Kubernetes Interview Questions — All Categories
169 questions tagged with Kubernetes as a technology, across every category it appears in
Related categories:Argo CDAWSAzureCI/CDCloud ArchitectureContainersDockerGitOpsHelmJenkinsKubernetesLinuxNetworkingSystem DesignYAML
What's the actual difference between a Pod and a Deployment in Kubernetes, and why would you almost never create a bare Pod directly in production?
BeginnerKubernetes6 min
How does a Service-not-routing-traffic failure mode differ between a plain ClusterIP Service and one fronted by an Ingress controller?
IntermediateKubernetes7 min
How would you troubleshoot connectivity that works within a node but fails between pods on different nodes?
AdvancedKubernetes8 min
How would you design NetworkPolicies for a namespace using default-deny-all while still allowing necessary traffic?
IntermediateKubernetes7 min
What's the difference between Kubernetes Endpoints and EndpointSlices, and why did Kubernetes introduce EndpointSlices?
IntermediateKubernetes6 min
A headless Service behaves completely differently for DNS resolution — what's different, and when do you need it?
IntermediateKubernetes6 min
What's the difference between the older Ingress resource and the newer Gateway API, and when would you actually migrate?
IntermediateKubernetes6 min
A pod resolves a Service's DNS name intermittently but not consistently — how do you investigate CoreDNS itself?
AdvancedKubernetes8 min
How would you migrate a cluster from one CNI plugin to another without a full cluster rebuild — what's actually risky about it?
ExpertKubernetes8 min
What does a pod's ndots DNS setting default to, and how can it cause unexpectedly slow external DNS lookups?
AdvancedKubernetes7 min
A NetworkPolicy is applied but pods that should be blocked can still communicate — why might it not be enforced?
AdvancedKubernetes7 min
How would you debug a Service routing failure differently if you were using a service mesh like Istio instead of plain kube-proxy-based Services?
AdvancedKubernetesIstio7 min
You deploy a new version of a Kubernetes Deployment. The pods show Running and pass their readiness checks, but the Service in front of them stops routing traffic entirely. Where do you look?
IntermediateKubernetes10 min
What's the difference between ClusterIP, NodePort, LoadBalancer, and ExternalName, and how do you choose?
BeginnerKubernetes5 min
Why does Kubernetes require a CNI plugin at all — what job does it do that kube-proxy doesn't?
BeginnerKubernetes5 min
A security team rejects a pod spec requesting privileged: true — what SecurityContext alternatives would you propose to meet the actual requirement?
AdvancedKubernetes7 min
How would you audit an entire cluster to find ServiceAccounts with effectively cluster-admin permissions before a security review?
AdvancedKubernetes7 min
How would you design RBAC so a monitoring tool has read access across the whole cluster without being able to read Secrets?
IntermediateKubernetes6 min
A pod's ServiceAccount token was found in a public repo — what's your incident response, and how do you reduce blast radius for next time?
ExpertKubernetes8 min
How would you design least-privilege RBAC for a CI/CD pipeline that deploys to multiple namespaces, without granting cluster-admin?
AdvancedKubernetes8 min
A Pod Security Standard (restricted) rejects a legacy workload that needs to run as root — how do you handle this without disabling the standard cluster-wide?
AdvancedKubernetes7 min
A pod can read ConfigMaps but not Secrets in the same namespace, even though its Role looks like it should allow both — how do you find the gap?
IntermediateKubernetes6 min
What's the difference between a Role/RoleBinding and a ClusterRole/ClusterRoleBinding, and when would you bind a ClusterRole at namespace scope on purpose?
BeginnerKubernetes5 min
Why doesn't a RoleBinding in namespace A grant access to namespace B, even though the ClusterRole it references is itself cluster-scoped?
IntermediateKubernetes5 min