Prev Next

Maven / GitOps Interview Questions

How do you implement multi-cluster GitOps at scale?

Multi-cluster GitOps adds the dimension of which cluster to deploy to on top of the standard single-cluster model. The two dominant approaches are hub-spoke (a central GitOps control plane manages all clusters) and decentralised (each cluster runs its own GitOps operator, all watching the same or related Git repos).

Argo CD hub-spoke: A single Argo CD instance (the "hub") in a management cluster registers all target clusters using argocd cluster add. Applications or ApplicationSets declare their destination.server as the registered cluster API URL. The hub's Application Controller communicates with each target cluster's API server directly. An ApplicationSet with the cluster generator creates one Application per registered cluster automatically.

apiVersion: argoproj.io/v1alpha1
kind: ApplicationSet
metadata:
  name: platform-addons
  namespace: argocd
spec:
  generators:
    - clusters:
        selector:
          matchLabels:
            tier: production
  template:
    metadata:
      name: "{{name}}-platform-addons"
    spec:
      project: platform
      source:
        repoURL: https://github.com/org/gitops-config.git
        targetRevision: main
        path: "clusters/{{metadata.labels.region}}/addons"
      destination:
        server: "{{server}}"
        namespace: platform-system

Flux decentralised: Each cluster runs its own Flux controllers, bootstrapped from a management cluster or a bootstrap script. A "management" cluster's Flux can push Flux configs to leaf clusters by managing their Flux Kustomization CRs via the Kubernetes API or GitOps itself.

Scaling considerations: Shard the Argo CD Application Controller by cluster to handle hundreds of clusters. Use AppProjects or Flux tenancy to enforce namespace-level isolation per team. Keep a separate Git directory structure per cluster (or cluster tier) to make blast-radius clear — a change to clusters/prod-us-east-1/ only affects that cluster.

Which Argo CD ApplicationSet generator automatically creates one Application per registered Argo CD cluster?
In a Flux multi-cluster setup, what typically runs the Flux controllers on each target workload cluster?

Invest now in Acorns!!! 🚀 Join Acorns and get your $5 bonus!

Invest now in Acorns!!! 🚀
Join Acorns and get your $5 bonus!

Earn passively and while sleeping

Acorns is a micro-investing app that automatically invests your "spare change" from daily purchases into diversified, expert-built portfolios of ETFs. It is designed for beginners, allowing you to start investing with as little as $5. The service automates saving and investing. Disclosure: I may receive a referral bonus.

Invest now!!! Get Free equity stock (US, UK only)!

Use Robinhood app to invest in stocks. It is safe and secure. Use the Referral link to claim your free stock when you sign up!.

The Robinhood app makes it easy to trade stocks, crypto and more.


Webull! Receive free stock by signing up using the link: Webull signup.

More Related questions...

What is GitOps and what core principles does it define? How does GitOps differ from traditional CI/CD pipelines? What is the 'single source of truth' principle in GitOps? What are the two GitOps deployment models: push-based vs pull-based? What is a GitOps operator and what role does it play? What is declarative infrastructure and why does GitOps require it? How does GitOps improve security and auditability compared to script-based deployments? What Git branching strategies are commonly used with GitOps? What is drift detection and how does a GitOps operator handle drift? What is the difference between GitOps and Infrastructure as Code (IaC)? What is Argo CD and how does it implement GitOps? How does Argo CD's sync process work — desired state vs live state? What are Argo CD Applications and ApplicationSets? How do you structure a GitOps repository — app-of-apps, environment folders, overlays? What is Flux CD and how does it differ from Argo CD? How does Flux's source-controller and kustomize-controller work together? How do you manage secrets in a GitOps workflow — Sealed Secrets, SOPS, External Secrets Operator? How do you handle multiple environments (dev/staging/prod) in a GitOps repo? How does image automation work in Flux for continuous delivery? What are Argo CD sync policies — automated vs manual — and sync waves? How do you roll back a deployment using GitOps? How do you integrate GitOps with a CI pipeline — separation of concerns? What is progressive delivery and how does it relate to GitOps — Argo Rollouts, Flagger? How do you handle Helm charts in a GitOps workflow? How do you use Kustomize overlays in a GitOps repository? How do you implement multi-cluster GitOps at scale? How does Argo CD handle RBAC and multi-tenancy? What are the Argo CD app-of-apps and ApplicationSet patterns and when do you use each? How do you implement GitOps for infrastructure provisioning with Crossplane and Cluster API? How do you observe and alert on GitOps sync failures in production? How do you manage database schema migrations in a GitOps workflow? How do you implement policy enforcement in a GitOps pipeline — OPA/Gatekeeper, Kyverno? What are the limitations and anti-patterns of GitOps? How do you migrate an existing deployment pipeline to GitOps? How does GitOps fit into a platform engineering strategy?
Show more question and Answers...

Testing

Comments & Discussions