Certified Kubernetes Administrator

CKA · ● Active · Associate · CNCF / Linux Foundation

Use this certification to validate hands-on Kubernetes cluster administration and management skills. CKA is the industry-standard entry-level administrator credential for container orchestration, requiring practical proficiency in deploying, configuring, troubleshooting, and maintaining production Kubernetes clusters. Performance-based 100% — no multiple choice.

Exam facts

Vendor source — CNCF Certified Kubernetes Administrator ↗

Official exam guide — Linux Foundation CKA Training & Certification ↗

Exam objectives — CKA Exam Curriculum ↗

About

The Certified Kubernetes Administrator (CKA) validates your ability to design, install, configure, and troubleshoot production-grade Kubernetes clusters. Launched by the CNCF in 2016 as the first vendor-neutral Kubernetes certification, CKA remains the gold standard for cluster administrators and is designed around real-world cluster-admin tasks. Unlike vendor-specific certifications (AWS EKS, Azure AKS), CKA tests pure Kubernetes administration independent of cloud platform, making it universally recognized across on-prem, public cloud, and edge deployments. The exam covers Kubernetes v1.29 and v1.30 as of May 2026, and includes new questions on Gateway API (successor to Ingress) reflecting modern Kubernetes evolution.

Domain context — DevOps / Kubernetes / Container Orchestration

Container orchestration platforms automate deployment, scaling, networking, and lifecycle management of containerized workloads across clusters of machines. Kubernetes is the de facto standard orchestrator, used by 96% of container-using enterprises. DevOps roles (DevOps Engineers, Site Reliability Engineers, Platform Engineers) depend heavily on Kubernetes proficiency. CKA is the entry-level credential for cluster operations; CKS (Kubernetes Security Specialist) and CKAD (Application Developer) are advanced siblings.

Read full deep dive — CNCF Ecosystem →

Topics covered

Content Domains from Official CNCF Exam Curriculum (2026):

• Cluster Architecture, Installation & Configuration (25%) — kubeadm cluster bootstrap, etcd management, TLS/certificate lifecycle, kubelet / kube-apiserver / kube-controller-manager / kube-scheduler configuration, HA cluster design, OS/network prerequisites.
• Workloads & Scheduling (15%) — Pods, Deployments, StatefulSets, DaemonSets, Jobs, CronJobs; resource requests/limits; affinity; taints and tolerations; pod priority and preemption.
• Services & Networking (20%) — Services (ClusterIP, NodePort, LoadBalancer), Ingress (and new Gateway API), DNS/CoreDNS, network policies, service mesh basics (Istio/Linkerd awareness).
• Storage (10%) — Persistent Volumes (PV), Persistent Volume Claims (PVC), StorageClasses, ConfigMaps, Secrets, StatefulSet persistent storage patterns.
• Troubleshooting (30%) — Cluster diagnostics (logs, kubectl describe/get, events), pod debugging, node health, network troubleshooting, common misconfigurations, recovery from failures.

Source: CNCF CKA Curriculum ↗

Common skills at DevOps · Associate

Shared content for DevOps domain at Associate level — not specific to this cert.

• Linux fundamentals (systemd, process management, basic networking, file permissions)
• Docker container basics (image builds, registry operations, volumes, networking)
• YAML / JSON configuration syntax and validation
• Git and basic CI/CD pipeline concepts
• Cloud infrastructure fundamentals (VPCs, networking, storage concepts)
• Monitoring and logging basics (metrics, log aggregation, alerting thresholds)
• Command-line proficiency (bash scripting, grep, sed, awk, jq)
• Incident response and troubleshooting methodology

Recommended courses at DevOps · Associate

Course-selection rule: KodeKloud and Linux Foundation's LFS258 are the two industry-standard pathways. KodeKloud emphasizes hands-on labs with prebuilt clusters (faster to get started); LFS258 teaches you to build your own cluster from scratch (deeper understanding but steeper learning curve for Linux newcomers). Most successful CKA candidates use both.

Practice exams

Practice quality note: Killer.sh (2 attempts, 36 hours access per attempt, included with exam) is widely considered the closest match to actual exam difficulty. KodeKloud labs provide unlimited practice with real cluster operations. Killercoda is free and excellent for scenario-based learning but easier than the actual exam.

Books

Book rule: "Kubernetes: Up and Running" is the foundational reference, recently updated (3rd ed. 2024) with new chapters on security, programmatic access, and multicluster patterns. "Kubernetes in Action" (2nd ed. 2026, just released) is hands-on and practical. CKA does not require deep book study (labs matter more), but both are valuable references for conceptual depth.

Typical job titles at DevOps · Associate

Kubernetes Administrator · DevOps Engineer · Site Reliability Engineer (SRE) · Platform Engineer · Cloud Operations Engineer · Container Operations Specialist · Infrastructure Engineer (Kubernetes-focused)

(Job titles drawn from current job-board postings that list CKA as required or preferred.)

Salary

Salary context: Kubernetes specialists (those with CKA + production experience) command 15–25% premium over generic DevOps roles. Entry-level (0–2 years, often with CKA) typically USD $106k–$120k; mid-level (3–5 years, CKA + CKS) $145k–$165k; senior (6+ years, architect-level) $170k+. Remote and startup roles often pay above these ranges.

Skills validated

Cert-specific — what this exam actually tests, distinct from shared DevOps skills.

• kubectl command-line proficiency (all operations: get, apply, delete, logs, exec, port-forward, edit, patch)
• Kubernetes API objects: Pods, Deployments, StatefulSets, DaemonSets, Services, Ingress, PersistentVolumes, ConfigMaps, Secrets, RBAC (Roles, RoleBindings)
• Cluster bootstrapping: kubeadm initialization, control-plane component management, certificate generation and rotation
• etcd database operations (backup, restore, health checks)
• Pod scheduling and affinity: node selectors, taints/tolerations, resource requests/limits, pod disruption budgets
• Networking: service discovery via DNS, network policies, ingress routing (Ingress and Gateway API), kube-proxy modes
• Storage orchestration: PersistentVolumes, PersistentVolumeClaims, StorageClasses, volume mounting, snapshot operations
• Cluster troubleshooting: diagnosing pod failures, node status investigation, container logs, event inspection, common misconfiguration patterns
• High-availability cluster design: multi-master etcd, load balancing control plane, disaster recovery strategies
• Linux: systemd service management, file permissions, networking (iptables/nftables awareness), package management

Related certifications

• Entry point (prerequisite knowledge): Kubernetes and Cloud Native Basics (KCNA) ↗ · Docker fundamentals (no formal cert; Docker Certified Associate covers this) ↗
• Prerequisite for: Certified Kubernetes Application Developer (CKAD) ↗ · Certified Kubernetes Security Specialist (CKS) ↗
• Stacks with: AWS Certified DevOps Engineer Professional (DOP-C02) · Microsoft Azure Administrator (AZ-104) · Terraform Associate (HashiCorp)
• Replaces: N/A — CKA has been continuously updated since 2016; no predecessor
• Equivalents at this level: Kubernetes foundational knowledge required for cloud-native roles on AWS (EKS), Azure (AKS), GCP (GKE), but CKA remains vendor-agnostic and is preferred by enterprises
• Vendor overview: CNCF Overview ↗

Sources

• CNCF Certified Kubernetes Administrator ↗
• Linux Foundation CKA Training & Certification ↗
• CNCF CKA Curriculum ↗
• Linux Foundation LFS258 Kubernetes Fundamentals ↗
• Killer.sh CKA Exam Simulator ↗
• KodeKloud CKA Learning Path ↗
• Kubernetes: Up and Running 3rd Edition (O'Reilly) ↗
• Kubernetes in Action 2nd Edition (Manning) ↗
• Glassdoor Kubernetes DevOps Engineer Salary ↗
• IT Jobs Watch DevOps Engineer UK Salary ↗
• ERI SalaryExpert Kubernetes Engineer South Africa ↗

Last verified: 2026-05-01 Parent ecosystem: CNCF Ecosystem Parent domain: DevOps, SRE & Platform Engineering Domain Vendor overview: CNCF & Linux Foundation Overview