Linux Foundation CGOA - Certified GitOps Associate Exam

One of the four fundamental GitOps principles isVersioned and Immutable. This means that the entire system’s desired state must be stored in a Git repository with version control. Each change must be represented as a commit, and Git’s immutability guarantees a reliable, auditable history of how the system evolved.

“The desired state is stored in a version control system. The record of truth is stored in an immutable history, and changes can be audited and reverted if necessary. This guarantees that the system’s configuration is versioned, immutable, and traceable.”

Thus,configuration and infrastructure must be version-controlled and immutable, never changed directly in production.

GitOps enhancesDevSecOpsby ensuring security-related configurations and changes are stored in version control, where acomplete audit historyis available. This provides traceability, accountability, and compliance enforcement.

“With GitOps, the entire version history of desired state changes is stored immutably in Git. This audit trail supports security and compliance goals in DevSecOps practices.”

Thus, the correct answer isB.

In GitOps,DevSecOpsintegrates security into the GitOps workflow by treating security policies as code and storing them in Git. This enables automatic detection ofsecurity policy driftand ensures that any misconfiguration or violation is reconciled, just like application and infrastructure code.

“GitOps applies DevSecOps by managing security policies as code. This enables detection of drift in security configurations, ensuring environments remain compliant and secure.”

Thus, the correct answer isA.

A fundamental GitOps principle is that reconciliation isautomated and continuous. Software agents (e.g., controllers like ArgoCD or Flux) continuously pull desired state declarations from Git repositories and reconcile them with the actual state.

“Software agents automatically pull the desired state declarations from the source of truth and continuously reconcile the actual state to match.”

Thus, the correct answer isC.

Infrastructure as Code (IaC)is a foundational practice in GitOps. It involves managing and provisioning infrastructure throughdeclarative, machine-readable filesrather than manual processes or GUIs. IaC ensures consistency, automation, and repeatability across environments.

“Infrastructure as Code defines and manages infrastructure through code files stored in version control. This enables automation, reproducibility, and immutability in infrastructure provisioning.”

Thus,Dis correct.

Linting tools are essential in GitOps practices for maintaining consistency, standardization, and quality in configuration files. Automated linters can validate YAML manifests, Helm charts, or Kustomize overlays for formatting and best practices.

“Linters automate the enforcement of formatting and quality rules in declarative configuration files. They ensure standardized structure and reduce errors in GitOps workflows.”

Thus, the correct answer isC.

The reconciliation loop is a fundamental GitOps principle. It continuously compares thedesired state(stored in Git) with theactual state(running in the system). When a divergence (drift) is detected, the reconciler automatically corrects the system to match the desired state.

“The reconciliation loop ensures the system is continuously converging toward the declared desired state. Whenever the actual state deviates, the loop reconciles the system to match the desired state.”

Thus, the correct answer isC.

The GitOps principle ofVersioned and Immutablerequires Desired State to be stored in a way that enforcesimmutability and versioning. This ensures every change is recorded, auditable, and reversible.

“Desired state must be kept in an immutable, version-controlled system. This guarantees a full history of changes and enables safe rollbacks.”

Thus, the correct answer isD.