Workshop wiki · English

GitOps Exercises: Intermediate (EN)

These exercises belong to the workshop level Intermediate. Every task requires traceable evidence: source, commit, desired state, rendered state, controller relationship, risk and recovery path.

Workshop examples as ZIP files
Learning progress in the web app

Mark chapters as read, view reading progress and check off practice modules after enabling the optional web app. Workshop progress is calculated from chapters across all document pages. Your choices stay on this device; there is no account or server sync. Installation is not required. Withdrawing your choice in Privacy settings deletes the progress.

Reading progress0%
0%
0 / 6 chapters read
Other language versionGerman ↗Greek ↗

GitOps Exercises: Intermediate (EN)

These exercises belong to the workshop level Intermediate. Every task requires traceable evidence: source, commit, desired state, rendered state, controller relationship, risk and recovery path.

Submission Format

Do not store production secrets. Document instead:

  • commands used,
  • relevant manifest excerpts,
  • affected GitOps source and target environment,
  • assessment of drift, promotion, rollback, RBAC and secrets,
  • recovery or rollback path.
01 / 06

Required Tasks

Task 01: Kustomize

Goal: Examine Kustomize in an isolated GitOps lab and document the effect.

  1. Use an example in examples/ or create a local manifest lab.
  2. Record source, commit, path, target namespace and expected controller.
  3. Check YAML structure and rendering boundaries with local commands or static analysis.
  4. Describe how Argo CD or Flux would observe and report the state.
  5. Justify the matching rollback, suspend, revert or rotation path.

Success criterion: Another person can see which desired state is versioned and how it would be reconciled.

Task 02: Helm

Goal: Examine Helm in an isolated GitOps lab and document the effect.

  1. Use an example in examples/ or create a local manifest lab.
  2. Record source, commit, path, target namespace and expected controller.
  3. Check YAML structure and rendering boundaries with local commands or static analysis.
  4. Describe how Argo CD or Flux would observe and report the state.
  5. Justify the matching rollback, suspend, revert or rotation path.

Success criterion: Another person can see which desired state is versioned and how it would be reconciled.

Task 03: Argo CD Applications

Goal: Examine Argo CD Applications in an isolated GitOps lab and document the effect.

  1. Use an example in examples/ or create a local manifest lab.
  2. Record source, commit, path, target namespace and expected controller.
  3. Check YAML structure and rendering boundaries with local commands or static analysis.
  4. Describe how Argo CD or Flux would observe and report the state.
  5. Justify the matching rollback, suspend, revert or rotation path.

Success criterion: Another person can see which desired state is versioned and how it would be reconciled.

Task 04: Flux Sources

Goal: Examine Flux Sources in an isolated GitOps lab and document the effect.

  1. Use an example in examples/ or create a local manifest lab.
  2. Record source, commit, path, target namespace and expected controller.
  3. Check YAML structure and rendering boundaries with local commands or static analysis.
  4. Describe how Argo CD or Flux would observe and report the state.
  5. Justify the matching rollback, suspend, revert or rotation path.

Success criterion: Another person can see which desired state is versioned and how it would be reconciled.

Task 05: Promotion

Goal: Examine Promotion in an isolated GitOps lab and document the effect.

  1. Use an example in examples/ or create a local manifest lab.
  2. Record source, commit, path, target namespace and expected controller.
  3. Check YAML structure and rendering boundaries with local commands or static analysis.
  4. Describe how Argo CD or Flux would observe and report the state.
  5. Justify the matching rollback, suspend, revert or rotation path.

Success criterion: Another person can see which desired state is versioned and how it would be reconciled.

Task 06: Pull Requests

Goal: Examine Pull Requests in an isolated GitOps lab and document the effect.

  1. Use an example in examples/ or create a local manifest lab.
  2. Record source, commit, path, target namespace and expected controller.
  3. Check YAML structure and rendering boundaries with local commands or static analysis.
  4. Describe how Argo CD or Flux would observe and report the state.
  5. Justify the matching rollback, suspend, revert or rotation path.

Success criterion: Another person can see which desired state is versioned and how it would be reconciled.

Task 07: Rollbacks

Goal: Examine Rollbacks in an isolated GitOps lab and document the effect.

  1. Use an example in examples/ or create a local manifest lab.
  2. Record source, commit, path, target namespace and expected controller.
  3. Check YAML structure and rendering boundaries with local commands or static analysis.
  4. Describe how Argo CD or Flux would observe and report the state.
  5. Justify the matching rollback, suspend, revert or rotation path.

Success criterion: Another person can see which desired state is versioned and how it would be reconciled.

Task 08: Kustomize

Goal: Examine Kustomize in an isolated GitOps lab and document the effect.

  1. Use an example in examples/ or create a local manifest lab.
  2. Record source, commit, path, target namespace and expected controller.
  3. Check YAML structure and rendering boundaries with local commands or static analysis.
  4. Describe how Argo CD or Flux would observe and report the state.
  5. Justify the matching rollback, suspend, revert or rotation path.

Success criterion: Another person can see which desired state is versioned and how it would be reconciled.

Task 09: Helm

Goal: Examine Helm in an isolated GitOps lab and document the effect.

  1. Use an example in examples/ or create a local manifest lab.
  2. Record source, commit, path, target namespace and expected controller.
  3. Check YAML structure and rendering boundaries with local commands or static analysis.
  4. Describe how Argo CD or Flux would observe and report the state.
  5. Justify the matching rollback, suspend, revert or rotation path.

Success criterion: Another person can see which desired state is versioned and how it would be reconciled.

Task 10: Argo CD Applications

Goal: Examine Argo CD Applications in an isolated GitOps lab and document the effect.

  1. Use an example in examples/ or create a local manifest lab.
  2. Record source, commit, path, target namespace and expected controller.
  3. Check YAML structure and rendering boundaries with local commands or static analysis.
  4. Describe how Argo CD or Flux would observe and report the state.
  5. Justify the matching rollback, suspend, revert or rotation path.

Success criterion: Another person can see which desired state is versioned and how it would be reconciled.

Task 11: Flux Sources

Goal: Examine Flux Sources in an isolated GitOps lab and document the effect.

  1. Use an example in examples/ or create a local manifest lab.
  2. Record source, commit, path, target namespace and expected controller.
  3. Check YAML structure and rendering boundaries with local commands or static analysis.
  4. Describe how Argo CD or Flux would observe and report the state.
  5. Justify the matching rollback, suspend, revert or rotation path.

Success criterion: Another person can see which desired state is versioned and how it would be reconciled.

Task 12: Promotion

Goal: Examine Promotion in an isolated GitOps lab and document the effect.

  1. Use an example in examples/ or create a local manifest lab.
  2. Record source, commit, path, target namespace and expected controller.
  3. Check YAML structure and rendering boundaries with local commands or static analysis.
  4. Describe how Argo CD or Flux would observe and report the state.
  5. Justify the matching rollback, suspend, revert or rotation path.

Success criterion: Another person can see which desired state is versioned and how it would be reconciled.

Task 13: Pull Requests

Goal: Examine Pull Requests in an isolated GitOps lab and document the effect.

  1. Use an example in examples/ or create a local manifest lab.
  2. Record source, commit, path, target namespace and expected controller.
  3. Check YAML structure and rendering boundaries with local commands or static analysis.
  4. Describe how Argo CD or Flux would observe and report the state.
  5. Justify the matching rollback, suspend, revert or rotation path.

Success criterion: Another person can see which desired state is versioned and how it would be reconciled.

Task 14: Rollbacks

Goal: Examine Rollbacks in an isolated GitOps lab and document the effect.

  1. Use an example in examples/ or create a local manifest lab.
  2. Record source, commit, path, target namespace and expected controller.
  3. Check YAML structure and rendering boundaries with local commands or static analysis.
  4. Describe how Argo CD or Flux would observe and report the state.
  5. Justify the matching rollback, suspend, revert or rotation path.

Success criterion: Another person can see which desired state is versioned and how it would be reconciled.

Task 15: Kustomize

Goal: Examine Kustomize in an isolated GitOps lab and document the effect.

  1. Use an example in examples/ or create a local manifest lab.
  2. Record source, commit, path, target namespace and expected controller.
  3. Check YAML structure and rendering boundaries with local commands or static analysis.
  4. Describe how Argo CD or Flux would observe and report the state.
  5. Justify the matching rollback, suspend, revert or rotation path.

Success criterion: Another person can see which desired state is versioned and how it would be reconciled.

Task 16: Helm

Goal: Examine Helm in an isolated GitOps lab and document the effect.

  1. Use an example in examples/ or create a local manifest lab.
  2. Record source, commit, path, target namespace and expected controller.
  3. Check YAML structure and rendering boundaries with local commands or static analysis.
  4. Describe how Argo CD or Flux would observe and report the state.
  5. Justify the matching rollback, suspend, revert or rotation path.

Success criterion: Another person can see which desired state is versioned and how it would be reconciled.

Task 17: Argo CD Applications

Goal: Examine Argo CD Applications in an isolated GitOps lab and document the effect.

  1. Use an example in examples/ or create a local manifest lab.
  2. Record source, commit, path, target namespace and expected controller.
  3. Check YAML structure and rendering boundaries with local commands or static analysis.
  4. Describe how Argo CD or Flux would observe and report the state.
  5. Justify the matching rollback, suspend, revert or rotation path.

Success criterion: Another person can see which desired state is versioned and how it would be reconciled.

Task 18: Flux Sources

Goal: Examine Flux Sources in an isolated GitOps lab and document the effect.

  1. Use an example in examples/ or create a local manifest lab.
  2. Record source, commit, path, target namespace and expected controller.
  3. Check YAML structure and rendering boundaries with local commands or static analysis.
  4. Describe how Argo CD or Flux would observe and report the state.
  5. Justify the matching rollback, suspend, revert or rotation path.

Success criterion: Another person can see which desired state is versioned and how it would be reconciled.

Task 19: Promotion

Goal: Examine Promotion in an isolated GitOps lab and document the effect.

  1. Use an example in examples/ or create a local manifest lab.
  2. Record source, commit, path, target namespace and expected controller.
  3. Check YAML structure and rendering boundaries with local commands or static analysis.
  4. Describe how Argo CD or Flux would observe and report the state.
  5. Justify the matching rollback, suspend, revert or rotation path.

Success criterion: Another person can see which desired state is versioned and how it would be reconciled.

Task 20: Pull Requests

Goal: Examine Pull Requests in an isolated GitOps lab and document the effect.

  1. Use an example in examples/ or create a local manifest lab.
  2. Record source, commit, path, target namespace and expected controller.
  3. Check YAML structure and rendering boundaries with local commands or static analysis.
  4. Describe how Argo CD or Flux would observe and report the state.
  5. Justify the matching rollback, suspend, revert or rotation path.

Success criterion: Another person can see which desired state is versioned and how it would be reconciled.

Task 21: Rollbacks

Goal: Examine Rollbacks in an isolated GitOps lab and document the effect.

  1. Use an example in examples/ or create a local manifest lab.
  2. Record source, commit, path, target namespace and expected controller.
  3. Check YAML structure and rendering boundaries with local commands or static analysis.
  4. Describe how Argo CD or Flux would observe and report the state.
  5. Justify the matching rollback, suspend, revert or rotation path.

Success criterion: Another person can see which desired state is versioned and how it would be reconciled.

Task 22: Kustomize

Goal: Examine Kustomize in an isolated GitOps lab and document the effect.

  1. Use an example in examples/ or create a local manifest lab.
  2. Record source, commit, path, target namespace and expected controller.
  3. Check YAML structure and rendering boundaries with local commands or static analysis.
  4. Describe how Argo CD or Flux would observe and report the state.
  5. Justify the matching rollback, suspend, revert or rotation path.

Success criterion: Another person can see which desired state is versioned and how it would be reconciled.

Task 23: Helm

Goal: Examine Helm in an isolated GitOps lab and document the effect.

  1. Use an example in examples/ or create a local manifest lab.
  2. Record source, commit, path, target namespace and expected controller.
  3. Check YAML structure and rendering boundaries with local commands or static analysis.
  4. Describe how Argo CD or Flux would observe and report the state.
  5. Justify the matching rollback, suspend, revert or rotation path.

Success criterion: Another person can see which desired state is versioned and how it would be reconciled.

Task 24: Argo CD Applications

Goal: Examine Argo CD Applications in an isolated GitOps lab and document the effect.

  1. Use an example in examples/ or create a local manifest lab.
  2. Record source, commit, path, target namespace and expected controller.
  3. Check YAML structure and rendering boundaries with local commands or static analysis.
  4. Describe how Argo CD or Flux would observe and report the state.
  5. Justify the matching rollback, suspend, revert or rotation path.

Success criterion: Another person can see which desired state is versioned and how it would be reconciled.

02 / 06

Review Checklist for Intermediate Exercises

  • 01. document desired state: record which source, commit, resource, controller and status are affected.
  • 02. identify source and commit: record which source, commit, resource, controller and status are affected.
  • 03. explain reconciliation path: record which source, commit, resource, controller and status are affected.
  • 04. prove drift: record which source, commit, resource, controller and status are affected.
  • 05. check Kustomize or Helm rendering: record which source, commit, resource, controller and status are affected.
  • 06. read Argo CD or Flux resource: record which source, commit, resource, controller and status are affected.
  • 07. assess promotion risk: record which source, commit, resource, controller and status are affected.
  • 08. write down rollback path: record which source, commit, resource, controller and status are affected.
  • 09. mark secret boundary: record which source, commit, resource, controller and status are affected.
  • 10. check RBAC and tenant boundary: record which source, commit, resource, controller and status are affected.
  • 11. name policy impact: record which source, commit, resource, controller and status are affected.
  • 12. describe feedback loop: record which source, commit, resource, controller and status are affected.
  • 13. document desired state: record which source, commit, resource, controller and status are affected.
  • 14. identify source and commit: record which source, commit, resource, controller and status are affected.
  • 15. explain reconciliation path: record which source, commit, resource, controller and status are affected.
  • 16. prove drift: record which source, commit, resource, controller and status are affected.
  • 17. check Kustomize or Helm rendering: record which source, commit, resource, controller and status are affected.
  • 18. read Argo CD or Flux resource: record which source, commit, resource, controller and status are affected.
  • 19. assess promotion risk: record which source, commit, resource, controller and status are affected.
  • 20. write down rollback path: record which source, commit, resource, controller and status are affected.
  • 21. mark secret boundary: record which source, commit, resource, controller and status are affected.
  • 22. check RBAC and tenant boundary: record which source, commit, resource, controller and status are affected.
  • 23. name policy impact: record which source, commit, resource, controller and status are affected.
  • 24. describe feedback loop: record which source, commit, resource, controller and status are affected.
  • 25. document desired state: record which source, commit, resource, controller and status are affected.
  • 26. identify source and commit: record which source, commit, resource, controller and status are affected.
  • 27. explain reconciliation path: record which source, commit, resource, controller and status are affected.
  • 28. prove drift: record which source, commit, resource, controller and status are affected.
  • 29. check Kustomize or Helm rendering: record which source, commit, resource, controller and status are affected.
  • 30. read Argo CD or Flux resource: record which source, commit, resource, controller and status are affected.
  • 31. assess promotion risk: record which source, commit, resource, controller and status are affected.
  • 32. write down rollback path: record which source, commit, resource, controller and status are affected.
  • 33. mark secret boundary: record which source, commit, resource, controller and status are affected.
  • 34. check RBAC and tenant boundary: record which source, commit, resource, controller and status are affected.
  • 35. name policy impact: record which source, commit, resource, controller and status are affected.
  • 36. describe feedback loop: record which source, commit, resource, controller and status are affected.
  • 37. document desired state: record which source, commit, resource, controller and status are affected.
  • 38. identify source and commit: record which source, commit, resource, controller and status are affected.
03 / 06

Practice Appendix: Intermediate Exercises

This appendix provides a backlog for longer trainings, reviews and repetition. Each task is small enough to verify with local YAML artifacts and a Git repository.

A001. Kustomize

  • Task: document desired state and explicitly relate the observation to Kustomize.
  • Evidence: Write down at least one GitOps-adjacent command, one expected result and one limit of that evidence.
  • Operations question: What would a wrong assumption change in dev, staging and prod clusters?
  • Security question: Which credentials, secrets, roles, signatures or policy rules would be critical?
  • Recovery: Explain whether Git revert, sync rollback, suspend, manual drift correction or secret rotation is required.

A002. Helm

  • Task: identify source and commit and explicitly relate the observation to Helm.
  • Evidence: Write down at least one GitOps-adjacent command, one expected result and one limit of that evidence.
  • Operations question: What would a wrong assumption change in dev, staging and prod clusters?
  • Security question: Which credentials, secrets, roles, signatures or policy rules would be critical?
  • Recovery: Explain whether Git revert, sync rollback, suspend, manual drift correction or secret rotation is required.

A003. Argo CD Applications

  • Task: explain reconciliation path and explicitly relate the observation to Argo CD Applications.
  • Evidence: Write down at least one GitOps-adjacent command, one expected result and one limit of that evidence.
  • Operations question: What would a wrong assumption change in dev, staging and prod clusters?
  • Security question: Which credentials, secrets, roles, signatures or policy rules would be critical?
  • Recovery: Explain whether Git revert, sync rollback, suspend, manual drift correction or secret rotation is required.

A004. Flux Sources

  • Task: prove drift and explicitly relate the observation to Flux Sources.
  • Evidence: Write down at least one GitOps-adjacent command, one expected result and one limit of that evidence.
  • Operations question: What would a wrong assumption change in dev, staging and prod clusters?
  • Security question: Which credentials, secrets, roles, signatures or policy rules would be critical?
  • Recovery: Explain whether Git revert, sync rollback, suspend, manual drift correction or secret rotation is required.

A005. Promotion

  • Task: check Kustomize or Helm rendering and explicitly relate the observation to Promotion.
  • Evidence: Write down at least one GitOps-adjacent command, one expected result and one limit of that evidence.
  • Operations question: What would a wrong assumption change in dev, staging and prod clusters?
  • Security question: Which credentials, secrets, roles, signatures or policy rules would be critical?
  • Recovery: Explain whether Git revert, sync rollback, suspend, manual drift correction or secret rotation is required.

A006. Pull Requests

  • Task: read Argo CD or Flux resource and explicitly relate the observation to Pull Requests.
  • Evidence: Write down at least one GitOps-adjacent command, one expected result and one limit of that evidence.
  • Operations question: What would a wrong assumption change in dev, staging and prod clusters?
  • Security question: Which credentials, secrets, roles, signatures or policy rules would be critical?
  • Recovery: Explain whether Git revert, sync rollback, suspend, manual drift correction or secret rotation is required.

A007. Rollbacks

  • Task: assess promotion risk and explicitly relate the observation to Rollbacks.
  • Evidence: Write down at least one GitOps-adjacent command, one expected result and one limit of that evidence.
  • Operations question: What would a wrong assumption change in dev, staging and prod clusters?
  • Security question: Which credentials, secrets, roles, signatures or policy rules would be critical?
  • Recovery: Explain whether Git revert, sync rollback, suspend, manual drift correction or secret rotation is required.

A008. GitOps

  • Task: write down rollback path and explicitly relate the observation to GitOps.
  • Evidence: Write down at least one GitOps-adjacent command, one expected result and one limit of that evidence.
  • Operations question: What would a wrong assumption change in dev, staging and prod clusters?
  • Security question: Which credentials, secrets, roles, signatures or policy rules would be critical?
  • Recovery: Explain whether Git revert, sync rollback, suspend, manual drift correction or secret rotation is required.

A009. Desired State

  • Task: mark secret boundary and explicitly relate the observation to Desired State.
  • Evidence: Write down at least one GitOps-adjacent command, one expected result and one limit of that evidence.
  • Operations question: What would a wrong assumption change in dev, staging and prod clusters?
  • Security question: Which credentials, secrets, roles, signatures or policy rules would be critical?
  • Recovery: Explain whether Git revert, sync rollback, suspend, manual drift correction or secret rotation is required.

A010. Actual State

  • Task: check RBAC and tenant boundary and explicitly relate the observation to Actual State.
  • Evidence: Write down at least one GitOps-adjacent command, one expected result and one limit of that evidence.
  • Operations question: What would a wrong assumption change in dev, staging and prod clusters?
  • Security question: Which credentials, secrets, roles, signatures or policy rules would be critical?
  • Recovery: Explain whether Git revert, sync rollback, suspend, manual drift correction or secret rotation is required.

A011. Reconciliation

  • Task: name policy impact and explicitly relate the observation to Reconciliation.
  • Evidence: Write down at least one GitOps-adjacent command, one expected result and one limit of that evidence.
  • Operations question: What would a wrong assumption change in dev, staging and prod clusters?
  • Security question: Which credentials, secrets, roles, signatures or policy rules would be critical?
  • Recovery: Explain whether Git revert, sync rollback, suspend, manual drift correction or secret rotation is required.

A012. Drift

  • Task: describe feedback loop and explicitly relate the observation to Drift.
  • Evidence: Write down at least one GitOps-adjacent command, one expected result and one limit of that evidence.
  • Operations question: What would a wrong assumption change in dev, staging and prod clusters?
  • Security question: Which credentials, secrets, roles, signatures or policy rules would be critical?
  • Recovery: Explain whether Git revert, sync rollback, suspend, manual drift correction or secret rotation is required.

A013. Source of Truth

  • Task: document desired state and explicitly relate the observation to Source of Truth.
  • Evidence: Write down at least one GitOps-adjacent command, one expected result and one limit of that evidence.
  • Operations question: What would a wrong assumption change in dev, staging and prod clusters?
  • Security question: Which credentials, secrets, roles, signatures or policy rules would be critical?
  • Recovery: Explain whether Git revert, sync rollback, suspend, manual drift correction or secret rotation is required.

A014. Pull Model

  • Task: identify source and commit and explicitly relate the observation to Pull Model.
  • Evidence: Write down at least one GitOps-adjacent command, one expected result and one limit of that evidence.
  • Operations question: What would a wrong assumption change in dev, staging and prod clusters?
  • Security question: Which credentials, secrets, roles, signatures or policy rules would be critical?
  • Recovery: Explain whether Git revert, sync rollback, suspend, manual drift correction or secret rotation is required.

A015. Argo CD Application

  • Task: explain reconciliation path and explicitly relate the observation to Argo CD Application.
  • Evidence: Write down at least one GitOps-adjacent command, one expected result and one limit of that evidence.
  • Operations question: What would a wrong assumption change in dev, staging and prod clusters?
  • Security question: Which credentials, secrets, roles, signatures or policy rules would be critical?
  • Recovery: Explain whether Git revert, sync rollback, suspend, manual drift correction or secret rotation is required.

A016. Argo CD AppProject

  • Task: prove drift and explicitly relate the observation to Argo CD AppProject.
  • Evidence: Write down at least one GitOps-adjacent command, one expected result and one limit of that evidence.
  • Operations question: What would a wrong assumption change in dev, staging and prod clusters?
  • Security question: Which credentials, secrets, roles, signatures or policy rules would be critical?
  • Recovery: Explain whether Git revert, sync rollback, suspend, manual drift correction or secret rotation is required.

A017. Flux Source

  • Task: check Kustomize or Helm rendering and explicitly relate the observation to Flux Source.
  • Evidence: Write down at least one GitOps-adjacent command, one expected result and one limit of that evidence.
  • Operations question: What would a wrong assumption change in dev, staging and prod clusters?
  • Security question: Which credentials, secrets, roles, signatures or policy rules would be critical?
  • Recovery: Explain whether Git revert, sync rollback, suspend, manual drift correction or secret rotation is required.

A018. Flux Kustomization

  • Task: read Argo CD or Flux resource and explicitly relate the observation to Flux Kustomization.
  • Evidence: Write down at least one GitOps-adjacent command, one expected result and one limit of that evidence.
  • Operations question: What would a wrong assumption change in dev, staging and prod clusters?
  • Security question: Which credentials, secrets, roles, signatures or policy rules would be critical?
  • Recovery: Explain whether Git revert, sync rollback, suspend, manual drift correction or secret rotation is required.

A019. HelmRelease

  • Task: assess promotion risk and explicitly relate the observation to HelmRelease.
  • Evidence: Write down at least one GitOps-adjacent command, one expected result and one limit of that evidence.
  • Operations question: What would a wrong assumption change in dev, staging and prod clusters?
  • Security question: Which credentials, secrets, roles, signatures or policy rules would be critical?
  • Recovery: Explain whether Git revert, sync rollback, suspend, manual drift correction or secret rotation is required.

A020. Kustomize Overlay

  • Task: write down rollback path and explicitly relate the observation to Kustomize Overlay.
  • Evidence: Write down at least one GitOps-adjacent command, one expected result and one limit of that evidence.
  • Operations question: What would a wrong assumption change in dev, staging and prod clusters?
  • Security question: Which credentials, secrets, roles, signatures or policy rules would be critical?
  • Recovery: Explain whether Git revert, sync rollback, suspend, manual drift correction or secret rotation is required.

A021. Promotion

  • Task: mark secret boundary and explicitly relate the observation to Promotion.
  • Evidence: Write down at least one GitOps-adjacent command, one expected result and one limit of that evidence.
  • Operations question: What would a wrong assumption change in dev, staging and prod clusters?
  • Security question: Which credentials, secrets, roles, signatures or policy rules would be critical?
  • Recovery: Explain whether Git revert, sync rollback, suspend, manual drift correction or secret rotation is required.

A022. Progressive Delivery

  • Task: check RBAC and tenant boundary and explicitly relate the observation to Progressive Delivery.
  • Evidence: Write down at least one GitOps-adjacent command, one expected result and one limit of that evidence.
  • Operations question: What would a wrong assumption change in dev, staging and prod clusters?
  • Security question: Which credentials, secrets, roles, signatures or policy rules would be critical?
  • Recovery: Explain whether Git revert, sync rollback, suspend, manual drift correction or secret rotation is required.

A023. Secret Management

  • Task: name policy impact and explicitly relate the observation to Secret Management.
  • Evidence: Write down at least one GitOps-adjacent command, one expected result and one limit of that evidence.
  • Operations question: What would a wrong assumption change in dev, staging and prod clusters?
  • Security question: Which credentials, secrets, roles, signatures or policy rules would be critical?
  • Recovery: Explain whether Git revert, sync rollback, suspend, manual drift correction or secret rotation is required.

A024. Kustomize

  • Task: describe feedback loop and explicitly relate the observation to Kustomize.
  • Evidence: Write down at least one GitOps-adjacent command, one expected result and one limit of that evidence.
  • Operations question: What would a wrong assumption change in dev, staging and prod clusters?
  • Security question: Which credentials, secrets, roles, signatures or policy rules would be critical?
  • Recovery: Explain whether Git revert, sync rollback, suspend, manual drift correction or secret rotation is required.

A025. Helm

  • Task: document desired state and explicitly relate the observation to Helm.
  • Evidence: Write down at least one GitOps-adjacent command, one expected result and one limit of that evidence.
  • Operations question: What would a wrong assumption change in dev, staging and prod clusters?
  • Security question: Which credentials, secrets, roles, signatures or policy rules would be critical?
  • Recovery: Explain whether Git revert, sync rollback, suspend, manual drift correction or secret rotation is required.

A026. Argo CD Applications

  • Task: identify source and commit and explicitly relate the observation to Argo CD Applications.
  • Evidence: Write down at least one GitOps-adjacent command, one expected result and one limit of that evidence.
  • Operations question: What would a wrong assumption change in dev, staging and prod clusters?
  • Security question: Which credentials, secrets, roles, signatures or policy rules would be critical?
  • Recovery: Explain whether Git revert, sync rollback, suspend, manual drift correction or secret rotation is required.

A027. Flux Sources

  • Task: explain reconciliation path and explicitly relate the observation to Flux Sources.
  • Evidence: Write down at least one GitOps-adjacent command, one expected result and one limit of that evidence.
  • Operations question: What would a wrong assumption change in dev, staging and prod clusters?
  • Security question: Which credentials, secrets, roles, signatures or policy rules would be critical?
  • Recovery: Explain whether Git revert, sync rollback, suspend, manual drift correction or secret rotation is required.

A028. Promotion

  • Task: prove drift and explicitly relate the observation to Promotion.
  • Evidence: Write down at least one GitOps-adjacent command, one expected result and one limit of that evidence.
  • Operations question: What would a wrong assumption change in dev, staging and prod clusters?
  • Security question: Which credentials, secrets, roles, signatures or policy rules would be critical?
  • Recovery: Explain whether Git revert, sync rollback, suspend, manual drift correction or secret rotation is required.

A029. Pull Requests

  • Task: check Kustomize or Helm rendering and explicitly relate the observation to Pull Requests.
  • Evidence: Write down at least one GitOps-adjacent command, one expected result and one limit of that evidence.
  • Operations question: What would a wrong assumption change in dev, staging and prod clusters?
  • Security question: Which credentials, secrets, roles, signatures or policy rules would be critical?
  • Recovery: Explain whether Git revert, sync rollback, suspend, manual drift correction or secret rotation is required.

A030. Rollbacks

  • Task: read Argo CD or Flux resource and explicitly relate the observation to Rollbacks.
  • Evidence: Write down at least one GitOps-adjacent command, one expected result and one limit of that evidence.
  • Operations question: What would a wrong assumption change in dev, staging and prod clusters?
  • Security question: Which credentials, secrets, roles, signatures or policy rules would be critical?
  • Recovery: Explain whether Git revert, sync rollback, suspend, manual drift correction or secret rotation is required.

A031. GitOps

  • Task: assess promotion risk and explicitly relate the observation to GitOps.
  • Evidence: Write down at least one GitOps-adjacent command, one expected result and one limit of that evidence.
  • Operations question: What would a wrong assumption change in dev, staging and prod clusters?
  • Security question: Which credentials, secrets, roles, signatures or policy rules would be critical?
  • Recovery: Explain whether Git revert, sync rollback, suspend, manual drift correction or secret rotation is required.

A032. Desired State

  • Task: write down rollback path and explicitly relate the observation to Desired State.
  • Evidence: Write down at least one GitOps-adjacent command, one expected result and one limit of that evidence.
  • Operations question: What would a wrong assumption change in dev, staging and prod clusters?
  • Security question: Which credentials, secrets, roles, signatures or policy rules would be critical?
  • Recovery: Explain whether Git revert, sync rollback, suspend, manual drift correction or secret rotation is required.

A033. Actual State

  • Task: mark secret boundary and explicitly relate the observation to Actual State.
  • Evidence: Write down at least one GitOps-adjacent command, one expected result and one limit of that evidence.
  • Operations question: What would a wrong assumption change in dev, staging and prod clusters?
  • Security question: Which credentials, secrets, roles, signatures or policy rules would be critical?
  • Recovery: Explain whether Git revert, sync rollback, suspend, manual drift correction or secret rotation is required.

A034. Reconciliation

  • Task: check RBAC and tenant boundary and explicitly relate the observation to Reconciliation.
  • Evidence: Write down at least one GitOps-adjacent command, one expected result and one limit of that evidence.
  • Operations question: What would a wrong assumption change in dev, staging and prod clusters?
  • Security question: Which credentials, secrets, roles, signatures or policy rules would be critical?
  • Recovery: Explain whether Git revert, sync rollback, suspend, manual drift correction or secret rotation is required.

A035. Drift

  • Task: name policy impact and explicitly relate the observation to Drift.
  • Evidence: Write down at least one GitOps-adjacent command, one expected result and one limit of that evidence.
  • Operations question: What would a wrong assumption change in dev, staging and prod clusters?
  • Security question: Which credentials, secrets, roles, signatures or policy rules would be critical?
  • Recovery: Explain whether Git revert, sync rollback, suspend, manual drift correction or secret rotation is required.

A036. Source of Truth

  • Task: describe feedback loop and explicitly relate the observation to Source of Truth.
  • Evidence: Write down at least one GitOps-adjacent command, one expected result and one limit of that evidence.
  • Operations question: What would a wrong assumption change in dev, staging and prod clusters?
  • Security question: Which credentials, secrets, roles, signatures or policy rules would be critical?
  • Recovery: Explain whether Git revert, sync rollback, suspend, manual drift correction or secret rotation is required.

A037. Pull Model

  • Task: document desired state and explicitly relate the observation to Pull Model.
  • Evidence: Write down at least one GitOps-adjacent command, one expected result and one limit of that evidence.
  • Operations question: What would a wrong assumption change in dev, staging and prod clusters?
  • Security question: Which credentials, secrets, roles, signatures or policy rules would be critical?
  • Recovery: Explain whether Git revert, sync rollback, suspend, manual drift correction or secret rotation is required.

A038. Argo CD Application

  • Task: identify source and commit and explicitly relate the observation to Argo CD Application.
  • Evidence: Write down at least one GitOps-adjacent command, one expected result and one limit of that evidence.
  • Operations question: What would a wrong assumption change in dev, staging and prod clusters?
  • Security question: Which credentials, secrets, roles, signatures or policy rules would be critical?
  • Recovery: Explain whether Git revert, sync rollback, suspend, manual drift correction or secret rotation is required.

A039. Argo CD AppProject

  • Task: explain reconciliation path and explicitly relate the observation to Argo CD AppProject.
  • Evidence: Write down at least one GitOps-adjacent command, one expected result and one limit of that evidence.
  • Operations question: What would a wrong assumption change in dev, staging and prod clusters?
  • Security question: Which credentials, secrets, roles, signatures or policy rules would be critical?
  • Recovery: Explain whether Git revert, sync rollback, suspend, manual drift correction or secret rotation is required.

A040. Flux Source

  • Task: prove drift and explicitly relate the observation to Flux Source.
  • Evidence: Write down at least one GitOps-adjacent command, one expected result and one limit of that evidence.
  • Operations question: What would a wrong assumption change in dev, staging and prod clusters?
  • Security question: Which credentials, secrets, roles, signatures or policy rules would be critical?
  • Recovery: Explain whether Git revert, sync rollback, suspend, manual drift correction or secret rotation is required.

A041. Flux Kustomization

  • Task: check Kustomize or Helm rendering and explicitly relate the observation to Flux Kustomization.
  • Evidence: Write down at least one GitOps-adjacent command, one expected result and one limit of that evidence.
  • Operations question: What would a wrong assumption change in dev, staging and prod clusters?
  • Security question: Which credentials, secrets, roles, signatures or policy rules would be critical?
  • Recovery: Explain whether Git revert, sync rollback, suspend, manual drift correction or secret rotation is required.

A042. HelmRelease

  • Task: read Argo CD or Flux resource and explicitly relate the observation to HelmRelease.
  • Evidence: Write down at least one GitOps-adjacent command, one expected result and one limit of that evidence.
  • Operations question: What would a wrong assumption change in dev, staging and prod clusters?
  • Security question: Which credentials, secrets, roles, signatures or policy rules would be critical?
  • Recovery: Explain whether Git revert, sync rollback, suspend, manual drift correction or secret rotation is required.

A043. Kustomize Overlay

  • Task: assess promotion risk and explicitly relate the observation to Kustomize Overlay.
  • Evidence: Write down at least one GitOps-adjacent command, one expected result and one limit of that evidence.
  • Operations question: What would a wrong assumption change in dev, staging and prod clusters?
  • Security question: Which credentials, secrets, roles, signatures or policy rules would be critical?
  • Recovery: Explain whether Git revert, sync rollback, suspend, manual drift correction or secret rotation is required.

A044. Promotion

  • Task: write down rollback path and explicitly relate the observation to Promotion.
  • Evidence: Write down at least one GitOps-adjacent command, one expected result and one limit of that evidence.
  • Operations question: What would a wrong assumption change in dev, staging and prod clusters?
  • Security question: Which credentials, secrets, roles, signatures or policy rules would be critical?
  • Recovery: Explain whether Git revert, sync rollback, suspend, manual drift correction or secret rotation is required.

A045. Progressive Delivery

  • Task: mark secret boundary and explicitly relate the observation to Progressive Delivery.
  • Evidence: Write down at least one GitOps-adjacent command, one expected result and one limit of that evidence.
  • Operations question: What would a wrong assumption change in dev, staging and prod clusters?
  • Security question: Which credentials, secrets, roles, signatures or policy rules would be critical?
  • Recovery: Explain whether Git revert, sync rollback, suspend, manual drift correction or secret rotation is required.

A046. Secret Management

  • Task: check RBAC and tenant boundary and explicitly relate the observation to Secret Management.
  • Evidence: Write down at least one GitOps-adjacent command, one expected result and one limit of that evidence.
  • Operations question: What would a wrong assumption change in dev, staging and prod clusters?
  • Security question: Which credentials, secrets, roles, signatures or policy rules would be critical?
  • Recovery: Explain whether Git revert, sync rollback, suspend, manual drift correction or secret rotation is required.

A047. Kustomize

  • Task: name policy impact and explicitly relate the observation to Kustomize.
  • Evidence: Write down at least one GitOps-adjacent command, one expected result and one limit of that evidence.
  • Operations question: What would a wrong assumption change in dev, staging and prod clusters?
  • Security question: Which credentials, secrets, roles, signatures or policy rules would be critical?
  • Recovery: Explain whether Git revert, sync rollback, suspend, manual drift correction or secret rotation is required.

A048. Helm

  • Task: describe feedback loop and explicitly relate the observation to Helm.
  • Evidence: Write down at least one GitOps-adjacent command, one expected result and one limit of that evidence.
  • Operations question: What would a wrong assumption change in dev, staging and prod clusters?
  • Security question: Which credentials, secrets, roles, signatures or policy rules would be critical?
  • Recovery: Explain whether Git revert, sync rollback, suspend, manual drift correction or secret rotation is required.

A049. Argo CD Applications

  • Task: document desired state and explicitly relate the observation to Argo CD Applications.
  • Evidence: Write down at least one GitOps-adjacent command, one expected result and one limit of that evidence.
  • Operations question: What would a wrong assumption change in dev, staging and prod clusters?
  • Security question: Which credentials, secrets, roles, signatures or policy rules would be critical?
  • Recovery: Explain whether Git revert, sync rollback, suspend, manual drift correction or secret rotation is required.

A050. Flux Sources

  • Task: identify source and commit and explicitly relate the observation to Flux Sources.
  • Evidence: Write down at least one GitOps-adjacent command, one expected result and one limit of that evidence.
  • Operations question: What would a wrong assumption change in dev, staging and prod clusters?
  • Security question: Which credentials, secrets, roles, signatures or policy rules would be critical?
  • Recovery: Explain whether Git revert, sync rollback, suspend, manual drift correction or secret rotation is required.

A051. Promotion

  • Task: explain reconciliation path and explicitly relate the observation to Promotion.
  • Evidence: Write down at least one GitOps-adjacent command, one expected result and one limit of that evidence.
  • Operations question: What would a wrong assumption change in dev, staging and prod clusters?
  • Security question: Which credentials, secrets, roles, signatures or policy rules would be critical?
  • Recovery: Explain whether Git revert, sync rollback, suspend, manual drift correction or secret rotation is required.

A052. Pull Requests

  • Task: prove drift and explicitly relate the observation to Pull Requests.
  • Evidence: Write down at least one GitOps-adjacent command, one expected result and one limit of that evidence.
  • Operations question: What would a wrong assumption change in dev, staging and prod clusters?
  • Security question: Which credentials, secrets, roles, signatures or policy rules would be critical?
  • Recovery: Explain whether Git revert, sync rollback, suspend, manual drift correction or secret rotation is required.

A053. Rollbacks

  • Task: check Kustomize or Helm rendering and explicitly relate the observation to Rollbacks.
  • Evidence: Write down at least one GitOps-adjacent command, one expected result and one limit of that evidence.
  • Operations question: What would a wrong assumption change in dev, staging and prod clusters?
  • Security question: Which credentials, secrets, roles, signatures or policy rules would be critical?
  • Recovery: Explain whether Git revert, sync rollback, suspend, manual drift correction or secret rotation is required.

A054. GitOps

  • Task: read Argo CD or Flux resource and explicitly relate the observation to GitOps.
  • Evidence: Write down at least one GitOps-adjacent command, one expected result and one limit of that evidence.
  • Operations question: What would a wrong assumption change in dev, staging and prod clusters?
  • Security question: Which credentials, secrets, roles, signatures or policy rules would be critical?
  • Recovery: Explain whether Git revert, sync rollback, suspend, manual drift correction or secret rotation is required.

A055. Desired State

  • Task: assess promotion risk and explicitly relate the observation to Desired State.
  • Evidence: Write down at least one GitOps-adjacent command, one expected result and one limit of that evidence.
  • Operations question: What would a wrong assumption change in dev, staging and prod clusters?
  • Security question: Which credentials, secrets, roles, signatures or policy rules would be critical?
  • Recovery: Explain whether Git revert, sync rollback, suspend, manual drift correction or secret rotation is required.

A056. Actual State

  • Task: write down rollback path and explicitly relate the observation to Actual State.
  • Evidence: Write down at least one GitOps-adjacent command, one expected result and one limit of that evidence.
  • Operations question: What would a wrong assumption change in dev, staging and prod clusters?
  • Security question: Which credentials, secrets, roles, signatures or policy rules would be critical?
  • Recovery: Explain whether Git revert, sync rollback, suspend, manual drift correction or secret rotation is required.

A057. Reconciliation

  • Task: mark secret boundary and explicitly relate the observation to Reconciliation.
  • Evidence: Write down at least one GitOps-adjacent command, one expected result and one limit of that evidence.
  • Operations question: What would a wrong assumption change in dev, staging and prod clusters?
  • Security question: Which credentials, secrets, roles, signatures or policy rules would be critical?
  • Recovery: Explain whether Git revert, sync rollback, suspend, manual drift correction or secret rotation is required.

A058. Drift

  • Task: check RBAC and tenant boundary and explicitly relate the observation to Drift.
  • Evidence: Write down at least one GitOps-adjacent command, one expected result and one limit of that evidence.
  • Operations question: What would a wrong assumption change in dev, staging and prod clusters?
  • Security question: Which credentials, secrets, roles, signatures or policy rules would be critical?
  • Recovery: Explain whether Git revert, sync rollback, suspend, manual drift correction or secret rotation is required.

A059. Source of Truth

  • Task: name policy impact and explicitly relate the observation to Source of Truth.
  • Evidence: Write down at least one GitOps-adjacent command, one expected result and one limit of that evidence.
  • Operations question: What would a wrong assumption change in dev, staging and prod clusters?
  • Security question: Which credentials, secrets, roles, signatures or policy rules would be critical?
  • Recovery: Explain whether Git revert, sync rollback, suspend, manual drift correction or secret rotation is required.

A060. Pull Model

  • Task: describe feedback loop and explicitly relate the observation to Pull Model.
  • Evidence: Write down at least one GitOps-adjacent command, one expected result and one limit of that evidence.
  • Operations question: What would a wrong assumption change in dev, staging and prod clusters?
  • Security question: Which credentials, secrets, roles, signatures or policy rules would be critical?
  • Recovery: Explain whether Git revert, sync rollback, suspend, manual drift correction or secret rotation is required.

A061. Argo CD Application

  • Task: document desired state and explicitly relate the observation to Argo CD Application.
  • Evidence: Write down at least one GitOps-adjacent command, one expected result and one limit of that evidence.
  • Operations question: What would a wrong assumption change in dev, staging and prod clusters?
  • Security question: Which credentials, secrets, roles, signatures or policy rules would be critical?
  • Recovery: Explain whether Git revert, sync rollback, suspend, manual drift correction or secret rotation is required.

A062. Argo CD AppProject

  • Task: identify source and commit and explicitly relate the observation to Argo CD AppProject.
  • Evidence: Write down at least one GitOps-adjacent command, one expected result and one limit of that evidence.
  • Operations question: What would a wrong assumption change in dev, staging and prod clusters?
  • Security question: Which credentials, secrets, roles, signatures or policy rules would be critical?
  • Recovery: Explain whether Git revert, sync rollback, suspend, manual drift correction or secret rotation is required.

A063. Flux Source

  • Task: explain reconciliation path and explicitly relate the observation to Flux Source.
  • Evidence: Write down at least one GitOps-adjacent command, one expected result and one limit of that evidence.
  • Operations question: What would a wrong assumption change in dev, staging and prod clusters?
  • Security question: Which credentials, secrets, roles, signatures or policy rules would be critical?
  • Recovery: Explain whether Git revert, sync rollback, suspend, manual drift correction or secret rotation is required.

A064. Flux Kustomization

  • Task: prove drift and explicitly relate the observation to Flux Kustomization.
  • Evidence: Write down at least one GitOps-adjacent command, one expected result and one limit of that evidence.
  • Operations question: What would a wrong assumption change in dev, staging and prod clusters?
  • Security question: Which credentials, secrets, roles, signatures or policy rules would be critical?
  • Recovery: Explain whether Git revert, sync rollback, suspend, manual drift correction or secret rotation is required.

A065. HelmRelease

  • Task: check Kustomize or Helm rendering and explicitly relate the observation to HelmRelease.
  • Evidence: Write down at least one GitOps-adjacent command, one expected result and one limit of that evidence.
  • Operations question: What would a wrong assumption change in dev, staging and prod clusters?
  • Security question: Which credentials, secrets, roles, signatures or policy rules would be critical?
  • Recovery: Explain whether Git revert, sync rollback, suspend, manual drift correction or secret rotation is required.

A066. Kustomize Overlay

  • Task: read Argo CD or Flux resource and explicitly relate the observation to Kustomize Overlay.
  • Evidence: Write down at least one GitOps-adjacent command, one expected result and one limit of that evidence.
  • Operations question: What would a wrong assumption change in dev, staging and prod clusters?
  • Security question: Which credentials, secrets, roles, signatures or policy rules would be critical?
  • Recovery: Explain whether Git revert, sync rollback, suspend, manual drift correction or secret rotation is required.

A067. Promotion

  • Task: assess promotion risk and explicitly relate the observation to Promotion.
  • Evidence: Write down at least one GitOps-adjacent command, one expected result and one limit of that evidence.
  • Operations question: What would a wrong assumption change in dev, staging and prod clusters?
  • Security question: Which credentials, secrets, roles, signatures or policy rules would be critical?
  • Recovery: Explain whether Git revert, sync rollback, suspend, manual drift correction or secret rotation is required.

A068. Progressive Delivery

  • Task: write down rollback path and explicitly relate the observation to Progressive Delivery.
  • Evidence: Write down at least one GitOps-adjacent command, one expected result and one limit of that evidence.
  • Operations question: What would a wrong assumption change in dev, staging and prod clusters?
  • Security question: Which credentials, secrets, roles, signatures or policy rules would be critical?
  • Recovery: Explain whether Git revert, sync rollback, suspend, manual drift correction or secret rotation is required.

A069. Secret Management

  • Task: mark secret boundary and explicitly relate the observation to Secret Management.
  • Evidence: Write down at least one GitOps-adjacent command, one expected result and one limit of that evidence.
  • Operations question: What would a wrong assumption change in dev, staging and prod clusters?
  • Security question: Which credentials, secrets, roles, signatures or policy rules would be critical?
  • Recovery: Explain whether Git revert, sync rollback, suspend, manual drift correction or secret rotation is required.

A070. Kustomize

  • Task: check RBAC and tenant boundary and explicitly relate the observation to Kustomize.
  • Evidence: Write down at least one GitOps-adjacent command, one expected result and one limit of that evidence.
  • Operations question: What would a wrong assumption change in dev, staging and prod clusters?
  • Security question: Which credentials, secrets, roles, signatures or policy rules would be critical?
  • Recovery: Explain whether Git revert, sync rollback, suspend, manual drift correction or secret rotation is required.

A071. Helm

  • Task: name policy impact and explicitly relate the observation to Helm.
  • Evidence: Write down at least one GitOps-adjacent command, one expected result and one limit of that evidence.
  • Operations question: What would a wrong assumption change in dev, staging and prod clusters?
  • Security question: Which credentials, secrets, roles, signatures or policy rules would be critical?
  • Recovery: Explain whether Git revert, sync rollback, suspend, manual drift correction or secret rotation is required.

A072. Argo CD Applications

  • Task: describe feedback loop and explicitly relate the observation to Argo CD Applications.
  • Evidence: Write down at least one GitOps-adjacent command, one expected result and one limit of that evidence.
  • Operations question: What would a wrong assumption change in dev, staging and prod clusters?
  • Security question: Which credentials, secrets, roles, signatures or policy rules would be critical?
  • Recovery: Explain whether Git revert, sync rollback, suspend, manual drift correction or secret rotation is required.

A073. Flux Sources

  • Task: document desired state and explicitly relate the observation to Flux Sources.
  • Evidence: Write down at least one GitOps-adjacent command, one expected result and one limit of that evidence.
  • Operations question: What would a wrong assumption change in dev, staging and prod clusters?
  • Security question: Which credentials, secrets, roles, signatures or policy rules would be critical?
  • Recovery: Explain whether Git revert, sync rollback, suspend, manual drift correction or secret rotation is required.

A074. Promotion

  • Task: identify source and commit and explicitly relate the observation to Promotion.
  • Evidence: Write down at least one GitOps-adjacent command, one expected result and one limit of that evidence.
  • Operations question: What would a wrong assumption change in dev, staging and prod clusters?
  • Security question: Which credentials, secrets, roles, signatures or policy rules would be critical?
  • Recovery: Explain whether Git revert, sync rollback, suspend, manual drift correction or secret rotation is required.

A075. Pull Requests

  • Task: explain reconciliation path and explicitly relate the observation to Pull Requests.
  • Evidence: Write down at least one GitOps-adjacent command, one expected result and one limit of that evidence.
  • Operations question: What would a wrong assumption change in dev, staging and prod clusters?
  • Security question: Which credentials, secrets, roles, signatures or policy rules would be critical?
  • Recovery: Explain whether Git revert, sync rollback, suspend, manual drift correction or secret rotation is required.

A076. Rollbacks

  • Task: prove drift and explicitly relate the observation to Rollbacks.
  • Evidence: Write down at least one GitOps-adjacent command, one expected result and one limit of that evidence.
  • Operations question: What would a wrong assumption change in dev, staging and prod clusters?
  • Security question: Which credentials, secrets, roles, signatures or policy rules would be critical?
  • Recovery: Explain whether Git revert, sync rollback, suspend, manual drift correction or secret rotation is required.

A077. GitOps

  • Task: check Kustomize or Helm rendering and explicitly relate the observation to GitOps.
  • Evidence: Write down at least one GitOps-adjacent command, one expected result and one limit of that evidence.
  • Operations question: What would a wrong assumption change in dev, staging and prod clusters?
  • Security question: Which credentials, secrets, roles, signatures or policy rules would be critical?
  • Recovery: Explain whether Git revert, sync rollback, suspend, manual drift correction or secret rotation is required.

A078. Desired State

  • Task: read Argo CD or Flux resource and explicitly relate the observation to Desired State.
  • Evidence: Write down at least one GitOps-adjacent command, one expected result and one limit of that evidence.
  • Operations question: What would a wrong assumption change in dev, staging and prod clusters?
  • Security question: Which credentials, secrets, roles, signatures or policy rules would be critical?
  • Recovery: Explain whether Git revert, sync rollback, suspend, manual drift correction or secret rotation is required.

A079. Actual State

  • Task: assess promotion risk and explicitly relate the observation to Actual State.
  • Evidence: Write down at least one GitOps-adjacent command, one expected result and one limit of that evidence.
  • Operations question: What would a wrong assumption change in dev, staging and prod clusters?
  • Security question: Which credentials, secrets, roles, signatures or policy rules would be critical?
  • Recovery: Explain whether Git revert, sync rollback, suspend, manual drift correction or secret rotation is required.

A080. Reconciliation

  • Task: write down rollback path and explicitly relate the observation to Reconciliation.
  • Evidence: Write down at least one GitOps-adjacent command, one expected result and one limit of that evidence.
  • Operations question: What would a wrong assumption change in dev, staging and prod clusters?
  • Security question: Which credentials, secrets, roles, signatures or policy rules would be critical?
  • Recovery: Explain whether Git revert, sync rollback, suspend, manual drift correction or secret rotation is required.

A081. Drift

  • Task: mark secret boundary and explicitly relate the observation to Drift.
  • Evidence: Write down at least one GitOps-adjacent command, one expected result and one limit of that evidence.
  • Operations question: What would a wrong assumption change in dev, staging and prod clusters?
  • Security question: Which credentials, secrets, roles, signatures or policy rules would be critical?
  • Recovery: Explain whether Git revert, sync rollback, suspend, manual drift correction or secret rotation is required.

A082. Source of Truth

  • Task: check RBAC and tenant boundary and explicitly relate the observation to Source of Truth.
  • Evidence: Write down at least one GitOps-adjacent command, one expected result and one limit of that evidence.
  • Operations question: What would a wrong assumption change in dev, staging and prod clusters?
  • Security question: Which credentials, secrets, roles, signatures or policy rules would be critical?
  • Recovery: Explain whether Git revert, sync rollback, suspend, manual drift correction or secret rotation is required.

A083. Pull Model

  • Task: name policy impact and explicitly relate the observation to Pull Model.
  • Evidence: Write down at least one GitOps-adjacent command, one expected result and one limit of that evidence.
  • Operations question: What would a wrong assumption change in dev, staging and prod clusters?
  • Security question: Which credentials, secrets, roles, signatures or policy rules would be critical?
  • Recovery: Explain whether Git revert, sync rollback, suspend, manual drift correction or secret rotation is required.

A084. Argo CD Application

  • Task: describe feedback loop and explicitly relate the observation to Argo CD Application.
  • Evidence: Write down at least one GitOps-adjacent command, one expected result and one limit of that evidence.
  • Operations question: What would a wrong assumption change in dev, staging and prod clusters?
  • Security question: Which credentials, secrets, roles, signatures or policy rules would be critical?
  • Recovery: Explain whether Git revert, sync rollback, suspend, manual drift correction or secret rotation is required.
04 / 06

Official Sources and Scope

The material is aligned with public GitOps and Kubernetes documentation. Argo CD, Flux, Kustomize, Helm, policy controllers and secret tools are positioned where they represent common GitOps workflows. An example artifact is not an installation promise for a specific cluster.

  • OpenGitOps: https://opengitops.dev/
  • OpenGitOps Principles: https://github.com/open-gitops/documents/blob/main/PRINCIPLES.md
  • Argo CD Documentation: https://argo-cd.readthedocs.io/en/stable/
  • Argo CD Declarative Setup: https://argo-cd.readthedocs.io/en/stable/operator-manual/declarative-setup/
  • Argo CD Project Page: https://argoproj.github.io/cd/
  • Flux Documentation: https://fluxcd.io/flux/
  • Flux Core Concepts: https://fluxcd.io/flux/concepts/
  • CNCF GitOps Certified Associate (CGOA): https://www.cncf.io/training/certification/cgoa/
  • Linux Foundation Certified GitOps Associate (CGOA): https://training.linuxfoundation.org/certification/certified-gitops-associate-cgoa/
05 / 06

Additional Review Drills

Use these drills when the primary task is complete and the learner needs another pass over operational reasoning. They are intentionally evidence-oriented and can be answered with local GitOps artifacts.

Drill 01: desired state

  • State which source, controller or environment is affected by desired state.
  • Name one command or manifest field that produces evidence.
  • Explain what can be concluded from that evidence and what cannot be concluded from it.
  • Describe the safest recovery path for a shared GitOps platform.

Drill 02: source commit

  • State which source, controller or environment is affected by source commit.
  • Name one command or manifest field that produces evidence.
  • Explain what can be concluded from that evidence and what cannot be concluded from it.
  • Describe the safest recovery path for a shared GitOps platform.

Drill 03: reconciliation

  • State which source, controller or environment is affected by reconciliation.
  • Name one command or manifest field that produces evidence.
  • Explain what can be concluded from that evidence and what cannot be concluded from it.
  • Describe the safest recovery path for a shared GitOps platform.

Drill 04: drift

  • State which source, controller or environment is affected by drift.
  • Name one command or manifest field that produces evidence.
  • Explain what can be concluded from that evidence and what cannot be concluded from it.
  • Describe the safest recovery path for a shared GitOps platform.

Drill 05: Argo CD Application

  • State which source, controller or environment is affected by Argo CD Application.
  • Name one command or manifest field that produces evidence.
  • Explain what can be concluded from that evidence and what cannot be concluded from it.
  • Describe the safest recovery path for a shared GitOps platform.

Drill 06: Flux Kustomization

  • State which source, controller or environment is affected by Flux Kustomization.
  • Name one command or manifest field that produces evidence.
  • Explain what can be concluded from that evidence and what cannot be concluded from it.
  • Describe the safest recovery path for a shared GitOps platform.

Drill 07: Kustomize overlay

  • State which source, controller or environment is affected by Kustomize overlay.
  • Name one command or manifest field that produces evidence.
  • Explain what can be concluded from that evidence and what cannot be concluded from it.
  • Describe the safest recovery path for a shared GitOps platform.

Drill 08: HelmRelease

  • State which source, controller or environment is affected by HelmRelease.
  • Name one command or manifest field that produces evidence.
  • Explain what can be concluded from that evidence and what cannot be concluded from it.
  • Describe the safest recovery path for a shared GitOps platform.

Drill 09: secret management

  • State which source, controller or environment is affected by secret management.
  • Name one command or manifest field that produces evidence.
  • Explain what can be concluded from that evidence and what cannot be concluded from it.
  • Describe the safest recovery path for a shared GitOps platform.

Drill 10: RBAC boundary

  • State which source, controller or environment is affected by RBAC boundary.
  • Name one command or manifest field that produces evidence.
  • Explain what can be concluded from that evidence and what cannot be concluded from it.
  • Describe the safest recovery path for a shared GitOps platform.

Drill 11: policy gate

  • State which source, controller or environment is affected by policy gate.
  • Name one command or manifest field that produces evidence.
  • Explain what can be concluded from that evidence and what cannot be concluded from it.
  • Describe the safest recovery path for a shared GitOps platform.

Drill 12: rollback

  • State which source, controller or environment is affected by rollback.
  • Name one command or manifest field that produces evidence.
  • Explain what can be concluded from that evidence and what cannot be concluded from it.
  • Describe the safest recovery path for a shared GitOps platform.

Drill 13: desired state

  • State which source, controller or environment is affected by desired state.
  • Name one command or manifest field that produces evidence.
  • Explain what can be concluded from that evidence and what cannot be concluded from it.
  • Describe the safest recovery path for a shared GitOps platform.

Drill 14: source commit

  • State which source, controller or environment is affected by source commit.
  • Name one command or manifest field that produces evidence.
  • Explain what can be concluded from that evidence and what cannot be concluded from it.
  • Describe the safest recovery path for a shared GitOps platform.

Drill 15: reconciliation

  • State which source, controller or environment is affected by reconciliation.
  • Name one command or manifest field that produces evidence.
  • Explain what can be concluded from that evidence and what cannot be concluded from it.
  • Describe the safest recovery path for a shared GitOps platform.

Drill 16: drift

  • State which source, controller or environment is affected by drift.
  • Name one command or manifest field that produces evidence.
  • Explain what can be concluded from that evidence and what cannot be concluded from it.
  • Describe the safest recovery path for a shared GitOps platform.
06 / 06

GOP · Orthevs Academy

31 modules as one continuous learning path.

The sequence remains unchanged: from the lab skeleton through technical foundations and operating models to final troubleshooting. The technical directory names are deliberately preserved.

Orthevs – Engineering the foundation for what comes next.

Orthevs as an app

Install Orthevs

The Orthevs web app can be installed on supported mobile devices and desktop browsers.

iPhone and iPad

Open Orthevs in Safari. Tap Share, then Add to Home Screen. Enable Open as Web App if offered, then tap Add.

Android

For the web app, open the browser menu and choose Install app or Add to Home screen. Confirm the installation.

Desktop browser

Open the browser menu or the install icon in the address bar, then choose Install app or Add to Dock.

Web app installation depends on your browser. If no install prompt appears, follow the browser steps shown above.