Senior DevOps Interview Questions
516 questions across 39 categories
Deeper trade-off and design questions — why a specific approach was chosen, what breaks at scale, and how to reason about a system you didn't build.
How would you configure GitLab merge request approval rules so that changes to a payments module always require sign-off from the payments team specifically, not just any two approvers?
IntermediateGitLab CI/CD6 min
Two approved merge requests are merged to main within minutes of each other, and the second one breaks the build even though it passed CI on its own branch. How does GitLab's merge trains feature prevent this?
IntermediateGitLab CI/CD6 min
A compliance requirement mandates that every commit merged into a regulated project be cryptographically signed and traceable to a verified author. How would you enforce this in GitLab?
AdvancedGitLab CI/CD7 min
Reviewers keep approving frontend PRs based on reading the diff alone, and subtle visual bugs keep slipping through to production. How would GitLab Review Apps address this?
IntermediateGitLab CI/CD6 min
A merge request's 'Merge' button is greyed out with the widget stuck on 'Checking if merge request can be merged...' indefinitely, even though the pipeline passed. How do you debug this?
IntermediateGitLab CI/CD6 min
How do GitLab's group-level and project-level roles interact when a user has different roles assigned at each level?
IntermediateGitLab6 min
How would you structure GitLab protected branch rules differently for a fast-moving startup versus a regulated environment requiring strict change control?
IntermediateGitLab6 min
How does Argo CD's ignoreDifferences configuration interact with its automated self-healing (selfHeal) feature?
AdvancedArgo CDKubernetes6 min
A mutating webhook injects configuration into your resources. When should that injected config actually be tracked in Git instead of ignored via ignoreDifferences?
AdvancedArgo CDKubernetes7 min
An Argo CD application shows OutOfSync even though the pods running in the cluster look correct and healthy. What would you check?
IntermediateArgo CDKubernetesGitOps8 min
What's the difference between Argo CD's Sync status and Health status, and why does treating them as the same thing cause confusion?
IntermediateArgo CDKubernetes6 min
What problem does the 'app of apps' pattern actually solve in GitOps, and when would you reach for it instead of just managing each application independently?
IntermediateGitOpsArgo CD6 min
An engineer manually ran kubectl edit against a production Deployment to fix an urgent issue, bypassing Git. What happens next in a GitOps-managed cluster, and why does that matter?
IntermediateGitOpsKubernetes6 min
In a GitOps setup, how do you actually promote a change from staging to production — is it a separate deploy, or literally the same Git commit moving between environments?
IntermediateGitOps7 min
Should GitOps principles apply to your underlying cluster/infrastructure configuration, or just to application deployments? What's actually different about managing infrastructure this way?
IntermediateGitOpsTerraformKubernetes6 min
For a GitOps setup managing 50 services, would you use one shared config repository or a separate repository per service? What actually drives that decision?
IntermediateGitOpsKubernetes7 min
GitOps means Git is the source of truth for everything deployed, but you obviously can't commit plaintext secrets to Git. How do you actually reconcile this?
AdvancedGitOpsSecurity8 min
How does Helm's --atomic flag change the stuck-release failure mode, and what window of risk does it not actually cover?
AdvancedHelm6 min
How would you share common templates (labels, resource boilerplate) across many microservice charts without copy-pasting them into every chart?
AdvancedHelm7 min
What's the difference between a helm test resource and a Helm lifecycle hook, and when would you use each?
IntermediateHelm5 min
What's the fundamental difference between Helm's templating approach and Kustomize's overlay/patching approach, and when would you choose each?
IntermediateHelmKustomize6 min
A Helm pre-upgrade hook Job doesn't run before the Deployment update it's supposed to precede — why, and how do you fix the ordering?
AdvancedHelm7 min
How would you set up and manage a private Helm chart repository for an organization's internal charts?
IntermediateHelm6 min
How would you preview exactly what a helm upgrade will change before actually running it against production?
IntermediateHelm6 min