Kubernetes Interview Questions — All Categories
169 questions tagged with Kubernetes as a technology, across every category it appears in
Related categories:Argo CDAWSAzureCI/CDCloud ArchitectureContainersDockerGitOpsHelmJenkinsKubernetesLinuxNetworkingSystem DesignYAML
An Argo CD application shows OutOfSync even though the pods running in the cluster look correct and healthy. What would you check?
IntermediateArgo CDKubernetesGitOps8 min
What's the difference between Argo CD's Sync status and Health status, and why does treating them as the same thing cause confusion?
IntermediateArgo CDKubernetes6 min
An engineer manually ran kubectl edit against a production Deployment to fix an urgent issue, bypassing Git. What happens next in a GitOps-managed cluster, and why does that matter?
IntermediateGitOpsKubernetes6 min
Should GitOps principles apply to your underlying cluster/infrastructure configuration, or just to application deployments? What's actually different about managing infrastructure this way?
IntermediateGitOpsTerraformKubernetes6 min
For a GitOps setup managing 50 services, would you use one shared config repository or a separate repository per service? What actually drives that decision?
IntermediateGitOpsKubernetes7 min
How would you design a deploy pipeline so a killed CI job can never leave a Helm release ambiguously stuck?
ExpertHelmKubernetes8 min
A `helm upgrade` gets interrupted (CI job killed, network blip) and now every subsequent `helm upgrade` or `helm rollback` fails with "another operation (install/upgrade/rollback) is in progress". How do you recover?
IntermediateHelmKubernetes8 min
A Helm chart's deployed values don't match any single values file you can find — how does Helm's value-override precedence actually work?
IntermediateHelmKubernetes6 min
Why does Helm use Kubernetes Secrets as its storage backend by default instead of an external database, and what does that trade off?
IntermediateHelmKubernetes6 min
Your Jenkins controller has a fixed pool of static build agents. When would switching to ephemeral, on-demand agents (e.g. via Kubernetes) actually be worth the added complexity?
IntermediateJenkinsKubernetes6 min
If a Jenkins agent ran on Kubernetes instead of a static VM, how would troubleshooting the same Docker permission problem differ?
IntermediateJenkinsKubernetesDocker6 min
Kubernetes has built-in admission controllers compiled into the API server, separate from webhook-based ones — what's the actual difference and when does it matter?
IntermediateKubernetes5 min
How would you design and roll out a policy blocking :latest image tags cluster-wide, without breaking every existing deployment on day one?
IntermediateKubernetes7 min
Two mutating webhooks both touch a pod's containers field, and the final result isn't what either webhook intended alone — how do you diagnose and resolve this?
ExpertKubernetes8 min
How do OPA Gatekeeper and Kyverno actually differ as policy engines for Kubernetes admission control, and which would you choose?
IntermediateKubernetesOpaKyverno6 min
A new mutating webhook accidentally intercepted kube-system pod creation and broke core cluster components — how would you design its scoping to prevent this?
AdvancedKubernetes7 min
What's the difference between a validating and a mutating admission webhook, and in what order do they actually run?
IntermediateKubernetes6 min
Every pod creation cluster-wide suddenly starts failing with an admission webhook TLS error — what happened, and how do you recover quickly?
ExpertKubernetes8 min
An admission webhook's failurePolicy is set to Fail — what happens if the webhook itself becomes unavailable, and why might that be the wrong default?
AdvancedKubernetes7 min
A validating webhook is rejecting pod creations that look completely valid — how do you diagnose what it's actually objecting to?
AdvancedKubernetes7 min
kubectl apply --dry-run=server behaves unexpectedly for requests a webhook handles — what does a webhook's sideEffects field have to do with it?
AdvancedKubernetes6 min
For enforcing a new policy, when does it belong in a cluster admission webhook versus a CI-time check before deployment even happens?
IntermediateKubernetes6 min
What's the difference between kube-apiserver, kube-scheduler, and kube-controller-manager, and what breaks if each is unavailable?
IntermediateKubernetes6 min
The API server responds slowly to all requests — how do you determine whether etcd, the API server, or something else is the bottleneck?
ExpertKubernetes9 min