Pass the Linux Foundation DevOps and Site Reliability CGOA Questions and answers with CertsForce

Areconcilerensures that the actual system matches the desired state declared in Git. External reconcilers run outside the core cluster orchestration process.Fluxis a widely used GitOps external reconciler that continuously syncs cluster state with the repository.

“Flux is an example of a GitOps reconciler that continuously monitors Git repositories and applies changes to the cluster. As an external reconciler, it handles synchronization and reconciliation loops outside the direct application code.”

Thus,A: Fluxis correct.

The two most widely adopted GitOps controllers in the CNCF ecosystem areArgoCDandFlux. Both implement the GitOps principles of continuous reconciliation from Git as the source of truth.

“ArgoCD and Flux are the two primary CNCF GitOps controllers. They implement reconciliation loops to ensure the desired state in Git matches the cluster’s actual state.”

Thus, the correct answer isC.

Kustomize is a GitOps tool for managing Kubernetes configurations declaratively. It uses afolder structure with configuration filesand akustomization.yamlfile that references resources and overlays. This enables customization without modifying the base manifests.

“Kustomize allows customization of Kubernetes manifests by organizing resources in directories and referencing them through file paths in a kustomization file. This directory-based approach supports overlays, reusability, and modular configuration.”

Thus, the correct answer isD.

In GitOps,DevSecOpsintegrates security into the GitOps workflow by treating security policies as code and storing them in Git. This enables automatic detection ofsecurity policy driftand ensures that any misconfiguration or violation is reconciled, just like application and infrastructure code.

“GitOps applies DevSecOps by managing security policies as code. This enables detection of drift in security configurations, ensuring environments remain compliant and secure.”

Thus, the correct answer isA.

In aBlue-Green deployment, two environments (Blue and Green) exist at the same time. The current version runs in one environment (Blue), and the new version is deployed to the other environment (Green). Traffic is switched to Green once the new version is validated.

“Blue-Green deployments maintain two production environments. The new version is deployed alongside the old version, and once validated, traffic is switched from Blue to Green.”

Thus, the correct answer isC.

In GitOps, deployments are driven bycommitting declarative configurationinto a Git repository (the State Store). From there, agents reconcile the actual environment to match the desired state, making deployments reproducible and auditable.

“To deploy in GitOps, commit the declarative configuration into version control. The reconciler ensures the runtime environment converges to the declared state.”

Thus, the correct answer isD.

One of the four fundamental GitOps principles isVersioned and Immutable. This means that the entire system’s desired state must be stored in a Git repository with version control. Each change must be represented as a commit, and Git’s immutability guarantees a reliable, auditable history of how the system evolved.

“The desired state is stored in a version control system. The record of truth is stored in an immutable history, and changes can be audited and reverted if necessary. This guarantees that the system’s configuration is versioned, immutable, and traceable.”

Thus,configuration and infrastructure must be version-controlled and immutable, never changed directly in production.

ThePulled AutomaticallyGitOps principle refers to the way software agents continuously access theDesired Statestored in the State Store (e.g., Git). Agents automatically pull the state from the repository and reconcile the system accordingly.

“Software agents automatically pull the desired state declarations from the source of truth (State Store) and continuously reconcile the system to match.”

Thus, the correct answer isD.