhook injects configuration into your resources. When should that injected config actually be tracked in Git instead of ignored via ignoreDifferences?

AdvancedArgo CDKubernetes7 min

An Argo CD application shows OutOfSync even though the pods running in the cluster look correct and healthy. What would you check?

IntermediateArgo CDKubernetesGitOps8 min

What's the difference between Argo CD's Sync status and Health status, and why does treating them as the same thing cause confusion?

IntermediateArgo CDKubernetes6 min

What problem does the 'app of apps' pattern actually solve in GitOps, and when would you reach for it instead of just managing each application independently?

IntermediateGitOpsArgo CD6 min

An engineer manually ran kubectl edit against a production Deployment to fix an urgent issue, bypassing Git. What happens next in a GitOps-managed cluster, and why does that matter?

IntermediateGitOpsKubernetes6 min

In a GitOps setup, how do you actually promote a change from staging to production — is it a separate deploy, or literally the same Git commit moving between environments?

IntermediateGitOps7 min

Should GitOps principles apply to your underlying cluster/infrastructure configuration, or just to application deployments? What's actually different about managing infrastructure this way?

IntermediateGitOpsTerraformKubernetes6 min

For a GitOps setup managing 50 services, would you use one shared config repository or a separate repository per service? What actually drives that decision?

IntermediateGitOpsKubernetes7 min

GitOps means Git is the source of truth for everything deployed, but you obviously can't commit plaintext secrets to Git. How do you actually reconcile this?

AdvancedGitOpsSecurity8 min

How do you handle a team that has a legitimate reason to deviate from a golden path — what does a good exception process actually look like?

IntermediatePlatform Engineering6 min