- CKA stands for Certified Kubernetes Administrator, a performance-based credential from CNCF and The Linux Foundation.
- The exam is 2 hours, ~15-20 hands-on tasks, with a 66% passing score and partial credit available per task.
- Troubleshooting is the largest domain at 30%-candidates who skip it fail; master it first.
- The $445 fee includes one free retake and two Killer.sh simulator sessions.
What CKA Stands For
CKA stands for Certified Kubernetes Administrator. It is a professional certification that validates a candidate's ability to design, deploy, configure, and troubleshoot Kubernetes clusters in a real command-line environment. Unlike multiple-choice exams that test theoretical recall, the CKA puts you inside a live Linux terminal and asks you to produce working outcomes under time pressure.
If you've seen "CKA" appear in a job posting, a LinkedIn credential, or a cloud engineering resume and wondered what it actually means in practice, the short answer is: this person has demonstrated they can operate Kubernetes-not just describe it. For a deeper look at the credential itself, see our dedicated CKA Certification overview and our detailed What Is CKA Certification? explainer.
The abbreviation is sometimes confused with other initialisms in the cloud-native space. CKA is not the same as CKAD (Certified Kubernetes Application Developer) or CKS (Certified Kubernetes Security Specialist). The administrator credential sits squarely in the infrastructure and cluster-operations layer: you are expected to build and maintain the platform that developers deploy onto.
Who Created the CKA and Why It Matters
The CKA was created by the Cloud Native Computing Foundation (CNCF) in collaboration with The Linux Foundation. That lineage matters for one key reason: Kubernetes itself is a CNCF project. The organization that stewards the open-source project is the same organization that designed the exam. There is no middleman, no third-party interpretation-the curriculum reflects what the Kubernetes community has determined an administrator genuinely needs to know.
The exam is delivered online through The Linux Foundation's certification platform using PSI Bridge and a Secure Browser for remote proctoring. This means you take it from your own machine, but under monitored conditions with strict rules about which resources you may consult during the exam.
For everything that the CKA label represents in terms of career signaling and market recognition, see our What Is CKA? article and the companion piece on CKA Meaning.
Why the Issuing Body Matters to Employers
Hiring managers at cloud-native organizations recognize the CNCF/Linux Foundation brand because it directly corresponds to the technology stack they run. A CKA holder hasn't passed a vendor's proprietary exam about a managed service wrapper-they've proven proficiency with the upstream Kubernetes project that underpins AWS EKS, Google GKE, Azure AKS, and every self-managed cluster in production today.
What the CKA Exam Actually Tests
The CKA is organized into five scored domains. Understanding these domains is not just useful for study planning-it defines what "Kubernetes administrator" means in the context of this credential. For a full breakdown of every domain, visit our CKA Exam Domains 2026: Complete Guide to All 5 Content Areas.
Domain 1: Cluster Architecture, Installation & Configuration (25%)
Candidates must understand how Kubernetes clusters are structured and be able to build them from scratch using tools like kubeadm. This domain also covers RBAC, kubeconfig management, and cluster upgrades.
- Bootstrap a cluster with kubeadm
- Configure Role-Based Access Control (RBAC)
- Manage cluster upgrades and etcd backups
- Understand control plane and worker node components
Domain 2: Workloads & Scheduling (15%)
This domain covers how workloads are defined and placed. Candidates work with Deployments, DaemonSets, resource requests, limits, taints, tolerations, and node affinity rules.
- Configure Deployments, rolling updates, and rollbacks
- Set resource requests and limits on pods
- Apply taints, tolerations, and node selectors
Domain 3: Services & Networking (20%)
Networking is one of the most technically demanding areas of Kubernetes. This domain covers Service types, Ingress, CoreDNS, NetworkPolicies, and the Gateway API-which has its own approved documentation set in the exam environment.
- Create ClusterIP, NodePort, and LoadBalancer Services
- Configure Ingress resources and controllers
- Write and apply NetworkPolicy objects
- Understand and configure CoreDNS
Domain 4: Storage (10%)
Though the smallest domain by weight, Storage tasks frequently appear. Candidates must work with PersistentVolumes, PersistentVolumeClaims, StorageClasses, and volume access modes.
- Create and bind PersistentVolumes and PersistentVolumeClaims
- Configure StorageClasses and dynamic provisioning
- Mount volumes into pods correctly
Domain 5: Troubleshooting (30%)
Troubleshooting is the single largest domain at 30% of the exam. It demands that candidates diagnose broken clusters, failed nodes, crashing applications, and misconfigured networking in a live environment with no safety net.
- Debug failing pods and containers
- Diagnose control plane and worker node issues
- Identify and fix network connectivity failures
- Interpret logs with kubectl logs and crictl
The weight distribution tells a clear story: 50% of the exam lives in Troubleshooting (30%) and Cluster Architecture (25%) combined. Candidates who front-load their preparation on workloads and neglect those two domains consistently fall short of the 66% passing threshold. For domain-specific deep dives, explore the individual guides for Domain 1, Domain 2, Domain 3, and Domain 4.
Exam Format and Registration Mechanics
Understanding the exam's format mechanics is essential before you register-the rules around allowed resources, retakes, and scheduling windows affect your preparation strategy significantly.
Format and Scoring
The CKA consists of approximately 15-20 performance-based tasks completed entirely at a Linux command line inside a remote exam VM. There are no multiple-choice or fill-in-the-blank questions. Every task has a specific outcome the proctor system checks: did the object get created? Does it have the right spec? Is the cluster functional?
The passing score is 66%. Partial credit is possible by task, which means a partially completed task may still earn you some points. The exam window is 2 hours-time management is a genuine skill being tested alongside technical ability. For an honest look at how difficult candidates find this format, read our How Hard Is the CKA Exam? Complete Difficulty Guide 2026.
Open-Resource Rules
The CKA is an open-resource exam, but only to a specific approved list of documentation accessible inside the exam VM. Permitted sources include:
- Kubernetes official documentation (kubernetes.io/docs)
- Kubernetes Blog (kubernetes.io/blog)
- Helm documentation
- Task-specific documentation relevant to the question
- CKA Gateway API documentation
- Terminal instructions within the exam interface
- /usr/share documents and packages on the exam system
External search results are not permitted. You cannot Google an error message or open a Stack Overflow tab. This means your open-book advantage only works if you already know where to look in the documentation-and can find it fast under pressure.
Kubernetes Version
The current exam environment uses a recent Kubernetes minor release. As of this writing, the Linux Foundation FAQ lists the CKA environment as Kubernetes v1.35, while the product page references v1.34-a minor discrepancy that illustrates why you should always check the official Linux Foundation FAQ before scheduling. The environment is updated to align with the latest Kubernetes minor release within approximately 4-8 weeks of its release.
Cost, Retakes, and Scheduling Window
| Item | Detail |
|---|---|
| Exam fee | $445 (standard purchase) |
| Attempts included | 2 (one free retake included) |
| Scheduling window | 12 months from purchase to schedule |
| Killer.sh simulator sessions | 2 included (except excluded single-exam SKUs) |
| Passing score | 66% |
| Exam duration | 2 hours |
| Certification validity | 2 years (credentials earned after April 1, 2024) |
| Renewal method | Retake and pass the exam before expiration |
For a detailed breakdown of what's included at different purchase tiers and when bundles make financial sense, see our CKA Certification Cost 2026: Complete Pricing Breakdown.
Who Hires CKA-Certified Professionals
The CKA appears most frequently in job postings for roles that own or operate Kubernetes infrastructure. The titles vary, but the underlying requirement is consistent: someone needs to keep the cluster healthy, scalable, and available.
- DevOps and Platform Engineers who build internal developer platforms on top of Kubernetes
- Site Reliability Engineers (SREs) responsible for cluster uptime and incident response
- Cloud Infrastructure Engineers managing EKS, GKE, or AKS clusters for product teams
- Kubernetes Consultants helping enterprises migrate workloads to containerized environments
- Infrastructure Architects designing multi-cluster, multi-cloud deployment patterns
Organizations ranging from cloud-native startups to large financial institutions and government contractors list CKA as either required or preferred. The credential has become a baseline expectation in many infrastructure job descriptions where Kubernetes is a core technology. For a full picture of the job market and the kinds of roles that list this credential, visit CKA Jobs.
Key Takeaway
The CKA is an administrator-layer credential. If a role description involves building, upgrading, securing, or troubleshooting Kubernetes clusters-rather than deploying applications onto an existing cluster-the CKA is the relevant certification to hold or seek.
CKA Versus Other Kubernetes Credentials
CNCF offers three Kubernetes-specific certifications, and the differences between them map directly to job function:
| Credential | Full Name | Primary Focus | Typical Role |
|---|---|---|---|
| CKA | Certified Kubernetes Administrator | Cluster operations, infrastructure, troubleshooting | DevOps/Platform/SRE Engineer |
| CKAD | Certified Kubernetes Application Developer | Building and deploying apps on Kubernetes | Software/Backend Developer |
| CKS | Certified Kubernetes Security Specialist | Securing Kubernetes environments | Security Engineer (requires active CKA) |
Importantly, the CKS requires an active CKA before you can register-meaning the CKA sits at the center of the CNCF Kubernetes certification path. For candidates weighing whether the time and cost investment makes sense, our Is the CKA Certification Worth It? Complete ROI Analysis 2026 walks through the concrete career and financial considerations.
How to Prepare for the CKA
Because the CKA is entirely performance-based, preparation must be hands-on. Reading about Kubernetes is insufficient-you need to build clusters, break them, and fix them repeatedly before exam day.
Prerequisites in Practice
There are no formal prerequisites to register. However, the Linux Foundation strongly recommends hands-on experience with Kubernetes, Linux command line, YAML, and container fundamentals before attempting the exam. Candidates who arrive without Linux fluency-particularly around systemd, journalctl, and file permissions-consistently struggle on the Troubleshooting domain regardless of their Kubernetes knowledge.
A Domain-Weighted Study Sequence
Cluster Architecture & Linux Foundations (Domain 1, 25%)
- Build a cluster with kubeadm from scratch-multiple times
- Practice etcd backup and restore until it's muscle memory
- Configure RBAC: ClusterRoles, Roles, bindings
- Perform a cluster upgrade end-to-end
Services & Networking + Storage (Domains 3 & 4, 30% combined)
- Create all Service types; test DNS resolution with CoreDNS
- Write NetworkPolicy manifests and verify enforcement
- Create PVs, PVCs, and StorageClasses; mount into pods
Workloads, Scheduling & Troubleshooting (Domains 2 & 5, 45% combined)
- Practice Deployment rollouts, DaemonSets, CronJobs under time pressure
- Deliberately break cluster components and diagnose them cold
- Use crictl, journalctl, and kubectl logs fluently
- Run both Killer.sh simulator sessions and review every missed task
Troubleshooting gets its own final week because it demands that all other domain knowledge be integrated-you can't troubleshoot a broken cluster if you don't understand what a healthy one looks like. Spending the most exam-proximate study time on the highest-weighted domain is not generic advice; it is specific to how CKA scoring is weighted.
Use the Practice Environment
The two Killer.sh simulator sessions included with your exam purchase are among the most valuable preparation tools available. Killer.sh tasks are deliberately harder than the real exam, which calibrates your confidence accurately. Take the first session mid-preparation to identify gaps, then the second session in the week before your exam date. You can also sharpen your command recall with the CKA practice tests available on this site before you invest in a full simulator run.
For a structured curriculum with resource recommendations, see the CKA Study Guide 2026: How to Pass on Your First Attempt and explore CKA Training options that fit different learning styles. To understand where most candidates stumble, the CKA Pass Rate 2026: What the Data Shows provides useful context without invented statistics.
Documentation Navigation Is a Skill
Since the exam is open-resource within approved docs, practice finding answers in the official Kubernetes documentation before exam day. Learn the structure of kubernetes.io/docs-know that storage concepts live under Concepts > Storage, that RBAC is under Concepts > Security, and that kubeadm commands are under Reference > Setup Tools. A candidate who spends three minutes searching for a PersistentVolume example during the exam has already lost ground.
For the career and earnings upside of earning the credential, the CKA Salary Guide 2026: Complete Earnings Analysis covers what the market pays for CKA-certified infrastructure roles.
Frequently Asked Questions
CKA stands for Certified Kubernetes Administrator. It is a performance-based certification issued by the Cloud Native Computing Foundation (CNCF) in collaboration with The Linux Foundation. It validates hands-on ability to install, configure, and troubleshoot Kubernetes clusters at the Linux command line.
No. The CKA has no multiple-choice questions. It consists of approximately 15-20 performance-based tasks that must be completed entirely within a live Linux terminal over 2 hours. The automated scoring system checks whether your outputs are correct and functional.
The standard exam fee is $445. That price includes two total exam attempts-meaning one free retake is bundled in. It also includes two Killer.sh simulator sessions and a 12-month window in which to schedule your exam, unless purchased through an excluded single-exam SKU.
The passing score is 66%. Partial credit is possible on individual tasks, which means an incomplete but partially correct solution can still contribute to your score. This makes task management and time allocation important strategic considerations during the exam.
CKA certifications earned after April 1, 2024 are valid for 2 years. Renewal requires retaking and passing the exam before the credential expires-there is no continuing education or alternative renewal path. You can find the full details in our What Is A CKA? and What Does CKA Mean? reference articles.