Practical Interview Questions — All Categories
131 questions across 30 categories
Hands-on, command-driven questions testing whether you can actually operate these tools, not just discuss them.
How would you design and roll out a policy blocking :latest image tags cluster-wide, without breaking every existing deployment on day one?
IntermediateKubernetes7 min
A new mutating webhook accidentally intercepted kube-system pod creation and broke core cluster components — how would you design its scoping to prevent this?
AdvancedKubernetes7 min
How would you safely drain and remove a node without disrupting running workloads?
IntermediateKubernetes6 min
A cluster upgrade needs zero workload downtime — walk through sequencing control-plane and node upgrades safely.
AdvancedKubernetes8 min
A security scan flags the API server's anonymous authentication as enabled — what does that actually expose, and how would you harden it safely?
AdvancedKubernetes7 min
What does running kube-bench against a cluster actually check, and how would you prioritize the findings rather than trying to fix everything at once?
IntermediateKubernetes6 min
Enforcing readOnlyRootFilesystem across all pods breaks several applications that write temp files — how do you roll this out without breaking them?
IntermediateKubernetes6 min
How would you audit which pods across a cluster consume a specific Secret, before rotating it, to know what needs restarting?
IntermediateKubernetes6 min
How would you design a workflow so a ConfigMap change automatically triggers a rolling restart of the Deployments that depend on it?
AdvancedKubernetes7 min
A ConfigMap has grown to hold a large multi-file config bundle — what's the practical size limit, and what would you do instead if you hit it?
IntermediateKubernetes5 min
Why should a CRD's status be a separate subresource from spec, and what belongs in status versus spec?
IntermediateKubernetes6 min
How would you test a custom operator's reconcile logic without needing a full live cluster for every test run?
AdvancedKubernetes7 min
How would you audit an entire cluster to find ServiceAccounts with effectively cluster-admin permissions before a security review?
AdvancedKubernetes7 min
How would you design RBAC so a monitoring tool has read access across the whole cluster without being able to read Secrets?
IntermediateKubernetes6 min
How would you design pod topology spread constraints to keep a Deployment's replicas evenly distributed across availability zones?
AdvancedKubernetes7 min
How would you back up and restore persistent volume data for a stateful app, given kubectl alone doesn't capture volume contents?
IntermediateKubernetes7 min
How would you safely expand a PVC for a running StatefulSet without downtime, and what does the StorageClass need to support?
AdvancedKubernetes7 min
How would you set up alerting to catch a CrashLoopBackOff-class issue before it reaches production traffic, rather than discovering it via a user-facing outage?
IntermediateKubernetesPrometheus7 min