Hands-on Linux and Kubernetes experience
RecommendedThe Linux Foundation rates CKA an intermediate exam. Every task is done at the command line in a live cluster.
Certified Kubernetes Administrator (CKA) Exam Guide
Validates practical skills in Kubernetes cluster setup, workloads and scheduling, services and networking, storage, and troubleshooting.
CKA tests whether you can build, run, secure and repair Kubernetes clusters under time pressure. Learn each domain hands-on, practise kubeadm builds, upgrades and troubleshooting until they are routine, then use the two included Killer.sh sessions to rehearse speed.
Understand the exam
Syllabus
Troubleshooting30%
- Troubleshoot clusters and nodes
- Troubleshoot cluster components
- Monitor cluster and application resource usage
- Manage and evaluate container output streams
- Troubleshoot services and networking
Example scenario: A node shows NotReady after a restart and new Pods stay Pending. Which components and logs would you check first?
Cluster architecture, installation and configuration25%
- Manage role based access control (RBAC)
- Prepare underlying infrastructure for installing a Kubernetes cluster
- Create and manage Kubernetes clusters using kubeadm
- Manage the lifecycle of Kubernetes clusters
- Implement and configure a highly-available control plane
- Use Helm and Kustomize to install cluster components
- Understand extension interfaces
- Understand CRDs, install and configure operators
Example scenario: A team needs read-only access to Pods in one namespace. Which RBAC objects would you create?
Services and networking20%
- Understand connectivity between Pods
- Define and enforce Network Policies
- Use ClusterIP, NodePort, LoadBalancer service types and endpoints
- Use the Gateway API to manage Ingress traffic
- Know how to use Ingress controllers and Ingress resources
- Understand and use CoreDNS
Example scenario: A database Pod should accept traffic only from Pods labelled app=api. How would you write the NetworkPolicy?
Workloads and scheduling15%
- Understand application deployments and how to perform rolling update and rollbacks
- Use ConfigMaps and Secrets to configure applications
- Configure workload autoscaling
- Understand the primitives used to create robust, self-healing, application deployments
- Configure Pod admission and scheduling
Storage10%
- Implement storage classes and dynamic volume provisioning
- Configure volume types, access modes and reclaim policies
- Manage persistent volumes and persistent volume claims
Official CKA curriculum · Kubernetes v1.37
Format
- Questions
- 15–20 tasks
- Duration
- 2h
- Passing score
- 66%
- Delivery
- Online
- Languages
- English, Chinese (Simplified), Japanese
Question types
Performance-based. Solve each task from a Linux terminal: connect to the named cluster, run kubectl and system commands to build or repair the setup, and leave the cluster in the state the task describes.
CertUp example
In the cluster named in the task, give the service account audit in namespace web read-only access to Pods in that namespace. Create a Role named pod-reader and bind it to the account.
Show answer
kubectl create role pod-reader --verb=get,list,watch --resource=pods -n web, then kubectl create rolebinding pod-reader-binding --role=pod-reader --serviceaccount=web:audit -n web. The Role grants read-only Pod access and the binding assigns it to the account.
Eligibility and booking
Buy the exam from the Linux Foundation, then schedule with PSI at least 24 hours ahead. You have 12 months to take the exam and your retake.
Make a study plan
Start by checking how fast you are in a live cluster, then learn each domain by doing it.
Most candidates spend 40–100 hours. Plan for the low end if you already run clusters and only need practice on kubeadm upgrades, Helm, Gateway API and timed tasks; add time if you use Kubernetes but have not administered clusters.
- 1Understand the examRead the objectives and exam rules, check you’re eligible and pick a target date.3 h
- 3Learn the core conceptsWork through one main course alongside your own lab, topic by topic.27 h
- 4Practice with mock examsPractise every objective in a lab until you can do it quickly without notes.27 h
- 5Prepare for exam dayBook the exam and check the ID, equipment and environment rules.3 h
Learn the core concepts
Pick one course with hands-on labs, and use the Kubernetes docs as you go, since you can open them in the exam.
Best valueCertified Kubernetes Administrator (CKA) with Practice Tests
Best hands-on labsCertified Kubernetes Administrator (CKA)
Best official optionKubernetes Fundamentals (LFS258)Practise in the docs Find manifest examples in kubernetes.io/docs while you study. Fast lookup saves more time in the exam than memorised YAML.
Practice with mock exams
Your exam purchase includes two Killer.sh sessions. Use one midway and one a few days before the exam.
See all 4 CKA practice tests →
Are you ready?
- You finish a Killer.sh session within the time limit and fix what you missed
- You can upgrade a kubeadm cluster and restore a broken node without notes
- You check resource names and namespaces on every task without thinking about it
Prepare for exam day
The exam is online only. Prepare your room and computer before check-in.
- Run the PSI system check on the computer and network you will use
- Have a government ID with your name, photo and signature, matching your registration
- Use one active monitor, a webcam and microphone in a private, clear room
- Reschedule at least 24 hours before your slot. Missing the exam forfeits the fee and your retake
- Your result arrives by email within 24 hours
Advice from exam takers
Small mistakes cost the most points
One February 2026 passer lists the easy ways to lose points: a wrong resource or container name, the right object in the wrong namespace, or a mismatched port or selector. They finished with 40 minutes left and used it to recheck every task.
Killer.sh is meant to be harder
KodeKloud's instructors tell worried candidates that Killer.sh is harder than the real exam. Use it to build speed and find gaps, not to predict your score.
Use material written for the current curriculum
A 2026 candidate found the exam harder than older reports suggested, because the February 2025 revision added Helm, Kustomize, Gateway API, NetworkPolicy and CRD work. Another passer combined a course, Kubernetes the Hard Way and both Killer.sh sessions.