CKA logo
Focused certification exam prep
Start practice

What Does CKA Mean?

TL;DR
  • CKA stands for Certified Kubernetes Administrator, a performance-based credential issued by the CNCF and Linux Foundation.
  • The exam is 2 hours, ~15-20 live tasks in a real terminal, with a 66% passing score and partial credit available.
  • The $445 fee includes two exam attempts (one free retake) and two Killer.sh simulator sessions.
  • Troubleshooting is the largest domain at 30%-it deserves the most preparation time of any single area.

What CKA Means: The Full Name and Its Origin

CKA stands for Certified Kubernetes Administrator. It is a professional certification that validates a candidate's ability to design, deploy, configure, and troubleshoot Kubernetes clusters using a real Linux command line-not multiple-choice questions, not drag-and-drop simulations, but actual kubectl commands run inside a live exam environment.

The credential is specifically an administrator certification, which distinguishes it from developer-focused Kubernetes credentials. Where a developer credential asks whether you can deploy applications on top of Kubernetes, the CKA asks whether you can build and maintain the cluster itself-installing control plane components, configuring RBAC, managing persistent storage, diagnosing broken nodes, and keeping workloads running under real-world failure conditions.

If you have seen the acronym and wondered what it means in a job posting, a résumé, or a conversation, the short answer is: the person holding a CKA has demonstrated, under timed exam conditions, that they can administer a Kubernetes cluster from the command line without assistance beyond the official documentation.

For a deeper look at the broader credential and its context, see our dedicated article on What Is CKA Certification?

Who Created the CKA and Why It Matters

The CKA was created by the Cloud Native Computing Foundation (CNCF) in collaboration with The Linux Foundation. That origin is significant for two reasons.

First, the CNCF is the organization that stewards Kubernetes itself. When the body that governs the technology also governs the certification, the exam content stays tightly coupled to how Kubernetes actually works-not how a third-party training vendor interprets it. Exam domains, task types, and allowed documentation are updated as Kubernetes evolves.

Second, The Linux Foundation delivers and proctors the exam through its own certification platform using PSI Bridge remote proctoring with a secure browser. There is no third-party testing center involved. You take the exam from your own workstation, with a proctor monitoring you remotely, working inside a browser-based Linux terminal connected to a real Kubernetes environment.

Why the Issuer Matters: Because the CNCF maintains Kubernetes and the CKA simultaneously, the exam version tracks the latest Kubernetes minor release within approximately 4-8 weeks of its release. Candidates should always check the Linux Foundation FAQ page immediately before scheduling-the product page and FAQ have listed different version numbers, so the FAQ is the authoritative source.

The Linux Foundation FAQ currently lists the CKA environment as Kubernetes v1.35, while the product page has listed v1.34. Always verify which version you will be tested on before you book your exam date.

What the CKA Exam Actually Tests

The CKA is organized into five weighted domains. Understanding those domains-and their relative weights-is the most important piece of information a first-time candidate can have, because the weights directly determine where to invest preparation time.

Domain 1: Cluster Architecture, Installation & Configuration (25%)

The second-largest domain. Candidates must be able to build clusters from scratch, configure kubeadm, manage certificates, work with RBAC, and understand the control plane components.

  • Installing and upgrading clusters with kubeadm
  • Configuring Role-Based Access Control (RBAC)
  • Managing etcd backups and restores
  • Understanding kube-apiserver, kube-scheduler, controller-manager, kubelet interactions

Domain 2: Workloads & Scheduling (15%)

Focuses on how Kubernetes runs applications: Deployments, DaemonSets, resource requests and limits, node affinity, taints and tolerations, and the Kubernetes scheduler.

  • Rolling updates and rollbacks for Deployments
  • Configuring resource requests, limits, and LimitRanges
  • Node selectors, affinity rules, taints, and tolerations
  • ConfigMaps and Secrets as workload configuration

Domain 3: Services & Networking (20%)

Covers how traffic flows inside and into a Kubernetes cluster-Services, Ingress, CNI plugins, DNS, and network policies.

  • ClusterIP, NodePort, and LoadBalancer Service types
  • Ingress controllers and Ingress resources
  • NetworkPolicy for traffic restriction
  • CoreDNS configuration and troubleshooting
  • Gateway API (CKA-specific documentation is allowed in the exam)

Domain 4: Storage (10%)

The smallest domain by weight, covering PersistentVolumes, PersistentVolumeClaims, StorageClasses, and volume types.

  • Creating and binding PersistentVolumes and PersistentVolumeClaims
  • Dynamic provisioning with StorageClasses
  • Access modes: ReadWriteOnce, ReadWriteMany, ReadOnlyMany

Domain 5: Troubleshooting (30%)

The largest single domain. Candidates must diagnose broken clusters, failing nodes, crashing pods, and misconfigured networking-under time pressure, in a live environment.

  • Diagnosing and repairing broken control plane components
  • Fixing node NotReady conditions (kubelet, container runtime issues)
  • Troubleshooting Deployment failures and Pod crashloops
  • Identifying and fixing Service and DNS resolution problems
  • Reading logs: kubectl logs, journalctl, crictl

For a complete breakdown of all five domains and what each one requires, read the CKA Exam Domains 2026: Complete Guide to All 5 Content Areas.

Exam Format and Registration Mechanics

The CKA is a performance-based exam. That means there are no multiple-choice questions. Instead, you receive approximately 15-20 tasks, each presented in a terminal environment, and you solve them by actually running commands. A task might ask you to create a NetworkPolicy that restricts traffic to a specific namespace, upgrade a node to a new Kubernetes version, or find and fix a broken kubelet on a worker node.

You have 2 hours to complete all tasks. The passing score is 66%. Partial credit is awarded per task, which matters: if you complete 80% of a task correctly, you earn a portion of that task's points rather than zero. This makes it worth attempting every task even if you cannot complete it perfectly.

Registration and Pricing

The exam-only fee is $445. That price includes:

  • Two exam attempts (the first attempt plus one free retake)
  • 12 months from purchase to schedule your first attempt
  • Two Killer.sh simulator sessions, which are widely considered the best available practice environment

Note: Some bundled or discounted SKUs may exclude the retake or simulator access-read the purchase description carefully. If you buy a single-exam SKU flagged as excluded, the retake and simulator may not be included.

Certification Validity: CKA credentials earned after April 1, 2024 are valid for 2 years. Renewal requires retaking and passing the exam before the credential expires-there is no continuing education pathway. Plan for recertification accordingly.

There are no formal prerequisites to register. However, the Linux Foundation strongly recommends hands-on experience with Kubernetes, Linux command-line administration, YAML, and containerization before attempting the exam. The format is entirely command-line, and candidates who have never run kubectl in a real environment will find the 2-hour window extremely tight.

For a full breakdown of what the exam costs at every purchase option, see the CKA Certification Cost 2026: Complete Pricing Breakdown.

Exam Detail Specifics
Full Name Certified Kubernetes Administrator
Issuing Bodies CNCF + The Linux Foundation
Exam Duration 2 hours
Number of Tasks ~15-20 performance-based tasks
Passing Score 66% (partial credit per task)
Exam Fee $445 (includes one free retake + two Killer.sh attempts)
Scheduling Window 12 months from purchase
Certification Validity 2 years (for credentials earned after April 1, 2024)
Delivery Method Online, PSI Bridge remote proctoring
Prerequisites None formal; hands-on experience strongly recommended

The Open-Resource Rule: What It Really Means

The CKA is often described as "open book," but that description is misleading without context. You are permitted to access documentation-but only specific, pre-approved resources accessible from within the exam VM itself. External search engines, Stack Overflow, GitHub repositories outside the approved list, and any personal notes are prohibited.

The approved resources during the exam include:

  • Kubernetes official documentation (kubernetes.io/docs)
  • The Kubernetes Blog (kubernetes.io/blog)
  • Helm documentation (helm.sh/docs)
  • Task-specific documentation for the current exam session
  • CKA Gateway API documentation
  • Terminal instructions provided within the exam interface
  • /usr/share documents and installed packages on the exam nodes

In practice, this means you must already know where to find things in the Kubernetes documentation quickly. A candidate who has to read every page to remember how a NetworkPolicy is structured will run out of time. The documentation is a reference for syntax confirmation, not a teaching tool during the exam.

Key Takeaway

Practice navigating Kubernetes documentation at speed before exam day. Know which pages cover RBAC manifests, PersistentVolume specs, kubeadm upgrade steps, and NetworkPolicy syntax-so you can find and copy what you need in under 60 seconds.

Who Hires CKA Holders and for What Roles

Employers posting roles that list CKA as a requirement or preference typically fall into a few categories. Cloud-native and platform engineering teams at technology companies use the credential to filter for candidates who can operate Kubernetes infrastructure, not just use it. Managed Kubernetes service providers, cloud consultancies, and enterprise IT organizations running on-premises Kubernetes distributions hire CKA holders for roles including:

  • Kubernetes Administrator / Platform Engineer - day-to-day cluster operations, upgrades, access management
  • Site Reliability Engineer (SRE) - reliability, observability, and incident response in Kubernetes environments
  • DevOps / Cloud Infrastructure Engineer - building and maintaining CI/CD infrastructure on Kubernetes
  • Solutions Architect - designing Kubernetes-based architectures for clients

The CKA is specifically valued because it is performance-based. Employers know that a CKA holder has demonstrated they can solve real problems at the command line-not just recognize the correct answer in a list of four options. For more on career impact, see our CKA Salary Guide 2026: Complete Earnings Analysis and CKA Jobs resource.

CKA in the Kubernetes Certification Landscape

The CNCF and Linux Foundation offer several Kubernetes-related credentials. Understanding where CKA sits helps clarify what the acronym signals to employers and colleagues.

  • KCNA (Kubernetes and Cloud Native Associate) - entry-level, multiple-choice, no hands-on component. Proves foundational knowledge.
  • CKAD (Certified Kubernetes Application Developer) - also performance-based, but focused on deploying and configuring applications on Kubernetes rather than administering the cluster itself.
  • CKA (Certified Kubernetes Administrator) - cluster administration, installation, networking, storage, and troubleshooting. The infrastructure credential.
  • CKS (Certified Kubernetes Security Specialist) - security hardening of Kubernetes clusters; requires a valid CKA as a prerequisite.

The CKA is the gateway credential for anyone who wants to move into Kubernetes security (CKS). It is also the most broadly recognized Kubernetes credential in infrastructure job postings. Whether the CKA is worth pursuing for your specific career path is explored in detail in Is the CKA Certification Worth It? Complete ROI Analysis 2026.

Preparing for the CKA: Where to Focus First

Given the domain weights, a rational preparation strategy starts with the two highest-weighted areas: Troubleshooting (30%) and Cluster Architecture, Installation & Configuration (25%). Together they represent more than half the exam. If you master those two domains and pass everything else at an average level, you will cross the 66% threshold.

Weeks 1-2

Cluster Architecture, Installation & Configuration (25%)

  • Install a cluster end-to-end with kubeadm on a local or cloud VM
  • Practice etcd backup and restore with etcdctl
  • Configure RBAC: Roles, ClusterRoles, RoleBindings, ClusterRoleBindings
  • Upgrade a cluster with kubeadm step by step
Weeks 3-4

Services & Networking (20%) + Workloads & Scheduling (15%)

  • Create and test NetworkPolicies that restrict namespace traffic
  • Configure Ingress with a real controller (e.g., ingress-nginx)
  • Practice node affinity, taints/tolerations, and resource quota configurations
  • Work with Deployments, rollouts, and rollback commands until they are automatic
Weeks 5-6

Troubleshooting (30%) + Storage (10%)

  • Break and fix clusters deliberately: stop kubelet, corrupt a manifest, misconfigure a Service
  • Practice reading journalctl -u kubelet and crictl ps output
  • Create PersistentVolumes and PVCs manually; test dynamic provisioning
  • Run both Killer.sh simulator sessions before your exam date

Practice tests are essential for building the command recall and speed the exam requires. The CKA Exam Prep practice tests are structured around the actual exam domains so you can measure readiness by domain, not just overall score.

For domain-specific deep dives, the following guides cover exactly what you need to know:

For a full structured preparation plan, the CKA Study Guide 2026: How to Pass on Your First Attempt walks through a complete schedule with task-level detail. And if you want to understand exactly what makes this exam difficult before you start, read How Hard Is the CKA Exam? Complete Difficulty Guide 2026.

The CKA Exam Prep platform offers performance-based practice questions mapped to each domain, so you can identify weak areas before they cost you points on exam day.

Frequently Asked Questions

What does CKA stand for?

CKA stands for Certified Kubernetes Administrator. It is a performance-based certification issued by the Cloud Native Computing Foundation (CNCF) and The Linux Foundation that validates hands-on Kubernetes cluster administration skills.

Is the CKA a multiple-choice exam?

No. The CKA is entirely performance-based. It consists of approximately 15-20 tasks that you solve by running real commands in a live Linux terminal connected to actual Kubernetes clusters. There are no multiple-choice questions.

How long is a CKA certification valid?

CKA certifications earned after April 1, 2024 are valid for 2 years. Renewal requires retaking and passing the exam before the expiration date. There is no continuing education or coursework renewal option.

Can you use documentation during the CKA exam?

Yes, but only approved resources accessible from within the exam VM. These include the official Kubernetes documentation, Kubernetes Blog, Helm documentation, and a few other pre-approved sources. External search engines and personal notes are not permitted.

What is the hardest part of the CKA?

Troubleshooting is weighted at 30%-the largest single domain-and is widely considered the most demanding, because it requires diagnosing broken clusters and nodes under time pressure in a live environment. Most candidates who fail the CKA report that time management across complex troubleshooting tasks is the primary challenge.

Ready to pass your CKA exam?

Put this into practice with free CKA questions across every exam domain.