Kubernetes

Git is the source of truth, but production differs from Git. How do you prove where the drift happened?

Compare state at each stage, Git, rendered manifests, what was applied, and the live cluster, and use Kubernetes' own metadata to name the culprit. managedFields records which controller last wrote each field, which usually answers the question outright without any guessing.