Flux CD
Hard
Security
What permissions does the deploy key created by 'flux bootstrap github' have by default?
Select your answer:
Show answer and explanation
Answer: Read-only, unless you pass --read-write-key
Explanation
Bootstrap creates an SSH deploy key with read-only access, which is all syncing needs. Image update automation has to push commits, so it needs --read-write-key or separate credentials. With --token-auth, Flux uses the token over HTTPS instead of a deploy key.
More hard Flux CD questions
- What does the annotation kustomize.toolkit.fluxcd.io/ssa: IfNotPresent do on an object in a Flux source?
- A change to an immutable field makes Flux's apply of a Job fail. Which annotation on the Job tells Flux to delete and recreate it?
- A GitRepository has no ref field, and the repository's default branch is main. What does Flux check out?
- kustomize-controller can't tell when a custom resource from a third-party operator is healthy. How do you teach it?
- You want to delete a Flux Kustomization but keep the workloads it created running. Which field do you set first?
- In a CI job, 'flux diff kustomization' exits with status 1. What does that mean?