Glossary

Configuration drift

Configuration drift is the divergence between the state a system was declared to have and the state it actually has, caused by out-of-band changes.

Short answer

What is configuration drift?

Configuration drift is the divergence between the state a system was declared to have and the state it actually has, caused by out-of-band changes.

Explained two ways

Plain and technical

In plain terms

Drift happens when someone changes something directly (in a console or on a server) instead of changing the definition. Reality and the description stop matching, usually without anyone noticing.

Technically

Drift is detected by continuously comparing declared state against observed live state and reporting the differences. Continuous comparison matters because drift discovered at the next deployment is discovered by being overwritten, which is how emergency fixes made directly in production get silently reverted.

Example

What it looks like in practice

An engineer raises a memory limit directly in a cluster during an incident. Drift detection reports the difference against the declared manifest the same day, so it is either adopted into the declaration or deliberately reverted.
Keep going

More definitions

See these concepts in a running system

A 30-minute walkthrough against your own infrastructure rather than a slide about the theory.