A clear roadmap through CNCF's Kubernetes certifications — Administrator, Application Developer, and Security Specialist. Every path is hands-on: real clusters, real kubectl, real YAML, auto-committed to your own GitHub repo as you go.
3 cert paths · $49–$79 each · Project 1 always free
Start with CKA (operations) or CKAD (development) depending on your role — both are valid entry points. CKS requires an active CKA and is the most advanced of the three.
For operations and platform roles. Covers cluster installation, configuration, networking, storage, troubleshooting, and cluster maintenance — the foundation for managing Kubernetes in production.
For application developer roles. Covers building, configuring, and deploying applications on Kubernetes — pods, deployments, services, config maps, and observability.
Advanced — requires active CKA
The most advanced Kubernetes certification. Covers cluster hardening, system hardening, minimizing microservice vulnerabilities, supply chain security, and runtime security with Falco, OPA Gatekeeper, and Trivy.
Every Kubernetes path auto-commits your evidence — YAML manifests, kubectl output, Falco rules, OPA policies — straight to your own GitHub repo.
No simulators. Labs use kind (Kubernetes in Docker) and real kubectl commands — the same performance-based format as the actual exams.
Each path has a Cert Buddy trained on that exam's objectives — for debugging YAML, kubectl errors, and exam strategy under time pressure.
All three Kubernetes exams are performance-based with strict time limits. Labs are built to develop the speed and muscle memory the exams demand.
Every Kubernetes cert path includes a full PDF lab guide with step-by-step instructions and a command quick-reference section.
$49–$79 per cert, once. Or get All-Access to all 21 cert paths — CKA, CKAD, and CKS included — for $199.
What order should I take CNCF Kubernetes certifications in?
Start with CKA (Certified Kubernetes Administrator) to build core cluster operations skills, or CKAD (Certified Kubernetes Application Developer) if your role is more application-focused. CKS (Certified Kubernetes Security Specialist) requires an active CKA and should be taken last — it's the most advanced of the three.
Should I take CKA or CKAD first?
CKA (Certified Kubernetes Administrator) focuses on cluster operations — installation, configuration, networking, storage, and troubleshooting. CKAD (Certified Kubernetes Application Developer) focuses on building and deploying applications on Kubernetes — pods, deployments, services, and configuration. Choose based on your role: operations/platform engineers typically take CKA first, while application developers often start with CKAD. Both are valid starting points and don't require each other.
Do I need CKA before taking CKS?
Yes. CKS (Certified Kubernetes Security Specialist) requires an active CKA certification as a prerequisite. CKS builds on CKA knowledge and adds security-specific tooling — AppArmor, seccomp, Falco, OPA Gatekeeper, Trivy, and runtime security. It's considered the most difficult of the three Kubernetes certifications.
Are CKA, CKAD, and CKS exams hands-on?
Yes, all three are performance-based exams. You work in live terminal environments connected to real Kubernetes clusters, completing tasks under time pressure — not multiple-choice questions. HandsOnCert's labs use the same tools (kubectl, kind, Helm) in the same hands-on format to build real exam-day speed and confidence.
How does the GitHub portfolio work for Kubernetes labs?
When you complete a Kubernetes lab step, HandsOnCert commits your actual YAML manifests, kubectl command output, and configuration files to your own GitHub repository. For CKS specifically, this includes real Falco rules, OPA Gatekeeper policies, and security configurations — a portfolio that demonstrates real platform security knowledge.
Do CKA, CKAD, and CKS certifications expire?
Yes, all three CNCF Kubernetes certifications are valid for 2 years from the date you pass the exam, after which they must be renewed by retaking the current version of the exam.
Project 1 of any Kubernetes path is free — no credit card required. See exactly how the GitHub auto-commit works before you pay anything.
Start Free →