GitOps Certification Guide: CGOA Exam Domains & Weights (2026)

Overview

What CGOA actually certifies

The Certified GitOps Associate was launched in February 2024 by Linux Foundation Training & Certification together with the Continuous Delivery Foundation and CNCF. It is an online, proctored, multiple-choice exam of 90 minutes, priced at $250 for the exam alone, with no prerequisites, one free retake, a 12-month eligibility window and a certification valid for two years. Neither a question count nor a pass mark is published.

Five domains: GitOps Principles 30 %, GitOps Terminology 20 %, GitOps Patterns 20 %, Related Practices 16 % and Tooling 14 %. Read that list twice if you came here from Argo CD. Half the exam is the principles and the vocabulary around them, a fifth is patterns that name no product, and every reconciliation engine in existence shares one 14 % domain with manifest packaging, state stores and notification tooling.

The blueprint itself tells you where the material comes from: the Principles domain lists the four OpenGitOps principles by name, the Terminology domain lists the OpenGitOps glossary entries, and the Tooling domain names reconciliation engines as “ArgoCD, Flux, and alternatives”. In other words the syllabus is public and vendor-neutral: the principles and the glossary are short, free documents maintained by the CNCF GitOps Working Group. Gnoseed is not affiliated with CNCF, the CD Foundation or the Linux Foundation and neither sells nor proctors this exam. Verify the figures above against the official exam page before you book.

Breakdown

The exam at a glance

One exam, five domains, and a weighting that rewards precision about words far more than fluency with any tool.

CGOA

Certified GitOps Associate

AssociateMultiple choice · online proctored · 90 min · $250Prereq: None

GitOps Principles (30 %) is the four OpenGitOps principles — declarative, versioned and immutable, pulled automatically, continuously reconciled. GitOps Terminology (20 %) is the glossary as a testable object: continuous, declarative description, desired state, state drift, state reconciliation, state store, feedback loop, rollback and what a GitOps managed software system consists of. GitOps Patterns (20 %) covers deployment and release patterns, progressive delivery, pull versus event-driven, and architecture patterns such as in-cluster versus external reconcilers. Related Practices (16 %) is configuration as code, infrastructure as code, DevOps and DevSecOps, and CI and CD. Tooling (14 %) is manifest packaging, state store systems, reconciliation engines and interoperability with notification, observability and CI tools.

Choose this if…

You already deploy with Argo CD or Flux and want the concepts underneath named properly
You are designing a delivery platform and need a vendor-neutral vocabulary for it
You want a CNCF associate exam with no terminal and a genuinely short syllabus

Study with Gnoseed

GitOps with Argo CD & Flux · 140 cards Terraform Fundamentals · 75 cards CI/CD with GitHub Actions · 54 cards

Where the marks are

Half the exam is four principles and a glossary

Principles and Terminology together are 50 %, and both are drawn from two short public documents. That sounds like the easiest half of any CNCF exam until you notice that a multiple-choice question can only test a definition by finding its edges — and the OpenGitOps definitions have sharp ones.

Four worth knowing exactly. “Continuous” means reconciliation keeps happening, not that it is instantaneous — so a five-minute interval is continuous and a webhook is an optimisation. A state store need not be Git: the glossary defines it as any system storing immutable, versioned desired-state declarations, with Git as the canonical example, which is why an OCI registry qualifies. Desired state is defined by completeness — the configuration sufficient to recreate the system so that instances are behaviourally indistinguishable, which is also why GitOps doubles as a disaster-recovery story. And the feedback loop is meant in the control-theory sense: how previous attempts to apply the desired state affected the actual state.

The principles themselves reward the same care. “Versioned and immutable” requires a complete version history, not merely a version number; “pulled automatically” puts software agents in charge of fetching, which is what separates GitOps from a pipeline that runs kubectl apply; and “continuously reconciled” is about observing actual state and acting, not about deployment frequency.

What this deck covers and what it does not

Argo CD and Flux share one 14 % domain

The GitOps track was written to teach the tools people actually run, so most of it sits outside the CGOA blueprint, and it would be dishonest to present the whole thing as exam prep. The Tooling domain covers reconciliation engines as engines, manifest formats and packaging, state store systems and interoperability with notification, observability and CI tools. It does not cover repo-server internals, what Redis caches, ApplicationSet generators, sync waves, resource hooks or hook deletion policies.

So five modules — Argo CD Core, Repo & App Patterns, Sync Strategies, Argo Rollouts and Flux & Multi-cluster — are mostly beyond what CGOA asks, together with the tool-specific half of Practical Tips. All five are excellent material for operating a cluster, and the four Argo ones — Argo CD Core, Repo & App Patterns, Sync Strategies and Argo Rollouts — are the study plan for the Certified Argo Project Associate exam instead. Flux belongs to neither blueprint.

The three modules that map onto the weight are GitOps Principles, which carries the principles and the glossary terminology, Delivery & Architecture Patterns for the 20 % patterns domain — progressive delivery, canary versus blue-green, pull versus event-driven, in-cluster versus external reconcilers, repository structure and state-store choices — and GitOps & Adjacent Practices for the 16 % that is not really about GitOps at all.

One boundary is worth drawing precisely, because the two sit next to each other. The Patterns domain names progressive delivery patterns, and that pattern layer is in Delivery & Architecture Patterns — what a canary is, what blue-green costs, what an analysis gate adds over a timed pause. The Argo Rollouts module is the layer below it: setWeight, previewService, AnalysisRun statuses, the CLI. CGOA asks about the first and not the second.

The domain people underestimate

Related Practices asks about things GitOps does not do

Sixteen per cent of the paper is configuration as code, infrastructure as code, DevOps and DevSecOps, and CI and CD — and how they map onto GitOps. None of these is a GitOps feature. You are expected to know the CNCF's own definitions: infrastructure as code as the practice of storing the definition of infrastructure in files; DevSecOps as a cultural merger of development, operational and security responsibilities; continuous delivery as automation into an acceptance environment, with continuous deployment going the step further to production.

The mapping questions are the interesting ones. IaC gives you a declarative definition under version control; GitOps adds an agent that keeps reconciling it, which is why an apply in a pipeline converges only while the pipeline runs and drift between runs goes unnoticed. That distinction is the single most exam-shaped idea in the domain.

It is also why the study plan on this page spans three decks. The GitOps deck now carries the mapping cards, while the Terraform track is where infrastructure as code becomes concrete and the GitHub Actions track is where CI stops being an abstraction. If you already write both daily, skip them.

Format and neighbours

A knowledge exam, and a short syllabus you can actually read

CGOA has no terminal: it is an online, proctored, multiple-choice paper of 90 minutes, which makes recall-style practice a genuinely good fit — unlike ICA, which the Linux Foundation describes as performance-based and multiple-choice. Of the CNCF associate exams, CGOA sits alongside PCA and OTCA as one you can prepare for without a lab, though a cluster you have actually broken makes the patterns domain much easier to reason about.

It is also unusual in having a syllabus you can read in an evening. The OpenGitOps principles document and glossary are short, versioned and public, and the exam is built on them deliberately — the working group's stated goal is a vendor-neutral, principle-led definition of GitOps that supports interoperability and certification. Read the primary sources first, then use spaced repetition so the exact wording survives to exam day.

One practical warning: because the material is conceptual, it is easy to feel ready after one pass and then lose marks on the difference between two definitions you would never distinguish at work. That gap between recognising a term and being able to place it against three plausible neighbours is exactly what flashcards close.

FAQ

Common questions

What are the CGOA exam domains and their weights? +

Five domains: GitOps Principles 30 %, GitOps Terminology 20 %, GitOps Patterns 20 %, Related Practices 16 % and Tooling 14 %. Principles and Terminology together are half the exam, which is why the OpenGitOps documents matter more than any tool.

Is the CGOA exam hands-on? +

No. It is an online, proctored, multiple-choice exam of 90 minutes with no terminal and no cluster to fix. That makes it a knowledge exam, and recall practice suits it well.

Do I need to know Argo CD or Flux for CGOA? +

Less than you would expect. Reconciliation engines share a single 14 % Tooling domain with manifest packaging, state stores and notification interoperability, and the exam is vendor-neutral. Knowing one engine well helps the patterns domain make sense, but engine internals are not what is tested.

Does GitOps require Git? +

Not by definition. The OpenGitOps glossary defines a state store as any system that stores immutable, versioned desired-state declarations and names Git as the canonical example, so an OCI registry holding versioned artifacts can serve the same role. This is a favourite edge of the terminology domain.

How much does CGOA cost and how long is it valid? +

The exam alone is $250, includes one free retake and a 12-month window in which to sit it, and the certification is valid for two years. Bundles with a Linux Foundation subscription are sold at a higher price. Check the official page for current pricing.

What should I read to prepare for CGOA? +

Start with the two OpenGitOps documents — the principles and the glossary — because they are the syllabus for half the exam and take an evening to read. Then work through patterns and the related practices, where the questions are about how GitOps differs from IaC, CI/CD and plain DevOps.

Should I take CGOA or a Kubernetes certification first? +

They test different things and neither is a prerequisite. CGOA is conceptual and vendor-neutral, so it is approachable early; CKA and CKAD are hands-on Kubernetes exams. If you already deploy with Argo CD or Flux, CGOA names and sharpens what you are doing rather than teaching you a new tool.

Learn the definitions to their edges

Plant your first seed today. Half of CGOA is principles and terminology — ten minutes a day is enough to hold the exact wording rather than the gist.

Start learning free

CGOA: The Certified GitOps Associate Exam, Domain by Domain