CGOA Gitops Principles — 10 Questions

Question 1

What happens when you delete an application from the Argo CD dashboard without deleting the Git repository?

Accepted Answer

The controller re-syncs and restores the application.. Argo CD continuously monitors the desired state defined in Git and the live state in the cluster. When you delete an Application resource from the Argo CD dashboard, you are only removing the Argo CD Application object (the tracking resource), not the Git repository or the cluster resources. If the Application was part of an App of Apps pattern or if the controller still has a reference to it (e.g., via a parent Application), the controller will detect the missing Application and re-create it, triggering a sync that restores the application. In most standard setups, deleting the Application from the dashboard does not delete the Git repo, so the controller will re-sync and restore the application if it is still managed by a parent Application or if the deletion is not cascading. The correct answer reflects that the controller re-syncs and restores the application.

Answer

The Git repository is automatically updated.

Answer

The cluster is wiped completely.

Answer

Nothing happens.

Question 2

A team wants to ensure that all infrastructure modifications are peer-reviewed and auditable. Which GitOps principle best describes the practice of requiring a Pull Request for every change to the cluster state?

Accepted Answer

Versioned and immutable state stored in Git. The versioned and immutable state principle ensures all changes are traceable and verifiable through Git history.

Answer

Automated reconciliation

Answer

Continuous drift detection

Answer

Declarative desired state

Question 3

A platform team maintains a GitOps repository containing HelmRelease and Kustomization manifests for a production cluster managed by Flux. A developer needs to change an application's replica count for a canary test, but the change must not affect the stable release and must be quickly revertible. Which GitOps practice best satisfies these requirements while preserving the declarative, version-controlled desired state?

Accepted Answer

Create a separate overlay or branch for the canary environment, commit the replica change there, and let Flux reconcile that overlay or branch.. The GitOps principle of declarative desired state stored in Git means any environment-specific change, including a canary replica count, should be represented as a version-controlled manifest. A separate overlay or branch lets Flux reconcile only that scope, keeping the stable release untouched and making the canary change instantly revertible via Git history.

Answer

Edit the Deployment directly with kubectl scale and later reconcile by reverting the change in Git.

Answer

Add an imperative script to the CI pipeline that runs kubectl scale only during the canary window.

Answer

Commit the replica change to a short-lived branch, open a pull request, and merge it only after the canary test completes.

Question 4

An organization uses Argo CD for GitOps. They want to ensure that their production environment is protected from accidental changes. They decide that any change to production must be reviewed and approved via a pull request before being merged to the main branch, and that Argo CD should automatically sync the changes. Which GitOps principle does this workflow primarily demonstrate?

Accepted Answer

Automated reconciliation. The workflow of reviewing changes via pull request and then having Argo CD automatically sync them demonstrates automated reconciliation. The agent continuously monitors Git and applies changes, ensuring the live state matches the desired state. While other principles like Git as the single source of truth and pull-based deployment are also present, the key behavior is the automatic syncing after merge.

Answer

Pull-based deployment

Answer

Git as the single source of truth

Answer

Declarative configuration

Question 5

Which TWO of the following are primary benefits of storing immutable state in Git?

Accepted Answer

Reduction in manual cluster configuration errors. Option A is correct because storing immutable state in Git (the GitOps model) makes the desired cluster configuration declarative and version-controlled, so changes are reviewed and applied consistently, which reduces manual, error-prone cluster configuration. Option D is correct because every change to the desired state is a Git commit, giving a complete, auditable history of who changed what and when, enabling rollback and traceability of all environment changes. Option B is not a primary benefit of immutable Git state, since hotfix speed depends on the CI/CD pipeline and deployment process, not on storing state in Git. Option C is incorrect because Git does not automatically convert Docker images into YAML manifests; that requires separate tooling. Option E is incorrect because Git stores configuration, not server storage capacity, so it does not increase server-side storage.

Answer

Faster deployment of hotfixes directly to production

Answer

Automated conversion of Docker images to YAML

Answer

Increased server-side storage capacity

Question 6

You are implementing a GitOps workflow where the desired state is stored in a private repository. The Argo CD controller requires access to this repository. What is the most secure GitOps-compliant way to provide this access?

Accepted Answer

Create a Kubernetes Secret containing the SSH key and reference it in the repository configuration.. Storing the SSH private key in a Kubernetes Secret and referencing it in Argo CD's repository configuration is the GitOps-compliant and secure approach. Secrets are the native Kubernetes mechanism for sensitive data, can be encrypted at rest (with KMS or sealed-secrets), and are scoped to the Argo CD namespace with RBAC controls. This keeps credentials out of Git and out of plaintext manifests, aligning with GitOps principles of declarative, auditable, and secure state management.

Answer

Grant the cluster node broad read access to all public repositories.

Answer

Use an environment variable in the Argo CD container deployment manifest.

Answer

Hardcode the credentials in the Application manifest.

Question 7

In an Argo CD deployment, a developer notices that manual changes made via kubectl are being reverted automatically. What feature is responsible for this behavior?

Accepted Answer

Auto-Sync with Self-Heal enabled. Argo CD's Auto-Sync with Self-Heal enabled continuously compares the live cluster state against the desired state in Git and automatically reverts any drift. When a developer makes a manual kubectl change, the Application Controller detects the difference during its reconciliation loop and re-applies the Git-defined manifest, effectively undoing the manual change. Self-Heal is the specific sub-feature of automated sync that enforces this drift correction.

Answer

Git commit hook triggers

Answer

Kubernetes admission controllers

Answer

Manual refresh button

Question 8

Your team is using a pull-based GitOps pattern. Which component is responsible for initiating the communication to the Git repository to check for updates?

Accepted Answer

The agent running inside the Kubernetes cluster.. In a pull-based GitOps model, an agent (such as Argo CD or Flux) runs inside the Kubernetes cluster and periodically polls the Git repository to detect desired-state changes. The agent initiates the outbound connection to Git, then reconciles the cluster state to match what is declared in the repository. This pull model keeps cluster credentials out of the CI system and gives the cluster control over when updates are applied.

Answer

The developer's local kubectl client.

Answer

The CI/CD pipeline pushes updates to the cluster.

Answer

The Git server pushes changes to the cluster webhook.

Question 9

An organization is migrating to GitOps using Argo CD. During an audit, you notice that manual changes made directly to the Kubernetes cluster via kubectl are being reverted within minutes. Which component of the GitOps pipeline is performing this action?

Accepted Answer

The Application Controller. The Argo CD Application Controller is the component that continuously monitors live cluster state against the desired state in Git and performs reconciliation. When it detects drift (e.g., a manual kubectl change), and the Application has automated sync with self-heal enabled, the Application Controller re-applies the Git-defined manifests, reverting the manual change. It is the engine behind Argo CD's drift correction.

Answer

The cluster ingress controller

Answer

The Argo CD API server

Answer

The Git webhook listener

Question 10

In a GitOps environment, an engineer manually deletes a Deployment via 'kubectl'. What should happen next to maintain the desired state?

Accepted Answer

The controller detects the drift and automatically restores the Deployment.. In a GitOps environment, the GitOps controller continuously reconciles the actual state of the cluster with the desired state stored in Git. When a Deployment is manually deleted, the controller detects the drift and automatically recreates it to match the Git manifest. This self-healing behavior is a core principle of GitOps.

Answer

The controller ignores the change until the next git commit.

Answer

The system issues an alert but does not modify the cluster.

Answer

The manual deletion is permanently synced to the Git repository.