ArgoCD Projects and RBAC Quiz

This quiz tests your understanding of ArgoCD Projects and Role-Based Access Control.

1. What is the primary purpose of an ArgoCD Project (AppProject)?
   • A) To group related Git repositories
   • B) To provide logical grouping of applications with access restrictions
   • C) To manage Kubernetes namespaces
   • D) To configure CI/CD pipelines

Show Answer

Answer: B) To provide logical grouping of applications with access restrictions

Explanation: AppProjects provide a logical grouping of Applications with restrictions on what sources, destinations, and resources are allowed. They enable multi-tenancy by limiting what each team can deploy.

2. What does the sourceRepos field in an AppProject control?
   • A) The Git branches that can be used
   • B) The Git repositories from which Applications can pull manifests
   • C) The container image repositories
   • D) The Helm chart versions

Show Answer

Answer: B) The Git repositories from which Applications can pull manifests

Explanation: The sourceRepos field restricts which Git repositories Applications in this project can use as sources. Using * allows any repository, while specific URLs limit to those repositories only.

3. How do you restrict which clusters and namespaces an AppProject can deploy to?
   • A) Using the destinations field
   • B) Using the clusters field
   • C) Using the namespaces field
   • D) Using Kubernetes NetworkPolicies

Show Answer

Answer: A) Using the destinations field

Explanation: The destinations field defines allowed cluster and namespace combinations. Each entry specifies a server (cluster URL or *) and namespace (specific namespace or *) that Applications can target.

4. What is the purpose of clusterResourceWhitelist in an AppProject?
   • A) To allow specific cluster-scoped resources to be managed
   • B) To whitelist IP addresses
   • C) To allow specific users
   • D) To enable specific features

Show Answer

Answer: A) To allow specific cluster-scoped resources to be managed

Explanation: By default, projects cannot manage cluster-scoped resources. The clusterResourceWhitelist allows specific kinds (like Namespaces or ClusterRoles) to be managed by Applications in the project.

5. How do you define a role within an ArgoCD Project?
   • A) Using Kubernetes RBAC
   • B) Using the roles field in the AppProject spec
   • C) Using a separate Role CRD
   • D) Roles cannot be defined in projects

Show Answer

Answer: B) Using the roles field in the AppProject spec

Explanation: Project roles are defined in the spec.roles field of an AppProject. Each role has a name, description, policies (what actions are allowed), and optional JWT tokens or group bindings.