Conceptual Interview Questions — All Categories
166 questions across 34 categories
The underlying mechanisms and trade-offs interviewers expect you to actually understand, not just recite.
When would you choose squash-merge over a regular merge commit for landing a pull request into main?
BeginnerGit6 min
What's the difference between a branch pipeline and a merge request pipeline in GitLab CI, and why does it matter which one actually runs for a given push?
IntermediateGitLab CI/CD7 min
What debugging challenge does a GitLab merged results pipeline introduce that a plain branch pipeline doesn't, when a job fails?
IntermediateGitLab CI/CD6 min
Two approved merge requests are merged to main within minutes of each other, and the second one breaks the build even though it passed CI on its own branch. How does GitLab's merge trains feature prevent this?
IntermediateGitLab CI/CD6 min
What's the actual difference between GitLab's Developer, Maintainer, and Owner roles in terms of what each one can do to a protected branch and CI/CD variables?
BeginnerGitLab6 min
How do GitLab's group-level and project-level roles interact when a user has different roles assigned at each level?
IntermediateGitLab6 min
What's the difference between a "Protected" and a "Masked" GitLab CI/CD variable, and why would you want both on the same variable?
BeginnerGitLab CI/CD5 min
How does Argo CD's ignoreDifferences configuration interact with its automated self-healing (selfHeal) feature?
AdvancedArgo CDKubernetes6 min
A mutating webhook injects configuration into your resources. When should that injected config actually be tracked in Git instead of ignored via ignoreDifferences?
AdvancedArgo CDKubernetes7 min
What's the difference between Argo CD's Sync status and Health status, and why does treating them as the same thing cause confusion?
IntermediateArgo CDKubernetes6 min
What problem does the 'app of apps' pattern actually solve in GitOps, and when would you reach for it instead of just managing each application independently?
IntermediateGitOpsArgo CD6 min
An engineer manually ran kubectl edit against a production Deployment to fix an urgent issue, bypassing Git. What happens next in a GitOps-managed cluster, and why does that matter?
IntermediateGitOpsKubernetes6 min
How does Helm's --atomic flag change the stuck-release failure mode, and what window of risk does it not actually cover?
AdvancedHelm6 min
A Chart.yaml has both a version and an appVersion field — what's the difference, and how should each actually be bumped?
BeginnerHelm5 min
A Helm chart's deployed values don't match any single values file you can find — how does Helm's value-override precedence actually work?
IntermediateHelmKubernetes6 min
Why does Helm use Kubernetes Secrets as its storage backend by default instead of an external database, and what does that trade off?
IntermediateHelmKubernetes6 min
Someone manually changed a cloud resource in the console that's managed by your IaC. What actually happens the next time the pipeline runs, and how would you handle the drift?
IntermediateTerraform8 min
What's the risk of using terraform apply -target to fix drift on just one resource, and when is it actually the right call?
IntermediateTerraform6 min
What does idempotency actually mean for infrastructure-as-code tooling, and what breaks when a module isn't genuinely idempotent?
IntermediateTerraform6 min
Why is mounting the host Docker socket into a build container considered a security risk beyond just the permission-configuration hassle?
IntermediateJenkinsDocker6 min
If a Jenkins agent ran on Kubernetes instead of a static VM, how would troubleshooting the same Docker permission problem differ?
IntermediateJenkinsKubernetesDocker6 min
Kubernetes has built-in admission controllers compiled into the API server, separate from webhook-based ones — what's the actual difference and when does it matter?
IntermediateKubernetes5 min
What's the difference between a validating and a mutating admission webhook, and in what order do they actually run?
IntermediateKubernetes6 min
kubectl apply --dry-run=server behaves unexpectedly for requests a webhook handles — what does a webhook's sideEffects field have to do with it?
AdvancedKubernetes6 min