Workshop-Wiki · Englisch

GitOps Exercises: Advanced Security (EN)

These exercises belong to the workshop level Advanced Security. Every task requires traceable evidence: source, commit, desired state, rendered state, controller relationship, risk and recovery path.

Inhaltssprache · EnglischGröße · 71.6 KBexercises/04-advanced-security-exercises-gitops-EN.md

Workshop-Beispiele als ZIP

Lernstand in der Web-App

Kapitel als gelesen markieren, Lesefortschritt sehen und Praxismodule abhaken: Diese Funktionen stehen nach Aktivierung der optionalen Web-App zur Verfügung. Der Workshop-Fortschritt ergibt sich automatisch aus den Kapiteln aller Dokumentseiten. Deine Auswahl bleibt auf diesem Gerät; es gibt kein Konto und keinen Serverabgleich. Eine Installation ist nicht erforderlich. Beim Widerruf in den Datenschutz-Einstellungen wird der Lernstand gelöscht.

Lesefortschritt0%

0%

0 / 6 Kapitel gelesen

Weitere SprachfassungDeutsch ↗Griechisch ↗

GitOps Exercises: Advanced Security (EN)

These exercises belong to the workshop level Advanced Security. Every task requires traceable evidence: source, commit, desired state, rendered state, controller relationship, risk and recovery path.

Submission Format

Do not store production secrets. Document instead:

commands used,
relevant manifest excerpts,
affected GitOps source and target environment,
assessment of drift, promotion, rollback, RBAC and secrets,
recovery or rollback path.

Required Tasks

Task 01: Secret Management

Goal: Examine Secret Management in an isolated GitOps lab and document the effect.

Use an example in examples/ or create a local manifest lab.
Record source, commit, path, target namespace and expected controller.
Check YAML structure and rendering boundaries with local commands or static analysis.
Describe how Argo CD or Flux would observe and report the state.
Justify the matching rollback, suspend, revert or rotation path.

Success criterion: Another person can see which desired state is versioned and how it would be reconciled.

Task 02: RBAC

Goal: Examine RBAC in an isolated GitOps lab and document the effect.

Use an example in examples/ or create a local manifest lab.
Record source, commit, path, target namespace and expected controller.
Check YAML structure and rendering boundaries with local commands or static analysis.
Describe how Argo CD or Flux would observe and report the state.
Justify the matching rollback, suspend, revert or rotation path.

Success criterion: Another person can see which desired state is versioned and how it would be reconciled.

Task 03: Policy

Goal: Examine Policy in an isolated GitOps lab and document the effect.

Use an example in examples/ or create a local manifest lab.
Record source, commit, path, target namespace and expected controller.
Check YAML structure and rendering boundaries with local commands or static analysis.
Describe how Argo CD or Flux would observe and report the state.
Justify the matching rollback, suspend, revert or rotation path.

Success criterion: Another person can see which desired state is versioned and how it would be reconciled.

Task 04: Supply Chain

Goal: Examine Supply Chain in an isolated GitOps lab and document the effect.

Use an example in examples/ or create a local manifest lab.
Record source, commit, path, target namespace and expected controller.
Check YAML structure and rendering boundaries with local commands or static analysis.
Describe how Argo CD or Flux would observe and report the state.
Justify the matching rollback, suspend, revert or rotation path.

Success criterion: Another person can see which desired state is versioned and how it would be reconciled.

Task 05: Signaturen

Goal: Examine Signaturen in an isolated GitOps lab and document the effect.

Use an example in examples/ or create a local manifest lab.
Record source, commit, path, target namespace and expected controller.
Check YAML structure and rendering boundaries with local commands or static analysis.
Describe how Argo CD or Flux would observe and report the state.
Justify the matching rollback, suspend, revert or rotation path.

Success criterion: Another person can see which desired state is versioned and how it would be reconciled.

Task 06: Drift- und Incident-Response

Goal: Examine Drift- und Incident-Response in an isolated GitOps lab and document the effect.

Use an example in examples/ or create a local manifest lab.
Record source, commit, path, target namespace and expected controller.
Check YAML structure and rendering boundaries with local commands or static analysis.
Describe how Argo CD or Flux would observe and report the state.
Justify the matching rollback, suspend, revert or rotation path.

Success criterion: Another person can see which desired state is versioned and how it would be reconciled.

Task 07: Secret Management

Goal: Examine Secret Management in an isolated GitOps lab and document the effect.

Use an example in examples/ or create a local manifest lab.
Record source, commit, path, target namespace and expected controller.
Check YAML structure and rendering boundaries with local commands or static analysis.
Describe how Argo CD or Flux would observe and report the state.
Justify the matching rollback, suspend, revert or rotation path.

Success criterion: Another person can see which desired state is versioned and how it would be reconciled.

Task 08: RBAC

Goal: Examine RBAC in an isolated GitOps lab and document the effect.

Use an example in examples/ or create a local manifest lab.
Record source, commit, path, target namespace and expected controller.
Check YAML structure and rendering boundaries with local commands or static analysis.
Describe how Argo CD or Flux would observe and report the state.
Justify the matching rollback, suspend, revert or rotation path.

Success criterion: Another person can see which desired state is versioned and how it would be reconciled.

Task 09: Policy

Goal: Examine Policy in an isolated GitOps lab and document the effect.

Use an example in examples/ or create a local manifest lab.
Record source, commit, path, target namespace and expected controller.
Check YAML structure and rendering boundaries with local commands or static analysis.
Describe how Argo CD or Flux would observe and report the state.
Justify the matching rollback, suspend, revert or rotation path.

Success criterion: Another person can see which desired state is versioned and how it would be reconciled.

Task 10: Supply Chain

Goal: Examine Supply Chain in an isolated GitOps lab and document the effect.

Use an example in examples/ or create a local manifest lab.
Record source, commit, path, target namespace and expected controller.
Check YAML structure and rendering boundaries with local commands or static analysis.
Describe how Argo CD or Flux would observe and report the state.
Justify the matching rollback, suspend, revert or rotation path.

Success criterion: Another person can see which desired state is versioned and how it would be reconciled.

Task 11: Signaturen

Goal: Examine Signaturen in an isolated GitOps lab and document the effect.

Use an example in examples/ or create a local manifest lab.
Record source, commit, path, target namespace and expected controller.
Check YAML structure and rendering boundaries with local commands or static analysis.
Describe how Argo CD or Flux would observe and report the state.
Justify the matching rollback, suspend, revert or rotation path.

Success criterion: Another person can see which desired state is versioned and how it would be reconciled.

Task 12: Drift- und Incident-Response

Goal: Examine Drift- und Incident-Response in an isolated GitOps lab and document the effect.

Use an example in examples/ or create a local manifest lab.
Record source, commit, path, target namespace and expected controller.
Check YAML structure and rendering boundaries with local commands or static analysis.
Describe how Argo CD or Flux would observe and report the state.
Justify the matching rollback, suspend, revert or rotation path.

Success criterion: Another person can see which desired state is versioned and how it would be reconciled.

Task 13: Secret Management

Goal: Examine Secret Management in an isolated GitOps lab and document the effect.

Use an example in examples/ or create a local manifest lab.
Record source, commit, path, target namespace and expected controller.
Check YAML structure and rendering boundaries with local commands or static analysis.
Describe how Argo CD or Flux would observe and report the state.
Justify the matching rollback, suspend, revert or rotation path.

Success criterion: Another person can see which desired state is versioned and how it would be reconciled.

Task 14: RBAC

Goal: Examine RBAC in an isolated GitOps lab and document the effect.

Use an example in examples/ or create a local manifest lab.
Record source, commit, path, target namespace and expected controller.
Check YAML structure and rendering boundaries with local commands or static analysis.
Describe how Argo CD or Flux would observe and report the state.
Justify the matching rollback, suspend, revert or rotation path.

Success criterion: Another person can see which desired state is versioned and how it would be reconciled.

Task 15: Policy

Goal: Examine Policy in an isolated GitOps lab and document the effect.

Use an example in examples/ or create a local manifest lab.
Record source, commit, path, target namespace and expected controller.
Check YAML structure and rendering boundaries with local commands or static analysis.
Describe how Argo CD or Flux would observe and report the state.
Justify the matching rollback, suspend, revert or rotation path.

Success criterion: Another person can see which desired state is versioned and how it would be reconciled.

Task 16: Supply Chain

Goal: Examine Supply Chain in an isolated GitOps lab and document the effect.

Use an example in examples/ or create a local manifest lab.
Record source, commit, path, target namespace and expected controller.
Check YAML structure and rendering boundaries with local commands or static analysis.
Describe how Argo CD or Flux would observe and report the state.
Justify the matching rollback, suspend, revert or rotation path.

Success criterion: Another person can see which desired state is versioned and how it would be reconciled.

Task 17: Signaturen

Goal: Examine Signaturen in an isolated GitOps lab and document the effect.

Use an example in examples/ or create a local manifest lab.
Record source, commit, path, target namespace and expected controller.
Check YAML structure and rendering boundaries with local commands or static analysis.
Describe how Argo CD or Flux would observe and report the state.
Justify the matching rollback, suspend, revert or rotation path.

Success criterion: Another person can see which desired state is versioned and how it would be reconciled.

Task 18: Drift- und Incident-Response

Goal: Examine Drift- und Incident-Response in an isolated GitOps lab and document the effect.

Use an example in examples/ or create a local manifest lab.
Record source, commit, path, target namespace and expected controller.
Check YAML structure and rendering boundaries with local commands or static analysis.
Describe how Argo CD or Flux would observe and report the state.
Justify the matching rollback, suspend, revert or rotation path.

Success criterion: Another person can see which desired state is versioned and how it would be reconciled.

Task 19: Secret Management

Goal: Examine Secret Management in an isolated GitOps lab and document the effect.

Use an example in examples/ or create a local manifest lab.
Record source, commit, path, target namespace and expected controller.
Check YAML structure and rendering boundaries with local commands or static analysis.
Describe how Argo CD or Flux would observe and report the state.
Justify the matching rollback, suspend, revert or rotation path.

Success criterion: Another person can see which desired state is versioned and how it would be reconciled.

Task 20: RBAC

Goal: Examine RBAC in an isolated GitOps lab and document the effect.

Use an example in examples/ or create a local manifest lab.
Record source, commit, path, target namespace and expected controller.
Check YAML structure and rendering boundaries with local commands or static analysis.
Describe how Argo CD or Flux would observe and report the state.
Justify the matching rollback, suspend, revert or rotation path.

Success criterion: Another person can see which desired state is versioned and how it would be reconciled.

Task 21: Policy

Goal: Examine Policy in an isolated GitOps lab and document the effect.

Use an example in examples/ or create a local manifest lab.
Record source, commit, path, target namespace and expected controller.
Check YAML structure and rendering boundaries with local commands or static analysis.
Describe how Argo CD or Flux would observe and report the state.
Justify the matching rollback, suspend, revert or rotation path.

Success criterion: Another person can see which desired state is versioned and how it would be reconciled.

Task 22: Supply Chain

Goal: Examine Supply Chain in an isolated GitOps lab and document the effect.

Use an example in examples/ or create a local manifest lab.
Record source, commit, path, target namespace and expected controller.
Check YAML structure and rendering boundaries with local commands or static analysis.
Describe how Argo CD or Flux would observe and report the state.
Justify the matching rollback, suspend, revert or rotation path.

Success criterion: Another person can see which desired state is versioned and how it would be reconciled.

Task 23: Signaturen

Goal: Examine Signaturen in an isolated GitOps lab and document the effect.

Use an example in examples/ or create a local manifest lab.
Record source, commit, path, target namespace and expected controller.
Check YAML structure and rendering boundaries with local commands or static analysis.
Describe how Argo CD or Flux would observe and report the state.
Justify the matching rollback, suspend, revert or rotation path.

Success criterion: Another person can see which desired state is versioned and how it would be reconciled.

Task 24: Drift- und Incident-Response

Goal: Examine Drift- und Incident-Response in an isolated GitOps lab and document the effect.

Use an example in examples/ or create a local manifest lab.
Record source, commit, path, target namespace and expected controller.
Check YAML structure and rendering boundaries with local commands or static analysis.
Describe how Argo CD or Flux would observe and report the state.
Justify the matching rollback, suspend, revert or rotation path.

Success criterion: Another person can see which desired state is versioned and how it would be reconciled.

Practice Appendix: Advanced Security Exercises

This appendix provides a backlog for longer trainings, reviews and repetition. Each task is small enough to verify with local YAML artifacts and a Git repository.

A001. Secret Management

Task: document desired state and explicitly relate the observation to Secret Management.
Evidence: Write down at least one GitOps-adjacent command, one expected result and one limit of that evidence.
Operations question: What would a wrong assumption change in dev, staging and prod clusters?
Security question: Which credentials, secrets, roles, signatures or policy rules would be critical?
Recovery: Explain whether Git revert, sync rollback, suspend, manual drift correction or secret rotation is required.

A002. RBAC

Task: identify source and commit and explicitly relate the observation to RBAC.
Evidence: Write down at least one GitOps-adjacent command, one expected result and one limit of that evidence.
Operations question: What would a wrong assumption change in dev, staging and prod clusters?
Security question: Which credentials, secrets, roles, signatures or policy rules would be critical?
Recovery: Explain whether Git revert, sync rollback, suspend, manual drift correction or secret rotation is required.

A003. Policy

Task: explain reconciliation path and explicitly relate the observation to Policy.
Evidence: Write down at least one GitOps-adjacent command, one expected result and one limit of that evidence.
Operations question: What would a wrong assumption change in dev, staging and prod clusters?
Security question: Which credentials, secrets, roles, signatures or policy rules would be critical?
Recovery: Explain whether Git revert, sync rollback, suspend, manual drift correction or secret rotation is required.

A004. Supply Chain

Task: prove drift and explicitly relate the observation to Supply Chain.
Evidence: Write down at least one GitOps-adjacent command, one expected result and one limit of that evidence.
Operations question: What would a wrong assumption change in dev, staging and prod clusters?
Security question: Which credentials, secrets, roles, signatures or policy rules would be critical?
Recovery: Explain whether Git revert, sync rollback, suspend, manual drift correction or secret rotation is required.

A005. Signaturen

Task: check Kustomize or Helm rendering and explicitly relate the observation to Signaturen.
Evidence: Write down at least one GitOps-adjacent command, one expected result and one limit of that evidence.
Operations question: What would a wrong assumption change in dev, staging and prod clusters?
Security question: Which credentials, secrets, roles, signatures or policy rules would be critical?
Recovery: Explain whether Git revert, sync rollback, suspend, manual drift correction or secret rotation is required.

A006. Drift- und Incident-Response

Task: read Argo CD or Flux resource and explicitly relate the observation to Drift- und Incident-Response.
Evidence: Write down at least one GitOps-adjacent command, one expected result and one limit of that evidence.
Operations question: What would a wrong assumption change in dev, staging and prod clusters?
Security question: Which credentials, secrets, roles, signatures or policy rules would be critical?
Recovery: Explain whether Git revert, sync rollback, suspend, manual drift correction or secret rotation is required.

A007. GitOps

Task: assess promotion risk and explicitly relate the observation to GitOps.
Evidence: Write down at least one GitOps-adjacent command, one expected result and one limit of that evidence.
Operations question: What would a wrong assumption change in dev, staging and prod clusters?
Security question: Which credentials, secrets, roles, signatures or policy rules would be critical?
Recovery: Explain whether Git revert, sync rollback, suspend, manual drift correction or secret rotation is required.

A008. Desired State

Task: write down rollback path and explicitly relate the observation to Desired State.
Evidence: Write down at least one GitOps-adjacent command, one expected result and one limit of that evidence.
Operations question: What would a wrong assumption change in dev, staging and prod clusters?
Security question: Which credentials, secrets, roles, signatures or policy rules would be critical?
Recovery: Explain whether Git revert, sync rollback, suspend, manual drift correction or secret rotation is required.

A009. Actual State

Task: mark secret boundary and explicitly relate the observation to Actual State.
Evidence: Write down at least one GitOps-adjacent command, one expected result and one limit of that evidence.
Operations question: What would a wrong assumption change in dev, staging and prod clusters?
Security question: Which credentials, secrets, roles, signatures or policy rules would be critical?
Recovery: Explain whether Git revert, sync rollback, suspend, manual drift correction or secret rotation is required.

A010. Reconciliation

Task: check RBAC and tenant boundary and explicitly relate the observation to Reconciliation.
Evidence: Write down at least one GitOps-adjacent command, one expected result and one limit of that evidence.
Operations question: What would a wrong assumption change in dev, staging and prod clusters?
Security question: Which credentials, secrets, roles, signatures or policy rules would be critical?
Recovery: Explain whether Git revert, sync rollback, suspend, manual drift correction or secret rotation is required.

A011. Drift

Task: name policy impact and explicitly relate the observation to Drift.
Evidence: Write down at least one GitOps-adjacent command, one expected result and one limit of that evidence.
Operations question: What would a wrong assumption change in dev, staging and prod clusters?
Security question: Which credentials, secrets, roles, signatures or policy rules would be critical?
Recovery: Explain whether Git revert, sync rollback, suspend, manual drift correction or secret rotation is required.

A012. Source of Truth

Task: describe feedback loop and explicitly relate the observation to Source of Truth.
Evidence: Write down at least one GitOps-adjacent command, one expected result and one limit of that evidence.
Operations question: What would a wrong assumption change in dev, staging and prod clusters?
Security question: Which credentials, secrets, roles, signatures or policy rules would be critical?
Recovery: Explain whether Git revert, sync rollback, suspend, manual drift correction or secret rotation is required.

A013. Pull Model

Task: document desired state and explicitly relate the observation to Pull Model.
Evidence: Write down at least one GitOps-adjacent command, one expected result and one limit of that evidence.
Operations question: What would a wrong assumption change in dev, staging and prod clusters?
Security question: Which credentials, secrets, roles, signatures or policy rules would be critical?
Recovery: Explain whether Git revert, sync rollback, suspend, manual drift correction or secret rotation is required.

A014. Argo CD Application

Task: identify source and commit and explicitly relate the observation to Argo CD Application.
Evidence: Write down at least one GitOps-adjacent command, one expected result and one limit of that evidence.
Operations question: What would a wrong assumption change in dev, staging and prod clusters?
Security question: Which credentials, secrets, roles, signatures or policy rules would be critical?
Recovery: Explain whether Git revert, sync rollback, suspend, manual drift correction or secret rotation is required.

A015. Argo CD AppProject

Task: explain reconciliation path and explicitly relate the observation to Argo CD AppProject.
Evidence: Write down at least one GitOps-adjacent command, one expected result and one limit of that evidence.
Operations question: What would a wrong assumption change in dev, staging and prod clusters?
Security question: Which credentials, secrets, roles, signatures or policy rules would be critical?
Recovery: Explain whether Git revert, sync rollback, suspend, manual drift correction or secret rotation is required.

A016. Flux Source

Task: prove drift and explicitly relate the observation to Flux Source.
Evidence: Write down at least one GitOps-adjacent command, one expected result and one limit of that evidence.
Operations question: What would a wrong assumption change in dev, staging and prod clusters?
Security question: Which credentials, secrets, roles, signatures or policy rules would be critical?
Recovery: Explain whether Git revert, sync rollback, suspend, manual drift correction or secret rotation is required.

A017. Flux Kustomization

Task: check Kustomize or Helm rendering and explicitly relate the observation to Flux Kustomization.
Evidence: Write down at least one GitOps-adjacent command, one expected result and one limit of that evidence.
Operations question: What would a wrong assumption change in dev, staging and prod clusters?
Security question: Which credentials, secrets, roles, signatures or policy rules would be critical?
Recovery: Explain whether Git revert, sync rollback, suspend, manual drift correction or secret rotation is required.

A018. HelmRelease

Task: read Argo CD or Flux resource and explicitly relate the observation to HelmRelease.
Evidence: Write down at least one GitOps-adjacent command, one expected result and one limit of that evidence.
Operations question: What would a wrong assumption change in dev, staging and prod clusters?
Security question: Which credentials, secrets, roles, signatures or policy rules would be critical?
Recovery: Explain whether Git revert, sync rollback, suspend, manual drift correction or secret rotation is required.

A019. Kustomize Overlay

Task: assess promotion risk and explicitly relate the observation to Kustomize Overlay.
Evidence: Write down at least one GitOps-adjacent command, one expected result and one limit of that evidence.
Operations question: What would a wrong assumption change in dev, staging and prod clusters?
Security question: Which credentials, secrets, roles, signatures or policy rules would be critical?
Recovery: Explain whether Git revert, sync rollback, suspend, manual drift correction or secret rotation is required.

A020. Promotion

Task: write down rollback path and explicitly relate the observation to Promotion.
Evidence: Write down at least one GitOps-adjacent command, one expected result and one limit of that evidence.
Operations question: What would a wrong assumption change in dev, staging and prod clusters?
Security question: Which credentials, secrets, roles, signatures or policy rules would be critical?
Recovery: Explain whether Git revert, sync rollback, suspend, manual drift correction or secret rotation is required.

A021. Progressive Delivery

Task: mark secret boundary and explicitly relate the observation to Progressive Delivery.
Evidence: Write down at least one GitOps-adjacent command, one expected result and one limit of that evidence.
Operations question: What would a wrong assumption change in dev, staging and prod clusters?
Security question: Which credentials, secrets, roles, signatures or policy rules would be critical?
Recovery: Explain whether Git revert, sync rollback, suspend, manual drift correction or secret rotation is required.

A022. Secret Management

Task: check RBAC and tenant boundary and explicitly relate the observation to Secret Management.
Evidence: Write down at least one GitOps-adjacent command, one expected result and one limit of that evidence.
Operations question: What would a wrong assumption change in dev, staging and prod clusters?
Security question: Which credentials, secrets, roles, signatures or policy rules would be critical?
Recovery: Explain whether Git revert, sync rollback, suspend, manual drift correction or secret rotation is required.

A023. Secret Management

Task: name policy impact and explicitly relate the observation to Secret Management.
Evidence: Write down at least one GitOps-adjacent command, one expected result and one limit of that evidence.
Operations question: What would a wrong assumption change in dev, staging and prod clusters?
Security question: Which credentials, secrets, roles, signatures or policy rules would be critical?
Recovery: Explain whether Git revert, sync rollback, suspend, manual drift correction or secret rotation is required.

A024. RBAC

Task: describe feedback loop and explicitly relate the observation to RBAC.
Evidence: Write down at least one GitOps-adjacent command, one expected result and one limit of that evidence.
Operations question: What would a wrong assumption change in dev, staging and prod clusters?
Security question: Which credentials, secrets, roles, signatures or policy rules would be critical?
Recovery: Explain whether Git revert, sync rollback, suspend, manual drift correction or secret rotation is required.

A025. Policy

Task: document desired state and explicitly relate the observation to Policy.
Evidence: Write down at least one GitOps-adjacent command, one expected result and one limit of that evidence.
Operations question: What would a wrong assumption change in dev, staging and prod clusters?
Security question: Which credentials, secrets, roles, signatures or policy rules would be critical?
Recovery: Explain whether Git revert, sync rollback, suspend, manual drift correction or secret rotation is required.

A026. Supply Chain

Task: identify source and commit and explicitly relate the observation to Supply Chain.
Evidence: Write down at least one GitOps-adjacent command, one expected result and one limit of that evidence.
Operations question: What would a wrong assumption change in dev, staging and prod clusters?
Security question: Which credentials, secrets, roles, signatures or policy rules would be critical?
Recovery: Explain whether Git revert, sync rollback, suspend, manual drift correction or secret rotation is required.

A027. Signaturen

Task: explain reconciliation path and explicitly relate the observation to Signaturen.
Evidence: Write down at least one GitOps-adjacent command, one expected result and one limit of that evidence.
Operations question: What would a wrong assumption change in dev, staging and prod clusters?
Security question: Which credentials, secrets, roles, signatures or policy rules would be critical?
Recovery: Explain whether Git revert, sync rollback, suspend, manual drift correction or secret rotation is required.

A028. Drift- und Incident-Response

Task: prove drift and explicitly relate the observation to Drift- und Incident-Response.
Evidence: Write down at least one GitOps-adjacent command, one expected result and one limit of that evidence.
Operations question: What would a wrong assumption change in dev, staging and prod clusters?
Security question: Which credentials, secrets, roles, signatures or policy rules would be critical?
Recovery: Explain whether Git revert, sync rollback, suspend, manual drift correction or secret rotation is required.

A029. GitOps

Task: check Kustomize or Helm rendering and explicitly relate the observation to GitOps.
Evidence: Write down at least one GitOps-adjacent command, one expected result and one limit of that evidence.
Operations question: What would a wrong assumption change in dev, staging and prod clusters?
Security question: Which credentials, secrets, roles, signatures or policy rules would be critical?
Recovery: Explain whether Git revert, sync rollback, suspend, manual drift correction or secret rotation is required.

A030. Desired State

Task: read Argo CD or Flux resource and explicitly relate the observation to Desired State.
Evidence: Write down at least one GitOps-adjacent command, one expected result and one limit of that evidence.
Operations question: What would a wrong assumption change in dev, staging and prod clusters?
Security question: Which credentials, secrets, roles, signatures or policy rules would be critical?
Recovery: Explain whether Git revert, sync rollback, suspend, manual drift correction or secret rotation is required.

A031. Actual State

Task: assess promotion risk and explicitly relate the observation to Actual State.
Evidence: Write down at least one GitOps-adjacent command, one expected result and one limit of that evidence.
Operations question: What would a wrong assumption change in dev, staging and prod clusters?
Security question: Which credentials, secrets, roles, signatures or policy rules would be critical?
Recovery: Explain whether Git revert, sync rollback, suspend, manual drift correction or secret rotation is required.

A032. Reconciliation

Task: write down rollback path and explicitly relate the observation to Reconciliation.
Evidence: Write down at least one GitOps-adjacent command, one expected result and one limit of that evidence.
Operations question: What would a wrong assumption change in dev, staging and prod clusters?
Security question: Which credentials, secrets, roles, signatures or policy rules would be critical?
Recovery: Explain whether Git revert, sync rollback, suspend, manual drift correction or secret rotation is required.

A033. Drift

Task: mark secret boundary and explicitly relate the observation to Drift.
Evidence: Write down at least one GitOps-adjacent command, one expected result and one limit of that evidence.
Operations question: What would a wrong assumption change in dev, staging and prod clusters?
Security question: Which credentials, secrets, roles, signatures or policy rules would be critical?
Recovery: Explain whether Git revert, sync rollback, suspend, manual drift correction or secret rotation is required.

A034. Source of Truth

Task: check RBAC and tenant boundary and explicitly relate the observation to Source of Truth.
Evidence: Write down at least one GitOps-adjacent command, one expected result and one limit of that evidence.
Operations question: What would a wrong assumption change in dev, staging and prod clusters?
Security question: Which credentials, secrets, roles, signatures or policy rules would be critical?
Recovery: Explain whether Git revert, sync rollback, suspend, manual drift correction or secret rotation is required.

A035. Pull Model

Task: name policy impact and explicitly relate the observation to Pull Model.
Evidence: Write down at least one GitOps-adjacent command, one expected result and one limit of that evidence.
Operations question: What would a wrong assumption change in dev, staging and prod clusters?
Security question: Which credentials, secrets, roles, signatures or policy rules would be critical?
Recovery: Explain whether Git revert, sync rollback, suspend, manual drift correction or secret rotation is required.

A036. Argo CD Application

Task: describe feedback loop and explicitly relate the observation to Argo CD Application.
Evidence: Write down at least one GitOps-adjacent command, one expected result and one limit of that evidence.
Operations question: What would a wrong assumption change in dev, staging and prod clusters?
Security question: Which credentials, secrets, roles, signatures or policy rules would be critical?
Recovery: Explain whether Git revert, sync rollback, suspend, manual drift correction or secret rotation is required.

A037. Argo CD AppProject

Task: document desired state and explicitly relate the observation to Argo CD AppProject.
Evidence: Write down at least one GitOps-adjacent command, one expected result and one limit of that evidence.
Operations question: What would a wrong assumption change in dev, staging and prod clusters?
Security question: Which credentials, secrets, roles, signatures or policy rules would be critical?
Recovery: Explain whether Git revert, sync rollback, suspend, manual drift correction or secret rotation is required.

A038. Flux Source

Task: identify source and commit and explicitly relate the observation to Flux Source.
Evidence: Write down at least one GitOps-adjacent command, one expected result and one limit of that evidence.
Operations question: What would a wrong assumption change in dev, staging and prod clusters?
Security question: Which credentials, secrets, roles, signatures or policy rules would be critical?
Recovery: Explain whether Git revert, sync rollback, suspend, manual drift correction or secret rotation is required.

A039. Flux Kustomization

Task: explain reconciliation path and explicitly relate the observation to Flux Kustomization.
Evidence: Write down at least one GitOps-adjacent command, one expected result and one limit of that evidence.
Operations question: What would a wrong assumption change in dev, staging and prod clusters?
Security question: Which credentials, secrets, roles, signatures or policy rules would be critical?
Recovery: Explain whether Git revert, sync rollback, suspend, manual drift correction or secret rotation is required.

A040. HelmRelease

Task: prove drift and explicitly relate the observation to HelmRelease.
Evidence: Write down at least one GitOps-adjacent command, one expected result and one limit of that evidence.
Operations question: What would a wrong assumption change in dev, staging and prod clusters?
Security question: Which credentials, secrets, roles, signatures or policy rules would be critical?
Recovery: Explain whether Git revert, sync rollback, suspend, manual drift correction or secret rotation is required.

A041. Kustomize Overlay

Task: check Kustomize or Helm rendering and explicitly relate the observation to Kustomize Overlay.
Evidence: Write down at least one GitOps-adjacent command, one expected result and one limit of that evidence.
Operations question: What would a wrong assumption change in dev, staging and prod clusters?
Security question: Which credentials, secrets, roles, signatures or policy rules would be critical?
Recovery: Explain whether Git revert, sync rollback, suspend, manual drift correction or secret rotation is required.

A042. Promotion

Task: read Argo CD or Flux resource and explicitly relate the observation to Promotion.
Evidence: Write down at least one GitOps-adjacent command, one expected result and one limit of that evidence.
Operations question: What would a wrong assumption change in dev, staging and prod clusters?
Security question: Which credentials, secrets, roles, signatures or policy rules would be critical?
Recovery: Explain whether Git revert, sync rollback, suspend, manual drift correction or secret rotation is required.

A043. Progressive Delivery

Task: assess promotion risk and explicitly relate the observation to Progressive Delivery.
Evidence: Write down at least one GitOps-adjacent command, one expected result and one limit of that evidence.
Operations question: What would a wrong assumption change in dev, staging and prod clusters?
Security question: Which credentials, secrets, roles, signatures or policy rules would be critical?
Recovery: Explain whether Git revert, sync rollback, suspend, manual drift correction or secret rotation is required.

A044. Secret Management

Task: write down rollback path and explicitly relate the observation to Secret Management.
Evidence: Write down at least one GitOps-adjacent command, one expected result and one limit of that evidence.
Operations question: What would a wrong assumption change in dev, staging and prod clusters?
Security question: Which credentials, secrets, roles, signatures or policy rules would be critical?
Recovery: Explain whether Git revert, sync rollback, suspend, manual drift correction or secret rotation is required.

A045. Secret Management

Task: mark secret boundary and explicitly relate the observation to Secret Management.
Evidence: Write down at least one GitOps-adjacent command, one expected result and one limit of that evidence.
Operations question: What would a wrong assumption change in dev, staging and prod clusters?
Security question: Which credentials, secrets, roles, signatures or policy rules would be critical?
Recovery: Explain whether Git revert, sync rollback, suspend, manual drift correction or secret rotation is required.

A046. RBAC

Task: check RBAC and tenant boundary and explicitly relate the observation to RBAC.
Evidence: Write down at least one GitOps-adjacent command, one expected result and one limit of that evidence.
Operations question: What would a wrong assumption change in dev, staging and prod clusters?
Security question: Which credentials, secrets, roles, signatures or policy rules would be critical?
Recovery: Explain whether Git revert, sync rollback, suspend, manual drift correction or secret rotation is required.

A047. Policy

Task: name policy impact and explicitly relate the observation to Policy.
Evidence: Write down at least one GitOps-adjacent command, one expected result and one limit of that evidence.
Operations question: What would a wrong assumption change in dev, staging and prod clusters?
Security question: Which credentials, secrets, roles, signatures or policy rules would be critical?
Recovery: Explain whether Git revert, sync rollback, suspend, manual drift correction or secret rotation is required.

A048. Supply Chain

Task: describe feedback loop and explicitly relate the observation to Supply Chain.
Evidence: Write down at least one GitOps-adjacent command, one expected result and one limit of that evidence.
Operations question: What would a wrong assumption change in dev, staging and prod clusters?
Security question: Which credentials, secrets, roles, signatures or policy rules would be critical?
Recovery: Explain whether Git revert, sync rollback, suspend, manual drift correction or secret rotation is required.

A049. Signaturen

Task: document desired state and explicitly relate the observation to Signaturen.
Evidence: Write down at least one GitOps-adjacent command, one expected result and one limit of that evidence.
Operations question: What would a wrong assumption change in dev, staging and prod clusters?
Security question: Which credentials, secrets, roles, signatures or policy rules would be critical?
Recovery: Explain whether Git revert, sync rollback, suspend, manual drift correction or secret rotation is required.

A050. Drift- und Incident-Response

Task: identify source and commit and explicitly relate the observation to Drift- und Incident-Response.
Evidence: Write down at least one GitOps-adjacent command, one expected result and one limit of that evidence.
Operations question: What would a wrong assumption change in dev, staging and prod clusters?
Security question: Which credentials, secrets, roles, signatures or policy rules would be critical?
Recovery: Explain whether Git revert, sync rollback, suspend, manual drift correction or secret rotation is required.

A051. GitOps

Task: explain reconciliation path and explicitly relate the observation to GitOps.
Evidence: Write down at least one GitOps-adjacent command, one expected result and one limit of that evidence.
Operations question: What would a wrong assumption change in dev, staging and prod clusters?
Security question: Which credentials, secrets, roles, signatures or policy rules would be critical?
Recovery: Explain whether Git revert, sync rollback, suspend, manual drift correction or secret rotation is required.

A052. Desired State

Task: prove drift and explicitly relate the observation to Desired State.
Evidence: Write down at least one GitOps-adjacent command, one expected result and one limit of that evidence.
Operations question: What would a wrong assumption change in dev, staging and prod clusters?
Security question: Which credentials, secrets, roles, signatures or policy rules would be critical?
Recovery: Explain whether Git revert, sync rollback, suspend, manual drift correction or secret rotation is required.

A053. Actual State

Task: check Kustomize or Helm rendering and explicitly relate the observation to Actual State.
Evidence: Write down at least one GitOps-adjacent command, one expected result and one limit of that evidence.
Operations question: What would a wrong assumption change in dev, staging and prod clusters?
Security question: Which credentials, secrets, roles, signatures or policy rules would be critical?
Recovery: Explain whether Git revert, sync rollback, suspend, manual drift correction or secret rotation is required.

A054. Reconciliation

Task: read Argo CD or Flux resource and explicitly relate the observation to Reconciliation.
Evidence: Write down at least one GitOps-adjacent command, one expected result and one limit of that evidence.
Operations question: What would a wrong assumption change in dev, staging and prod clusters?
Security question: Which credentials, secrets, roles, signatures or policy rules would be critical?
Recovery: Explain whether Git revert, sync rollback, suspend, manual drift correction or secret rotation is required.

A055. Drift

Task: assess promotion risk and explicitly relate the observation to Drift.
Evidence: Write down at least one GitOps-adjacent command, one expected result and one limit of that evidence.
Operations question: What would a wrong assumption change in dev, staging and prod clusters?
Security question: Which credentials, secrets, roles, signatures or policy rules would be critical?
Recovery: Explain whether Git revert, sync rollback, suspend, manual drift correction or secret rotation is required.

A056. Source of Truth

Task: write down rollback path and explicitly relate the observation to Source of Truth.
Evidence: Write down at least one GitOps-adjacent command, one expected result and one limit of that evidence.
Operations question: What would a wrong assumption change in dev, staging and prod clusters?
Security question: Which credentials, secrets, roles, signatures or policy rules would be critical?
Recovery: Explain whether Git revert, sync rollback, suspend, manual drift correction or secret rotation is required.

A057. Pull Model

Task: mark secret boundary and explicitly relate the observation to Pull Model.
Evidence: Write down at least one GitOps-adjacent command, one expected result and one limit of that evidence.
Operations question: What would a wrong assumption change in dev, staging and prod clusters?
Security question: Which credentials, secrets, roles, signatures or policy rules would be critical?
Recovery: Explain whether Git revert, sync rollback, suspend, manual drift correction or secret rotation is required.

A058. Argo CD Application

Task: check RBAC and tenant boundary and explicitly relate the observation to Argo CD Application.
Evidence: Write down at least one GitOps-adjacent command, one expected result and one limit of that evidence.
Operations question: What would a wrong assumption change in dev, staging and prod clusters?
Security question: Which credentials, secrets, roles, signatures or policy rules would be critical?
Recovery: Explain whether Git revert, sync rollback, suspend, manual drift correction or secret rotation is required.

A059. Argo CD AppProject

Task: name policy impact and explicitly relate the observation to Argo CD AppProject.
Evidence: Write down at least one GitOps-adjacent command, one expected result and one limit of that evidence.
Operations question: What would a wrong assumption change in dev, staging and prod clusters?
Security question: Which credentials, secrets, roles, signatures or policy rules would be critical?
Recovery: Explain whether Git revert, sync rollback, suspend, manual drift correction or secret rotation is required.

A060. Flux Source

Task: describe feedback loop and explicitly relate the observation to Flux Source.
Evidence: Write down at least one GitOps-adjacent command, one expected result and one limit of that evidence.
Operations question: What would a wrong assumption change in dev, staging and prod clusters?
Security question: Which credentials, secrets, roles, signatures or policy rules would be critical?
Recovery: Explain whether Git revert, sync rollback, suspend, manual drift correction or secret rotation is required.

A061. Flux Kustomization

Task: document desired state and explicitly relate the observation to Flux Kustomization.
Evidence: Write down at least one GitOps-adjacent command, one expected result and one limit of that evidence.
Operations question: What would a wrong assumption change in dev, staging and prod clusters?
Security question: Which credentials, secrets, roles, signatures or policy rules would be critical?
Recovery: Explain whether Git revert, sync rollback, suspend, manual drift correction or secret rotation is required.

A062. HelmRelease

Task: identify source and commit and explicitly relate the observation to HelmRelease.
Evidence: Write down at least one GitOps-adjacent command, one expected result and one limit of that evidence.
Operations question: What would a wrong assumption change in dev, staging and prod clusters?
Security question: Which credentials, secrets, roles, signatures or policy rules would be critical?
Recovery: Explain whether Git revert, sync rollback, suspend, manual drift correction or secret rotation is required.

A063. Kustomize Overlay

Task: explain reconciliation path and explicitly relate the observation to Kustomize Overlay.
Evidence: Write down at least one GitOps-adjacent command, one expected result and one limit of that evidence.
Operations question: What would a wrong assumption change in dev, staging and prod clusters?
Security question: Which credentials, secrets, roles, signatures or policy rules would be critical?
Recovery: Explain whether Git revert, sync rollback, suspend, manual drift correction or secret rotation is required.

A064. Promotion

Task: prove drift and explicitly relate the observation to Promotion.
Evidence: Write down at least one GitOps-adjacent command, one expected result and one limit of that evidence.
Operations question: What would a wrong assumption change in dev, staging and prod clusters?
Security question: Which credentials, secrets, roles, signatures or policy rules would be critical?
Recovery: Explain whether Git revert, sync rollback, suspend, manual drift correction or secret rotation is required.

A065. Progressive Delivery

Task: check Kustomize or Helm rendering and explicitly relate the observation to Progressive Delivery.
Evidence: Write down at least one GitOps-adjacent command, one expected result and one limit of that evidence.
Operations question: What would a wrong assumption change in dev, staging and prod clusters?
Security question: Which credentials, secrets, roles, signatures or policy rules would be critical?
Recovery: Explain whether Git revert, sync rollback, suspend, manual drift correction or secret rotation is required.

A066. Secret Management

Task: read Argo CD or Flux resource and explicitly relate the observation to Secret Management.
Evidence: Write down at least one GitOps-adjacent command, one expected result and one limit of that evidence.
Operations question: What would a wrong assumption change in dev, staging and prod clusters?
Security question: Which credentials, secrets, roles, signatures or policy rules would be critical?
Recovery: Explain whether Git revert, sync rollback, suspend, manual drift correction or secret rotation is required.

A067. Secret Management

Task: assess promotion risk and explicitly relate the observation to Secret Management.
Evidence: Write down at least one GitOps-adjacent command, one expected result and one limit of that evidence.
Operations question: What would a wrong assumption change in dev, staging and prod clusters?
Security question: Which credentials, secrets, roles, signatures or policy rules would be critical?
Recovery: Explain whether Git revert, sync rollback, suspend, manual drift correction or secret rotation is required.

A068. RBAC

Task: write down rollback path and explicitly relate the observation to RBAC.
Evidence: Write down at least one GitOps-adjacent command, one expected result and one limit of that evidence.
Operations question: What would a wrong assumption change in dev, staging and prod clusters?
Security question: Which credentials, secrets, roles, signatures or policy rules would be critical?
Recovery: Explain whether Git revert, sync rollback, suspend, manual drift correction or secret rotation is required.

A069. Policy

Task: mark secret boundary and explicitly relate the observation to Policy.
Evidence: Write down at least one GitOps-adjacent command, one expected result and one limit of that evidence.
Operations question: What would a wrong assumption change in dev, staging and prod clusters?
Security question: Which credentials, secrets, roles, signatures or policy rules would be critical?
Recovery: Explain whether Git revert, sync rollback, suspend, manual drift correction or secret rotation is required.

A070. Supply Chain

Task: check RBAC and tenant boundary and explicitly relate the observation to Supply Chain.
Evidence: Write down at least one GitOps-adjacent command, one expected result and one limit of that evidence.
Operations question: What would a wrong assumption change in dev, staging and prod clusters?
Security question: Which credentials, secrets, roles, signatures or policy rules would be critical?
Recovery: Explain whether Git revert, sync rollback, suspend, manual drift correction or secret rotation is required.

A071. Signaturen

Task: name policy impact and explicitly relate the observation to Signaturen.
Evidence: Write down at least one GitOps-adjacent command, one expected result and one limit of that evidence.
Operations question: What would a wrong assumption change in dev, staging and prod clusters?
Security question: Which credentials, secrets, roles, signatures or policy rules would be critical?
Recovery: Explain whether Git revert, sync rollback, suspend, manual drift correction or secret rotation is required.

A072. Drift- und Incident-Response

Task: describe feedback loop and explicitly relate the observation to Drift- und Incident-Response.
Evidence: Write down at least one GitOps-adjacent command, one expected result and one limit of that evidence.
Operations question: What would a wrong assumption change in dev, staging and prod clusters?
Security question: Which credentials, secrets, roles, signatures or policy rules would be critical?
Recovery: Explain whether Git revert, sync rollback, suspend, manual drift correction or secret rotation is required.

A073. GitOps

Task: document desired state and explicitly relate the observation to GitOps.
Evidence: Write down at least one GitOps-adjacent command, one expected result and one limit of that evidence.
Operations question: What would a wrong assumption change in dev, staging and prod clusters?
Security question: Which credentials, secrets, roles, signatures or policy rules would be critical?
Recovery: Explain whether Git revert, sync rollback, suspend, manual drift correction or secret rotation is required.

A074. Desired State

Task: identify source and commit and explicitly relate the observation to Desired State.
Evidence: Write down at least one GitOps-adjacent command, one expected result and one limit of that evidence.
Operations question: What would a wrong assumption change in dev, staging and prod clusters?
Security question: Which credentials, secrets, roles, signatures or policy rules would be critical?
Recovery: Explain whether Git revert, sync rollback, suspend, manual drift correction or secret rotation is required.

A075. Actual State

Task: explain reconciliation path and explicitly relate the observation to Actual State.
Evidence: Write down at least one GitOps-adjacent command, one expected result and one limit of that evidence.
Operations question: What would a wrong assumption change in dev, staging and prod clusters?
Security question: Which credentials, secrets, roles, signatures or policy rules would be critical?
Recovery: Explain whether Git revert, sync rollback, suspend, manual drift correction or secret rotation is required.

A076. Reconciliation

Task: prove drift and explicitly relate the observation to Reconciliation.
Evidence: Write down at least one GitOps-adjacent command, one expected result and one limit of that evidence.
Operations question: What would a wrong assumption change in dev, staging and prod clusters?
Security question: Which credentials, secrets, roles, signatures or policy rules would be critical?
Recovery: Explain whether Git revert, sync rollback, suspend, manual drift correction or secret rotation is required.

A077. Drift

Task: check Kustomize or Helm rendering and explicitly relate the observation to Drift.
Evidence: Write down at least one GitOps-adjacent command, one expected result and one limit of that evidence.
Operations question: What would a wrong assumption change in dev, staging and prod clusters?
Security question: Which credentials, secrets, roles, signatures or policy rules would be critical?
Recovery: Explain whether Git revert, sync rollback, suspend, manual drift correction or secret rotation is required.

A078. Source of Truth

Task: read Argo CD or Flux resource and explicitly relate the observation to Source of Truth.
Evidence: Write down at least one GitOps-adjacent command, one expected result and one limit of that evidence.
Operations question: What would a wrong assumption change in dev, staging and prod clusters?
Security question: Which credentials, secrets, roles, signatures or policy rules would be critical?
Recovery: Explain whether Git revert, sync rollback, suspend, manual drift correction or secret rotation is required.

A079. Pull Model

Task: assess promotion risk and explicitly relate the observation to Pull Model.
Evidence: Write down at least one GitOps-adjacent command, one expected result and one limit of that evidence.
Operations question: What would a wrong assumption change in dev, staging and prod clusters?
Security question: Which credentials, secrets, roles, signatures or policy rules would be critical?
Recovery: Explain whether Git revert, sync rollback, suspend, manual drift correction or secret rotation is required.

A080. Argo CD Application

Task: write down rollback path and explicitly relate the observation to Argo CD Application.
Evidence: Write down at least one GitOps-adjacent command, one expected result and one limit of that evidence.
Operations question: What would a wrong assumption change in dev, staging and prod clusters?
Security question: Which credentials, secrets, roles, signatures or policy rules would be critical?
Recovery: Explain whether Git revert, sync rollback, suspend, manual drift correction or secret rotation is required.

A081. Argo CD AppProject

Task: mark secret boundary and explicitly relate the observation to Argo CD AppProject.
Evidence: Write down at least one GitOps-adjacent command, one expected result and one limit of that evidence.
Operations question: What would a wrong assumption change in dev, staging and prod clusters?
Security question: Which credentials, secrets, roles, signatures or policy rules would be critical?
Recovery: Explain whether Git revert, sync rollback, suspend, manual drift correction or secret rotation is required.

A082. Flux Source

Task: check RBAC and tenant boundary and explicitly relate the observation to Flux Source.
Evidence: Write down at least one GitOps-adjacent command, one expected result and one limit of that evidence.
Operations question: What would a wrong assumption change in dev, staging and prod clusters?
Security question: Which credentials, secrets, roles, signatures or policy rules would be critical?
Recovery: Explain whether Git revert, sync rollback, suspend, manual drift correction or secret rotation is required.

A083. Flux Kustomization

Task: name policy impact and explicitly relate the observation to Flux Kustomization.
Evidence: Write down at least one GitOps-adjacent command, one expected result and one limit of that evidence.
Operations question: What would a wrong assumption change in dev, staging and prod clusters?
Security question: Which credentials, secrets, roles, signatures or policy rules would be critical?
Recovery: Explain whether Git revert, sync rollback, suspend, manual drift correction or secret rotation is required.

A084. HelmRelease

Task: describe feedback loop and explicitly relate the observation to HelmRelease.
Evidence: Write down at least one GitOps-adjacent command, one expected result and one limit of that evidence.
Operations question: What would a wrong assumption change in dev, staging and prod clusters?
Security question: Which credentials, secrets, roles, signatures or policy rules would be critical?
Recovery: Explain whether Git revert, sync rollback, suspend, manual drift correction or secret rotation is required.

Official Sources and Scope

The material is aligned with public GitOps and Kubernetes documentation. Argo CD, Flux, Kustomize, Helm, policy controllers and secret tools are positioned where they represent common GitOps workflows. An example artifact is not an installation promise for a specific cluster.

OpenGitOps: https://opengitops.dev/
OpenGitOps Principles: https://github.com/open-gitops/documents/blob/main/PRINCIPLES.md
Argo CD Documentation: https://argo-cd.readthedocs.io/en/stable/
Argo CD Declarative Setup: https://argo-cd.readthedocs.io/en/stable/operator-manual/declarative-setup/
Argo CD Project Page: https://argoproj.github.io/cd/
Flux Documentation: https://fluxcd.io/flux/
Flux Core Concepts: https://fluxcd.io/flux/concepts/
CNCF GitOps Certified Associate (CGOA): https://www.cncf.io/training/certification/cgoa/
Linux Foundation Certified GitOps Associate (CGOA): https://training.linuxfoundation.org/certification/certified-gitops-associate-cgoa/

Additional Review Drills

Use these drills when the primary task is complete and the learner needs another pass over operational reasoning. They are intentionally evidence-oriented and can be answered with local GitOps artifacts.

Drill 01: desired state

State which source, controller or environment is affected by desired state.
Name one command or manifest field that produces evidence.
Explain what can be concluded from that evidence and what cannot be concluded from it.
Describe the safest recovery path for a shared GitOps platform.

Drill 02: source commit

State which source, controller or environment is affected by source commit.
Name one command or manifest field that produces evidence.
Explain what can be concluded from that evidence and what cannot be concluded from it.
Describe the safest recovery path for a shared GitOps platform.

Drill 03: reconciliation

State which source, controller or environment is affected by reconciliation.
Name one command or manifest field that produces evidence.
Explain what can be concluded from that evidence and what cannot be concluded from it.
Describe the safest recovery path for a shared GitOps platform.

Drill 04: drift

State which source, controller or environment is affected by drift.
Name one command or manifest field that produces evidence.
Explain what can be concluded from that evidence and what cannot be concluded from it.
Describe the safest recovery path for a shared GitOps platform.

Drill 05: Argo CD Application

State which source, controller or environment is affected by Argo CD Application.
Name one command or manifest field that produces evidence.
Explain what can be concluded from that evidence and what cannot be concluded from it.
Describe the safest recovery path for a shared GitOps platform.

Drill 06: Flux Kustomization

State which source, controller or environment is affected by Flux Kustomization.
Name one command or manifest field that produces evidence.
Explain what can be concluded from that evidence and what cannot be concluded from it.
Describe the safest recovery path for a shared GitOps platform.

Drill 07: Kustomize overlay

State which source, controller or environment is affected by Kustomize overlay.
Name one command or manifest field that produces evidence.
Explain what can be concluded from that evidence and what cannot be concluded from it.
Describe the safest recovery path for a shared GitOps platform.

Drill 08: HelmRelease

State which source, controller or environment is affected by HelmRelease.
Name one command or manifest field that produces evidence.
Explain what can be concluded from that evidence and what cannot be concluded from it.
Describe the safest recovery path for a shared GitOps platform.

Drill 09: secret management

State which source, controller or environment is affected by secret management.
Name one command or manifest field that produces evidence.
Explain what can be concluded from that evidence and what cannot be concluded from it.
Describe the safest recovery path for a shared GitOps platform.

Drill 10: RBAC boundary

State which source, controller or environment is affected by RBAC boundary.
Name one command or manifest field that produces evidence.
Explain what can be concluded from that evidence and what cannot be concluded from it.
Describe the safest recovery path for a shared GitOps platform.

Drill 11: policy gate

State which source, controller or environment is affected by policy gate.
Name one command or manifest field that produces evidence.
Explain what can be concluded from that evidence and what cannot be concluded from it.
Describe the safest recovery path for a shared GitOps platform.

Drill 12: rollback

State which source, controller or environment is affected by rollback.
Name one command or manifest field that produces evidence.
Explain what can be concluded from that evidence and what cannot be concluded from it.
Describe the safest recovery path for a shared GitOps platform.

Drill 13: desired state

State which source, controller or environment is affected by desired state.
Name one command or manifest field that produces evidence.
Explain what can be concluded from that evidence and what cannot be concluded from it.
Describe the safest recovery path for a shared GitOps platform.

Drill 14: source commit

State which source, controller or environment is affected by source commit.
Name one command or manifest field that produces evidence.
Explain what can be concluded from that evidence and what cannot be concluded from it.
Describe the safest recovery path for a shared GitOps platform.

Drill 15: reconciliation

State which source, controller or environment is affected by reconciliation.
Name one command or manifest field that produces evidence.
Explain what can be concluded from that evidence and what cannot be concluded from it.
Describe the safest recovery path for a shared GitOps platform.

Drill 16: drift

State which source, controller or environment is affected by drift.
Name one command or manifest field that produces evidence.
Explain what can be concluded from that evidence and what cannot be concluded from it.
Describe the safest recovery path for a shared GitOps platform.

GOP · Orthevs Academy

31 Module als durchgängiger Lernpfad.

Die Reihenfolge bleibt unverändert: von der Laborgrundstruktur über fachliche Grundlagen und Betriebsmodelle bis zum abschließenden Troubleshooting. Die technischen Verzeichnisnamen werden bewusst beibehalten.