CKA logo
Focused certification exam prep
Start practice

What Is A CKA?

TL;DR
  • CKA stands for Certified Kubernetes Administrator - a hands-on, performance-based credential from CNCF and The Linux Foundation.
  • The exam costs $445, includes one free retake, and gives you 12 months to schedule your attempts.
  • You solve 15-20 real tasks in a live Linux terminal in 2 hours; passing requires a score of 66% or higher.
  • Troubleshooting is the largest domain at 30%, making it the single most important area to master.

What Is a CKA?

A Certified Kubernetes Administrator (CKA) is a professional who has demonstrated the ability to perform the core installation, configuration, management, and troubleshooting tasks required to run Kubernetes clusters in production. The credential validates real, hands-on competency - not just the ability to pass a multiple-choice quiz. To earn the title, a candidate must solve a series of practical tasks inside a live Kubernetes environment under time pressure.

The designation is widely recognized across the cloud-native industry as the benchmark credential for Kubernetes operations. Employers hiring for platform engineering, DevOps, site reliability, and cloud infrastructure roles routinely list CKA as a preferred or required qualification because it proves that a candidate can actually operate clusters, not just describe how Kubernetes works in theory.

If you're exploring the credential from the beginning, the CKA Certification overview covers the full credential picture, while CKA Meaning and What Does CKA Stand For? dig into the terminology side of things.

Who Creates and Administers the CKA?

The CKA was created by the Cloud Native Computing Foundation (CNCF) in collaboration with The Linux Foundation. The Linux Foundation owns the exam delivery infrastructure and handles registration, proctoring, and credentialing. The exam is delivered online through The Linux Foundation's certification platform using PSI Bridge and its Secure Browser remote proctoring technology.

This matters practically: you take the exam from your own machine, in your own space, with a remote proctor watching via webcam and screen share. There are no physical testing centers. You'll need a compatible machine, a clean workspace, and a reliable internet connection on exam day.

Why CNCF Ownership Matters: Because the CNCF is the same organization that stewards the Kubernetes project itself, the CKA exam content tracks closely with the actual Kubernetes release cycle. The exam environment is updated to align with the latest Kubernetes minor release within approximately 4-8 weeks of its availability. Always check The Linux Foundation FAQ before scheduling - the version listed on the product page and the version listed in the FAQ have been known to differ.

What a CKA Actually Does on the Job

The "Administrator" title is deliberate and specific. A CKA is not a Kubernetes developer writing application code - that's the Certified Kubernetes Application Developer (CKAD). A CKA is the person responsible for the platform itself. Day-to-day work for a Certified Kubernetes Administrator typically includes:

  • Installing, upgrading, and maintaining Kubernetes clusters using tools like kubeadm
  • Configuring Role-Based Access Control (RBAC), service accounts, and cluster-wide security policies
  • Managing cluster networking - Services, Ingress controllers, NetworkPolicies, CoreDNS, and CNI plugins
  • Provisioning and managing persistent storage through PersistentVolumes, PersistentVolumeClaims, and StorageClasses
  • Diagnosing and resolving cluster failures - crashed nodes, failing pods, broken networking, misconfigured control plane components
  • Scheduling workloads using node selectors, taints and tolerations, affinity rules, and resource quotas
  • Backing up and restoring etcd, the cluster's key-value datastore

Notice that this list maps directly to the five official exam domains. The CKA is not testing abstract knowledge - it's testing the exact tasks that cluster administrators perform in production environments.

Curious about the career upside? The CKA Salary Guide 2026: Complete Earnings Analysis examines compensation trends for CKA holders, and CKA Jobs covers the types of roles that specifically target this credential.

The Five CKA Exam Domains Explained

The CKA curriculum is divided into five weighted domains. Understanding the weight of each domain is critical for prioritizing your preparation - heavier domains require proportionally more of your study time and practice.

Domain 1: Cluster Architecture, Installation & Configuration (25%)

The second-largest domain covers everything required to build and configure a Kubernetes cluster from the ground up. This includes kubeadm-based cluster bootstrapping, upgrading cluster components, managing kubeconfig files, and implementing RBAC.

  • Bootstrap clusters using kubeadm
  • Perform cluster version upgrades
  • Manage Kubernetes PKI certificates
  • Configure RBAC: Roles, ClusterRoles, RoleBindings, ClusterRoleBindings
  • Back up and restore etcd snapshots

See the CKA Domain 1: Cluster Architecture, Installation & Configuration Complete Study Guide 2026 for full topic coverage.

Domain 2: Workloads & Scheduling (15%)

This domain tests your ability to deploy and manage application workloads on the cluster and control where and how they run.

  • Deploy and manage Deployments, DaemonSets, StatefulSets, and Jobs
  • Configure resource requests and limits
  • Use node selectors, taints, tolerations, and affinity/anti-affinity rules
  • Manage ConfigMaps and Secrets

The CKA Domain 2: Workloads & Scheduling Complete Study Guide 2026 breaks down every subtopic.

Domain 3: Services & Networking (20%)

Networking is one of the most complex areas of Kubernetes administration and carries significant exam weight.

  • Configure ClusterIP, NodePort, and LoadBalancer Services
  • Deploy and configure Ingress resources and controllers
  • Implement NetworkPolicies to control pod-to-pod traffic
  • Understand CNI plugins and CoreDNS behavior
  • Work with Gateway API resources (a newer addition to the CKA curriculum)

Dig deeper at CKA Domain 3: Services & Networking Complete Study Guide 2026.

Domain 4: Storage (10%)

The smallest domain by weight, but questions here are straightforward if you understand the PV/PVC lifecycle.

  • Create and manage PersistentVolumes and PersistentVolumeClaims
  • Configure StorageClasses and dynamic provisioning
  • Mount volumes into pods correctly

Full coverage is available at CKA Domain 4: Storage Complete Study Guide 2026.

Domain 5: Troubleshooting (30%)

This is the largest and most demanding domain on the exam. Nearly a third of your score comes from your ability to diagnose and fix broken systems under time pressure - with no hints about what's wrong.

  • Diagnose and fix failing nodes and cluster components
  • Debug application failures: CrashLoopBackOff, ImagePullBackOff, pending pods
  • Trace networking failures between pods and Services
  • Analyze logs from kubelet, kube-apiserver, etcd, and application containers
  • Identify and resolve RBAC misconfigurations

For a comprehensive breakdown of all five domains and how to approach each one, the CKA Exam Domains 2026: Complete Guide to All 5 Content Areas is the definitive reference.

How the CKA Exam Works: Format, Scoring, and Rules

Performance-Based Tasks, Not Multiple Choice

The CKA contains approximately 15-20 performance-based tasks. There are no multiple-choice questions, no drag-and-drop scenarios, and no fill-in-the-blank theory questions. Every task requires you to interact with a live Kubernetes cluster using a Linux command line inside the exam VM. You might be asked to create a Deployment with specific resource limits, debug a failing node, configure a NetworkPolicy, or restore an etcd backup - and you must actually do it, not describe how.

You have 2 hours to complete all tasks. Time management is one of the most significant challenges candidates report - there's no time to look up basic syntax from scratch for every task.

Scoring and Partial Credit

The passing score is 66%. Importantly, partial credit is possible on a per-task basis - if you complete most of a task correctly, you may receive partial marks rather than a zero. This means it's almost always worth attempting a task even if you can't complete it perfectly. Your score report is available within 24 hours of completing the exam.

Open-Resource Rules

The CKA is open-resource, but only to a strictly defined set of approved resources accessible from within the exam VM itself. You may access:

  • The official Kubernetes documentation (kubernetes.io/docs)
  • The Kubernetes Blog (kubernetes.io/blog)
  • Helm documentation
  • Task-specific documentation provided in the exam
  • CKA Gateway API documentation
  • Terminal instructions within the VM
  • /usr/share documents and packages

External search results, Stack Overflow, GitHub, and any other external resources are not permitted. This means you need to know where to find things quickly in the official docs - not memorize every flag, but navigate documentation efficiently under pressure.

The Documentation Navigation Skill: Many candidates underestimate how much time they lose fumbling through documentation during the exam. Practicing with only kubernetes.io open - exactly as you'll have it on exam day - is a non-negotiable part of preparation. The CKA Exam Prep practice tests are designed with this constraint in mind.

Cost, Registration, and What You Get

Item Detail
Exam fee $445 USD
Exam attempts included 2 (one free retake)
Scheduling window 12 months from purchase
Killer.sh simulator sessions 2 sessions included (unless excluded SKU)
Exam duration 2 hours
Passing score 66%
Delivery method Online, remote proctored via PSI Bridge
Prerequisites None (official); hands-on Kubernetes experience strongly recommended
Certification validity 2 years (credentials earned after April 1, 2024)

The two included Killer.sh simulator sessions are genuinely valuable - Killer.sh is widely regarded as harder than the actual exam, which makes it excellent preparation. For a full breakdown of the pricing structure including bundle options, see the CKA Certification Cost 2026: Complete Pricing Breakdown.

Who Hires CKAs and Why

The organizations hiring for CKA credentials span virtually every industry that runs software at scale. Cloud providers, financial institutions, healthcare platforms, e-commerce companies, government agencies, and SaaS businesses all operate Kubernetes clusters and need people who can keep them running reliably.

The specific job titles that commonly require or prefer CKA certification include:

  • Platform Engineer / Infrastructure Engineer - building and maintaining internal developer platforms on Kubernetes
  • Site Reliability Engineer (SRE) - ensuring uptime and performance of production Kubernetes workloads
  • DevOps Engineer - integrating Kubernetes into CI/CD pipelines and managing deployment infrastructure
  • Cloud Infrastructure Engineer - operating managed Kubernetes services (EKS, GKE, AKS) and adjacent cloud resources
  • Kubernetes Administrator - dedicated cluster administration roles at larger organizations

The CKA is specifically valued because it filters for practical ability. Employers know that a CKA holder has proven they can operate a cluster under real conditions - not just pass a theory test. For an honest look at the return on investment from a career perspective, Is the CKA Certification Worth It? Complete ROI Analysis 2026 addresses the question directly.

Preparing to Become a CKA

What Experience You Actually Need Before Starting

The official exam listing states no prerequisites. In practice, walking into the CKA without hands-on Kubernetes, Linux command-line, YAML, and container experience makes the exam dramatically harder. The exam does not teach you Kubernetes - it measures whether you already know how to operate it.

Candidates with no prior Kubernetes exposure should plan for several months of learning before scheduling. Those already working with Kubernetes daily may be ready much sooner. Honest self-assessment here saves money and frustration.

A Domain-Weighted Study Sequence

Because the exam domains carry different weights, structuring your preparation around those weights is more effective than working through topics alphabetically or in the order they appear in documentation.

Phase 1

Cluster Architecture & Core Concepts (Domain 1 - 25%)

  • Build clusters with kubeadm from scratch repeatedly
  • Practice etcd backup and restore until it's automatic
  • Master RBAC configuration end-to-end
  • Understand the control plane component roles
Phase 2

Troubleshooting (Domain 5 - 30%)

  • Practice diagnosing broken clusters, nodes, and pods from real failure scenarios
  • Learn to read kubelet, kube-apiserver, and container logs efficiently
  • Use kubectl describe, kubectl logs, and journalctl fluently
Phase 3

Networking & Workloads (Domains 2 & 3 - 35% combined)

  • Configure all Service types, Ingress, and NetworkPolicies
  • Practice scheduling workloads using affinity, taints, and resource constraints
  • Work with Gateway API resources in a lab environment
Phase 4

Storage & Full-Length Practice (Domain 4 + Simulation)

  • Complete PV/PVC/StorageClass scenarios
  • Run both Killer.sh simulator sessions under timed conditions
  • Review weak areas identified from practice exams and simulator results

For a detailed week-by-week study plan with specific resource recommendations, the CKA Study Guide 2026: How to Pass on Your First Attempt is the most comprehensive preparation resource available. If you want an honest picture of the difficulty involved, How Hard Is the CKA Exam? Complete Difficulty Guide 2026 covers what makes this credential genuinely challenging.

Key Takeaway

Troubleshooting is 30% of the exam - the single largest domain - yet candidates frequently underinvest in it because it's harder to study than configuration tasks. Deliberately practicing broken-cluster scenarios, not just healthy-cluster builds, is the most important shift you can make in your preparation strategy.

Certification Validity and Renewal

CKA certifications earned after April 1, 2024 are valid for 2 years from the date earned. There is no continuing education pathway, no credits system, and no alternative renewal mechanism - when your certification approaches expiration, you renew by retaking and passing the full exam before the expiration date.

This approach keeps the credential meaningful. A CKA holder from three years ago who hasn't kept up with Kubernetes cannot passively hold a current certification - the 2-year cycle ensures that certified individuals are staying current with an ecosystem that moves quickly.

Version Currency Matters: Because the CKA environment aligns with the latest Kubernetes minor release within 4-8 weeks, the exam content evolves regularly. Concepts introduced in recent Kubernetes versions - such as Gateway API resources, which now appear in the CKA curriculum - may not appear in older study materials. Always verify the current exam version in The Linux Foundation FAQ before beginning your preparation.

Frequently Asked Questions

What does CKA stand for?

CKA stands for Certified Kubernetes Administrator. It is a professional certification created by the Cloud Native Computing Foundation (CNCF) and The Linux Foundation that validates hands-on Kubernetes cluster administration skills. See What Does CKA Mean? for a deeper explanation of the credential's scope.

Is there a prerequisite to take the CKA exam?

There are no official prerequisites - anyone can register and schedule the exam. However, The Linux Foundation strongly recommends hands-on experience with Kubernetes, Linux command-line tools, YAML, and containers before attempting the exam. Candidates without this background will find the 2-hour, performance-based format extremely difficult.

How many questions are on the CKA exam and how long is it?

The CKA contains approximately 15-20 performance-based tasks. The exam duration is 2 hours. All tasks are completed in a live Linux terminal connected to real Kubernetes clusters - there are no multiple-choice questions.

What is the passing score for the CKA?

The passing score is 66%. Partial credit is available on a per-task basis, which means completing a task partially can still earn you points. Score reports are typically available within 24 hours of completing the exam.

How do I prepare effectively for the CKA?

Effective CKA preparation centers on hands-on practice in a real Kubernetes environment - not reading or video-watching alone. Prioritize Troubleshooting (30%) and Cluster Architecture (25%) since they account for over half the exam. Use the two included Killer.sh simulator sessions, practice navigating the official Kubernetes documentation at speed, and take timed CKA Exam Prep practice tests to identify gaps before exam day. The CKA Study Guide 2026 provides a complete structured preparation plan.

Ready to pass your CKA exam?

Put this into practice with free CKA questions across every exam domain.