CNPA Exam Dumps : Certified Cloud Native Platform Engineering Associate

In GitOps workflows, the source of truth for environments is stored in Git. Promotion from staging to production is managed by merging changes into the production branch or repository. Option A is correct because once changes are merged, the GitOps operator (e.g., Argo CD, Flux) automatically detects the updated desired state in Git and reconciles it with the production environment.

Option B (creating new environments each time) is inefficient and unnecessary. Option C (manual updates) violates GitOps principles of automation and auditability. Option D (direct deployments) reverts to a push-based CI/CD model rather than GitOps’ pull-based reconciliation.

By relying on Git as the single source of truth, GitOps ensures version control, auditability, and rollback capabilities. This allows consistent, reproducible promotion between environments while reducing human error.

Kubernetes Custom Resource Definitions (CRDs) extend the Kubernetes API by allowing platform teams to create and expose custom APIs without modifying the core Kubernetes API server code. Option C is correct because this extensibility enables teams to define new abstractions (e.g., Database, Application, or Environment resources) tailored to organizational needs, which developers can consume through a self-service model.

Option A is incorrect because scaling and failover are handled by controllers or operators, not CRDs themselves. Option B is wrong because RBAC is still required for access control over custom resources. Option D is misleading because multi-cloud support depends on how CRDs and their controllers are implemented, not a built-in CRD feature.

By leveraging CRDs, platform teams can standardize workflows, hide complexity, and implement guardrails, all while presenting developers with simplified abstractions. This is central to platform engineering, as it empowers developers with self-service APIs while maintaining operational control.

The GitOps model is built on the principle that the desired state of infrastructure and applications must be stored in Git as the single source of truth. Option D is correct because Git provides versioning, immutability, and auditability, while reconciliation controllers (e.g., Argo CD or Flux) pull the desired state into the system continuously. This ensures that actual cluster state always matches the declared Git state.

Option A is partially correct but fails because GitOps eliminates manual push workflows—automation ensures changes are pulled and reconciled. Option B describes Kubernetes CRDs, which may be part of the system but do not embody GitOps on their own. Option C contradicts GitOps principles, which rely on pull-based reconciliation, not centralized push.

Storing desired state in Git provides full traceability, automated rollbacks, and continuous reconciliation, improving reliability and compliance. This makes GitOps a core practice for cloud native platform engineering.