If you use a GitOps tool and don’t have it manage drift, you have left a big hole in GitOps. If someone configures an environment via a portal and not code, you have a hole in your IaC. But fortunately, good GitOps will reset it because it is just drift.
Re: drift “Nobody was ignoring it. Nobody knew.”
You know why no one knew? Because everyone ignored it.
Just make sure your IaC is idempotent and then apply it every 10 minutes. Not perfect, but you will know about drift within 10 minutes.
Just finished revising my workshop to make sure everything is up to date. I'm really looking forward to introducing folks to Kubernetes!
Now on to preparing my sessions on Secrets and Threat Modeling.