KUBERNETES CERTIFICATIONS & EXAM PREPARATION

Kubernetes certification: choose the right credential

Which certification fits your work? See what KCNA, KCSA, CKAD, CKA and CKS assess, what experience you need and how you can prepare for each exam.

KUBERNETES CERTIFICATIONS AT A GLANCE

How KCNA, KCSA, CKAD, CKA and CKS differ

Technical basis: CNCF, Linux Foundation

FROM CONCEPTUAL KNOWLEDGE TO KUBESTRONAUT

One possible order for the five exams

For orientation: only CKA before CKS is mandatory

  1. First

    Demonstrate conceptual knowledge

    KCNA for cloud native, KCSA for security basics, both with knowledge questions

  2. Then

    Hands-on skills on a live cluster

    CKAD for development, CKA for administration, both with practical tasks

  3. Next

    Specialise in security

    CKS tests security practice and requires a passed CKA

  4. Goal

    Kubestronaut status

    Keep all five credentials valid at the same time. Not a step, but the outcome of the three stages.

WHAT CREDENTIALS SHOW AND THEIR LIMITS

What a certification tells you

The exam follows a defined scope
Each certification demonstrates knowledge within a defined, vendor-neutral exam scope. Depending on the format, this means conceptual questions or practical tasks on a live cluster.
Day-to-day experience adds more
Passing an exam does not replace experience with your own platform. A team develops routines for changes, incidents and collaboration through daily work.

Certification makes sense when …

you need a vendor-neutral credential or want to structure your knowledge around a defined exam scope.

Certification may be unnecessary when …

you only need to solve a specific project task and do not need a formal credential. A workshop focused on that topic may be more direct.

THE ROUTE TO GOLDEN KUBESTRONAUT

The domains covered by the Golden Kubestronaut programme

  • Kubernetes coreKCNA, preparation availableKCSA, preparation availableCKAD, preparation availableCKA, preparation availableCKS, preparation available
    View in the catalogue
  • NetworkingCCA, no preparationCKNE, before launch
    View in the catalogue
  • ObservabilityPCA, no preparationOTCA, no preparation
    View in the catalogue
  • GitOps & deliveryCAPA, no preparationCGOA, no preparation
    View in the catalogue
  • Policy & platformKCA, no preparationCBA, no preparationCNPA, no preparationCNPE, no preparationICA, no preparation
    View in the catalogue
  • LinuxLFCS, no preparation
    View in the catalogue

EXAM FORMATS

, ,

Performance-based exam
You complete tasks directly in an exam environment. Preparation therefore focuses on practical workflows, confident navigation and applying the assessed skills rather than simply recalling knowledge.
Knowledge questions
You select answers to questions that assess knowledge and understanding. Preparation connects the relevant concepts with typical decisions so you can interpret relationships and distinguish between possible answers for sound reasons.
Online proctoring
Online proctoring means you take the exam remotely under digital supervision. The Kubernetes exams compared here use this method for both knowledge questions and practical tasks.

PROGRAMS

,

Kubestronaut
Initial qualification as a Kubestronaut requires all five Kubernetes certifications, KCNA, KCSA, CKA, CKAD and CKS, to be valid simultaneously. The title remains valid until the end of the calendar year in which the first of the five certifications expires; renewal restores it.
Golden Kubestronaut
Golden Kubestronaut requires all current CNCF certifications plus LFCS in valid standing. Once awarded, CNCF describes the title as lifelong, while some benefits remain tied to active Kubestronaut status.

EXAM LOGISTICS

, ,

Retake
A retake is another exam attempt after an unsuccessful first attempt. Each CNCF exam compared here includes one free retake in the exam fee.
Validity
Validity is the period during which a passed credential remains active. It is stated in years for each certification and appears with the other exam facts in the comparison.
Exam prerequisites
Exam prerequisites are credentials that must be completed before another exam. This path has one mandatory rule: you must pass CKA before taking CKS.

Still unsure which exam fits?

The finder asks about your work, Kubernetes experience and preferred exam format. It then gives you a recommendation with the reasons behind it.

Choose a certification

THE FIVE EXAMS

Which certification fits which type of work?

KCNA is the entry point into cloud native. CKAD is for developers, while CKA is for people who operate clusters. Security has two levels: KCSA for foundations and CKS for hands-on work after passing CKA.

For admins and platform engineers

Intermediate

CKA Exam Preparation

4 daysLive onlineCourse code: DW6

Solid Kubernetes practice is expected. CKA or CKAD: CKA tests practical tasks in the cluster and focuses on cluster operations rather than application development; it is also the prerequisite for CKS.

Your learning path

Now: CKA Exam Preparation

Build clusters, operate workloads, troubleshoot networking and storage hands-on

Then: CKS Exam Preparation

Course code: DW7

Selected: CKA Exam Preparation

SIDE-BY-SIDE COMPARISON

Comparing KCNA, KCSA, CKAD, CKA and CKS

Compare audience, prerequisites, exam format and possible next steps at a glance. Fees and validity periods come from the official sources, with the check date shown alongside them.

Suited for

DW24 KCNA, KCNA Exam Preparation
IT practitioners new to cloud native
DW25 KCSA, KCSA Exam Preparation
IT and security staff with practical Kubernetes, Linux and networking skills
DW5 CKAD, CKAD Exam Preparation
Developers running applications on Kubernetes
DW6 CKA, CKA Exam Preparation
Admins and platform engineers operating clusters
DW7 CKS, CKS Exam Preparation
Security engineers and administrators with advanced Kubernetes, Linux and network practice

Prerequisites

DW24 KCNA, KCNA Exam Preparation
No prior cloud native knowledge required
DW25 KCSA, KCSA Exam Preparation
Workshop: Pods, Deployments, Services, Namespaces in practice; confident with Linux shell and kubectl; TCP/IP, DNS and firewall basics
DW5 CKAD, CKAD Exam Preparation
Container basics and initial Kubernetes experience
DW6 CKA, CKA Exam Preparation
Experience with Kubernetes workloads and kubectl
DW7 CKS, CKS Exam Preparation
Confident with kubectl, kubeadm, TLS, Linux and YAML; passed CKA only for the CKS exam

Exam format

DW24 KCNA, KCNA Exam Preparation
Multiple-choice90 minutes of exam time
DW25 KCSA, KCSA Exam Preparation
Multiple-choice90 minutes of exam time
DW5 CKAD, CKAD Exam Preparation
Performance-based exam120 minutes of exam time
DW6 CKA, CKA Exam Preparation
Performance-based exam120 minutes of exam time
DW7 CKS, CKS Exam Preparation
Performance-based exam120 minutes of exam time

Exam fee

DW24 KCNA, KCNA Exam Preparation
USD 250 (exam registration only)One retake included
DW25 KCSA, KCSA Exam Preparation
USD 250 (exam registration only)One retake included
DW5 CKAD, CKAD Exam Preparation
USD 445 (exam registration only)One retake included
DW6 CKA, CKA Exam Preparation
USD 445 (exam registration only)One retake included
DW7 CKS, CKS Exam Preparation
USD 445 (exam registration only)One retake included

Certification validity

DW24 KCNA, KCNA Exam Preparation
Valid for 2 years
DW25 KCSA, KCSA Exam Preparation
Valid for 2 years
DW5 CKAD, CKAD Exam Preparation
Valid for 2 years
DW6 CKA, CKA Exam Preparation
Valid for 2 years
DW7 CKS, CKS Exam Preparation
Valid for 2 years

Workshop duration

DW24 KCNA, KCNA Exam Preparation
2 days
DW25 KCSA, KCSA Exam Preparation
3 days
DW5 CKAD, CKAD Exam Preparation
3 days
DW6 CKA, CKA Exam Preparation
4 days
DW7 CKS, CKS Exam Preparation
4 days

Level

DW24 KCNA, KCNA Exam Preparation
Beginner
DW25 KCSA, KCSA Exam Preparation
Intermediate
DW5 CKAD, CKAD Exam Preparation
Intermediate
DW6 CKA, CKA Exam Preparation
Intermediate
DW7 CKS, CKS Exam Preparation
Advanced

Possible next step

DW24 KCNA, KCNA Exam Preparation
CKAD for development, CKA for cluster operations
DW25 KCSA, KCSA Exam Preparation
Pass CKA first, then work towards CKS
DW5 CKAD, CKAD Exam Preparation
CKA when responsible for cluster operations
DW6 CKA, CKA Exam Preparation
CKS when responsible for cluster security
DW7 CKS, CKS Exam Preparation
Add missing credentials for Kubestronaut status

THE GOLDEN KUBESTRONAUT INDEX

All credentials required for Golden Kubestronaut

The index shows which exams belong to the programme and which preparation you can already book or request from us. CKNE is included for orientation but is not currently required.

5 certifications

Kubernetes fundamentals, development, operations and security

KCNA and KCSA assess cloud native and security fundamentals. CKAD covers application development, CKA cluster operations and CKS practical Kubernetes security.

  • DW24KCNA Exam PreparationKnowledge questions span architecture, orchestration, observability, and application delivery2 days
  • DW25KCSA Exam PreparationCloud native security: cluster hardening, workload protection, threat models, supply chains, and compliance3 days
  • DW5CKAD Exam PreparationImplement pods, deployments, configuration, services, and observability in the cluster3 days
  • DW6CKA Exam PreparationBuild clusters, operate workloads, troubleshoot networking and storage hands-on4 days
  • DW7CKS Exam PreparationHarden clusters, secure supply chains, detect runtime threats, investigate incidents4 days
2 certifications

Cilium knowledge and Kubernetes networking practice

CCA assesses Cilium knowledge, while CKNE tests practical Kubernetes networking work. The CKNE beta is closed; general availability is pending.

  • DW39Preparation for the Cilium Certified Associate (CCA) ExamKnowledge questions cover eBPF, Cilium networking, policies, service mesh, observabilityRequest
  • DW38Preparation for the Certified Kubernetes Network Engineer (CKNE) ExamConfigure CNI, services, DNS, traffic, network security, and observabilityRequest
2 certifications

Work with metrics and telemetry data

PCA covers Prometheus and working with metrics. OTCA assesses OpenTelemetry fundamentals and telemetry data.

  • DW41Preparation for the Prometheus Certified Associate (PCA) ExamPrometheus architecture: PromQL, instrumentation, service discovery, alerting, and monitoringRequest
  • DW40Preparation for the OpenTelemetry Certified Associate (OTCA) ExamInstrument telemetry, process signals through collectors, export, and correlate contextsRequest
2 certifications

GitOps principles and the Argo project

CAPA assesses knowledge of the Argo project. CGOA covers GitOps fundamentals and their use in software delivery.

  • DW43Preparation for the Certified Argo Project Associate (CAPA) ExamKnowledge questions: Argo Workflows, CD, Rollouts, Events, GitOps deliveryRequest
  • DW44Preparation for the Certified GitOps Associate (CGOA) ExamGitOps fundamentals: declarative configuration, reconciliation, delivery, security, and toolingRequest
5 certifications

Policy, service mesh and platform engineering

ICA focuses on Istio, KCA on Kyverno and CBA on Backstage. CNPA tests conceptual platform engineering knowledge, while CNPE tests practical application.

  • DW42Preparation for the Istio Certified Associate (ICA) ExamConfigure and explain traffic, security, resilience, and observability conceptsRequest
  • DW46Preparation for the Certified Backstage Associate (CBA) ExamUnderstand software catalogs, templates, plugins, TechDocs, search, and authenticationRequest
  • DW45Preparation for the Kyverno Certified Associate (KCA) ExamValidate, mutate, generate Kubernetes resources, then verify images and policy resultsRequest
  • DW47Preparation for the Certified Cloud Native Platform Engineering Associate (CNPA) ExamKnowledge questions cover platform architecture, self-service, automation, observability, and securityRequest
  • DW48Preparation for the Certified Cloud Native Platform Engineer (CNPE) ExamBuild self-service platforms with delivery, infrastructure automation, observability, and securityRequest
1 certification

Administer Linux systems in practice

LFCS tests practical Linux system administration. It complements the CNCF certifications required for Golden Kubestronaut status.

  • DW49Preparation for the Linux Foundation Certified System Administrator (LFCS) ExamAdminister systems hands-on: users, services, networking, storage, and troubleshootingRequest

Bookable preparation courses link to their detail pages. Entries marked “Request” open a corporate training request.

THE KUBESTRONAUT PATH

How to plan your route to Kubestronaut

KCNA, KCSA, CKAD, CKA and CKS must all be active at the same time for Kubestronaut status. Your experience and responsibilities determine which exam comes first. The only fixed rule is that you must pass CKA before CKS.

What is a Kubestronaut?

Five Kubernetes credentials, valid simultaneously

Kubestronaut is a title awarded by the CNCF to people whose five Kubernetes certifications, KCNA, KCSA, CKA, CKAD and CKS, are valid simultaneously. The title remains valid through the year when the first expires; renewal restores it.

Jacket, Credly badge, 50% CNCF exam discount, 20% annual event discount

Golden Kubestronaut

All CNCF credentials plus LFCS, permanently

Golden Kubestronaut additionally requires all remaining CNCF certifications and the LFCS, totalling 16 simultaneously valid exams. Once earned, the title is held for life.

  • 5 Kubestronaut credentials
  • +10 CNCF credentials
  • LFCS
  • CKNE follows after GA

Since 2025Over 370 Golden Kubestronauts (as of 23 March 2026)Backpack and beanie, THRIVE-ONE, one KCD ticket per year, 50% off one KubeCon registration per year

Rules and roles: Under CARE, the applicable lower-level certification must have been earned previously, whether it is current or expired; passing a higher-level exam does not grant a credential never held. Passing CKA or CKAD renews KCNA. Passing or recertifying CKS renews KCSA and KCNA and, since 18 June 2026 and not retroactively, also reinstates or extends CKA. New exams count no earlier than 90 days after general availability; CKNE is not required today. CNCF and the Linux Foundation award and examine the certifications; DevNinjas only prepares candidates: 5 preparations are bookable, 12 available on request.

Recommended route

Suggested route, not a fixed sequence

  1. 01

    STARTING POINT

    Test cloud native and security fundamentals

    Both contribute

    • RECOMMENDED STARTKCNA Exam PreparationCloud native fundamentals in a multiple-choice format, with no prerequisites.Beginner2 daysCourse code: DW24
    • CAN RUN IN PARALLELKCSA Exam PreparationSecurity fundamentals in a multiple-choice format with Kubernetes context.Intermediate3 daysCourse code: DW25
  2. 02

    HANDS-ON

    Demonstrate development and operations skills

    Both contribute

  3. 03

    GOAL

    Demonstrate practical Kubernetes security skills

    • AFTER PASSING THE CKACKS Exam PreparationWith the other four credentials active, this completes the Kubestronaut path.Advanced4 daysCourse code: DW7

The stages are a learning recommendation, not a required order. Existing experience may replace preparation steps; only CKA before CKS is an official requirement.

View the Kubestronaut learning path

VOICES FROM THE WORKSHOPS

What participants say about the workshops

These comments come from our CKAD, CKA and CKS workshops. Participants talk about the content, the teaching and their work in our learning environment.

DW7 CKS Exam Preparation

„The CKS extends your Kubernetes knowledge with the security-relevant aspects and is therefore the perfect follow-up to the CKA. For anyone working in the Kubernetes security space, it is definitely worth it. Very strong technical expertise, very friendly, and the content was conveyed interactively and vividly. The learning environment was very well designed.“

Fabian Maas

STACKIT GmbH, CKS Exam Preparation

Participant voice on DW6

„Very competent, very pleasant teaching style.“

Pascal Knöll

Bundeswehr, CKA Exam Preparation

Participant voice on DW5

„The trainer was very competent and was able to draw from an extensive wealth of experience.“

Thomas Schaper

OPITZ CONSULTING, CKAD Exam Preparation

Vincent Sturm - DevNinjas

Plan Kubernetes certifications for your team

Vincent Sturm

Key Account Manager

Preparing several people or planning a shared certification route? We discuss your team's responsibilities, existing experience and goals, then put together suitable team training.

WhatsApp Chat

Frequently asked questions about Kubernetes certifications

Which Kubernetes certification fits me: CKA or CKAD first?

Start with CKA if you operate Kubernetes clusters, or CKAD if you develop and deploy applications on Kubernetes.

CKA preparation covers cluster setup, recovery and systematic troubleshooting. CKAD preparation focuses on workloads, application configuration and debugging. KCNA (Kubernetes and Cloud Native Associate) is an entry-level certification with no prior knowledge required; KCSA assesses security foundations. The practical security exam CKS requires a previously passed CKA, including an expired CKA; otherwise, there is no mandatory exam order. The certification finder helps you choose based on your work and experience.

Which Kubernetes exams are practical, and which use multiple choice?

CKA, CKAD and CKS assess practical Kubernetes skills; KCNA and KCSA test knowledge through multiple-choice questions.

In the practical exams, you complete command-line tasks. KCNA and KCSA involve no cluster work. All five exams are proctored online. The comparison table lists the duration of each exam.

Must I have passed CKA to take CKS?

To take CKS, you must have previously passed CKA; an expired CKA also qualifies for exam scheduling. You do not need CKA to attend the CKS workshop.

Among KCNA, KCSA, CKAD, CKA and CKS, only CKA before CKS is mandatory. You can plan the other exams around your responsibilities. Kubestronaut, however, requires all five credentials to be active at the same time. The Kubestronaut learning path shows one possible course sequence.

Is the Kubernetes exam included in training, and what other costs apply?

The Kubernetes exam fee is not included in the DevNinjas workshop price; you book the exam separately with the Linux Foundation.

For each participant, allow for the workshop, exam registration and a later renewal exam. The comparison table lists exam fees with their source and check date. CKA, CKAD, CKS and KCSA registrations include one retake. CKA, CKAD and CKS registrations also include access to the Killer.sh exam simulator; bookings without a simulator, labelled -SINGLE, exclude that access.

What do I need for Kubestronaut and Golden Kubestronaut?

Kubestronaut requires five certifications to be active simultaneously: KCNA, KCSA, CKAD, CKA and CKS.

Golden Kubestronaut adds the other current CNCF certifications and LFCS. The certification index shows the full list and the status of preparation courses.

Which Kubernetes exam preparation courses can I book with DevNinjas?

DevNinjas offers preparation courses for KCNA, KCSA, CKAD, CKA and CKS; the certification index shows the status of each exam.

For exams without a bookable public course, we can discuss corporate training with you; the index marks those preparations as available to enquire about.

How is CKA proctored, and is the exam available in German?

The CKA exam is proctored online through camera, microphone and screen sharing; the Linux Foundation does not offer exam tasks in German. Check-in includes checks of your ID and examination room. You need the PSI Secure Browser and should run the system check beforehand.

CKA, CKAD and CKS tasks are available in English, Simplified Chinese and Japanese. DevNinjas teaching and materials instead follow the booked course language, which appears beside the workshop date.

Does passing CKS renew my CKA certification?

Passing or renewing CKS renews a previously earned CKA through the Linux Foundation CARE programme if the CKS certification was earned on or after 18 June 2026. CKA's expiry date aligns with the new CKS expiry date; an expired CKA can also become current again.

Earlier CKS certifications do not qualify retrospectively. CARE does not award certifications you have never earned. If your credentials are held in different LF accounts, contact LF support because automatic matching does not work across accounts.