Test yourself
Helm
Final exam · 14 questions · answers explained as you pick
Beginner
4 questions
01Helm is…
Incorrect — no — it packages/manages Kubernetes apps.
Correct — one chart renders many manifests; installing it creates a tracked release.
Incorrect — unrelated.
Incorrect — no.
02A Helm release is…
Incorrect — the chart is the package; the release is the installed instance.
Incorrect — no.
Correct — this is what makes upgrade/rollback first-class.
Incorrect — no.
03Why always pass --version to helm install?
Correct — pin the version — “latest” is the moving-target problem.
Incorrect — it is not required, just important.
Incorrect — unrelated.
Incorrect — reproducibility, not speed.
04values.yaml is…
Incorrect — that is helm template/get manifest output.
Correct — templates read .Values; users override per environment.
Incorrect — no.
Incorrect — and secrets should NOT live there in Git.
4 questions · explanations appear as you answer
Intermediate
5 questions
01Helm renders templates with…
Incorrect — that is Ansible/Salt.
Incorrect — that is Chef/Puppet.
Correct — {{ }} with pipelines produces the final manifests.
Incorrect — templates have real logic.
02Inside a with or range block, the dot (.)…
Correct — a top cause of “nil pointer” template errors.
Incorrect — no — that is the trap.
Incorrect — it becomes the scoped object, not null.
Incorrect — it is valid; its meaning just changes.
03When a helper must be indented into YAML, use…
Incorrect — template cannot be piped — that is the problem.
Correct — this is how you indent helper output correctly.
Incorrect — unrelated to indentation.
Incorrect — quote wraps a string, it does not indent blocks.
04A chart’s subchart (dependency) should be…
Incorrect — unpinned deps deploy whatever the repo serves today.
Incorrect — unrelated and unsafe.
Correct — subcharts deploy real workloads with your creds — treat as dependencies.
Incorrect — dependencies go in charts/ via Chart.yaml.
05A failing pre-upgrade hook Job…
Correct — exactly why migrations run as pre-upgrade hooks — keep them idempotent.
Incorrect — no — it blocks the release.
Incorrect — it aborts; rollback is a separate action.
Incorrect — no.
5 questions · explanations appear as you answer
Advanced
5 questions
01A library chart (type: library) is…
Incorrect — no — it cannot be installed on its own.
Correct — encode hardening once; every consumer inherits it.
Incorrect — unrelated.
Incorrect — no.
02The best way to catch a chart that renders an insecure manifest is…
Incorrect — lint checks structure, not the rendered security posture.
Incorrect — not a control.
Correct — test the rendered result, not just the templates.
Incorrect — that is the failure you are preventing.
03Helm provenance / --verify lets you…
Correct — proves the chart is the publisher’s and untampered.
Incorrect — unrelated.
Incorrect — no.
Incorrect — no.
04Because Helm v3 uses your kubeconfig, a CI install should run with…
Incorrect — a chart can render RBAC that escalates — never deploy as admin.
Correct — constrain the deploy identity; a Helm op has exactly its permissions.
Incorrect — over-privileged.
Incorrect — it needs some identity; make it least-privilege.
05To keep secrets out of a chart you should…
Incorrect — values are often committed — plaintext secret leak.
Incorrect — that leaks them into logs.
Correct — the source of truth stays out of the chart and out of Git.
Incorrect — base64 is not encryption.
5 questions · explanations appear as you answer