CKA Study Plan
The CKA is graded on one thing: the state you leave a live cluster in after two hours, not the commands you typed to get there. That should change how you study for it. A plan built around this exam can't be five equal weeks for five equal-looking domains — it has to mirror the exam's own math, where one domain, Troubleshooting, is worth as much as the two smallest domains put together and very nearly a third of the whole score. This page lays out a nine-week plan that puts study time where the exam puts marks: two full weeks on Troubleshooting alone, roughly a week each on the other four domains sized to their weight, and a final week of nothing but timed mock exams and speed drills. Every week points at real pages and labs already on this course — blueprint domains, deep dives, tool guides, and the seven hands-on drills — so none of it is studying in the abstract. Adjust the pace to your calendar; don't adjust the proportions.
Picture training for a five-leg relay race where the legs aren't the same length — one leg is almost a third of the whole race, and the shortest leg is barely a tenth of it. A sensible runner doesn't train every leg for the same number of hours just because there are five of them; they put the most miles into the longest leg, a solid amount into the two middle ones, and just enough into the short ones to not trip. This study plan does exactly that with your calendar. The biggest, longest domain — Troubleshooting — gets two full weeks and a standing weekly habit besides. The smallest domain, Storage, gets one focused week. Nobody skips a leg. Nobody pretends all five legs are the same size, either.
The domain-weighted study budget
☺ Like you're 10: The exam doesn't grade every topic equally, so your calendar shouldn't either — a week spent on the biggest domain is worth more than a week spent on the smallest.
These are the five domains and weights exactly as published in the CNCF's Certified Kubernetes Administrator (CKA) Exam Curriculum, version 1.35. There are five, they carry no sub-weights, and they sum to exactly 100% — 30 + 25 + 20 + 15 + 10. (The curriculum PDF prints the 20% domain as "Servicing and Networking"; this course follows the more common phrasing "Services & Networking" for the same domain — see the Troubleshooting blueprint page for the full note.) Treat that shape as a budget, not a checklist: it tells you almost exactly how many of your study hours belong to each domain.
Underneath those five percentages sit 27 published competencies — the individual bullet points the curriculum actually lists, one exam task usually maps to one or two of them. Turning weight and competency count into an hours budget gives a plan you can actually schedule against:
| Domain | Weight | Competencies | Study-budget hours |
|---|---|---|---|
| 🦊 Troubleshooting | 30% | 5 | ~30 hrs |
| 🦉 Cluster Architecture, Installation & Configuration | 25% | 8 | ~25 hrs |
| 🐦 Services & Networking | 20% | 6 | ~20 hrs |
| 🦫 Workloads & Scheduling | 15% | 5 | ~15 hrs |
| 🐘 Storage | 10% | 3 | ~10 hrs |
| Domain core, total | 100% | 27 | ~100 hrs |
That ~100-hour core doesn't include getting a lab running or sitting mock exams — budget another ~25–30 hours for those, for a full plan of roughly 125–130 hours. Spread across nine weeks that's about 14–15 hours a week, which is a genuine part-time-study pace, not a crash course. Compress the same proportions into five or six weeks if you already run clusters daily; stretch them to twelve if study time is scarce. The ratio between domains is what matters, not the total.
A nine-week roadmap
☺ Like you're 10: Here's the actual calendar — which week you spend on which topic, and exactly which pages on this course to use that week.
Nine weeks, sized to the budget above. D1 gets two weeks because 25% of the exam and eight competencies is genuinely a lot of ground — kubeadm, RBAC, HA control planes, and extension interfaces don't fit in one week without skimming. D5 gets two weeks for the same reason, at the top of the scale. The other three domains get one week each, and the plan opens and closes with weeks that aren't scored domains at all: a foundations week to get a real lab running, and a final week that's entirely timed practice.
| Week | Focus | Hours | What you actually do |
|---|---|---|---|
| 1 | Foundations & environment (not scored) | ~10 | Stand up a real multi-node lab — kubeadm on throwaway VMs, or kind if VMs aren't available — and refresh the object model. Read Kubernetes Architecture, The Object Model, and the API & controller pattern. |
| 2–3 | 🦉 D1 Cluster Architecture, Installation & Configuration — 25% | ~26 | Bootstrap and join nodes with kubeadm, upgrade a minor version, take and restore an etcd snapshot, build RBAC from Roles to ClusterRoleBindings, stand up an HA control plane, install a component with Helm and Kustomize. Work the D1 blueprint page, kubeadm tool guide, and control-plane internals; build it hands-on in Capstone Part 1. |
| 4 | 🦫 D2 Workloads & Scheduling — 15% | ~15 | Deployments, rolling updates and kubectl rollout undo; ConfigMaps and Secrets as env vars and volumes; HPA-driven autoscaling; taints, tolerations and node affinity. Work the D2 blueprint page, scheduling & resource management, and autoscaling; apply it in Capstone Part 2. |
| 5 | 🐦 D3 Services & Networking — 20% | ~20 | Pod-to-Pod connectivity, NetworkPolicy default-deny behavior, Service types and EndpointSlices, Ingress and the newer Gateway API, CoreDNS resolution. Work the D3 blueprint page, networking & the CNI, and the Cilium / Calico / ingress-nginx tool guides; build it in Capstone Part 3. |
| 6 | 🐘 D4 Storage — 10% (+ RBAC refresh) | ~12 | StorageClasses and dynamic provisioning, volume types and access modes, reclaim policy, PV/PVC binding and a stuck-Pending-PVC drill. Spend the last couple of hours re-running D1's RBAC exercises so they stay sharp going into the security-heavy troubleshooting weeks. Work the D4 blueprint page and storage & the CSI; build it in Capstone Part 4 and harden RBAC in Capstone Part 5. |
| 7–8 | 🦊 D5 Troubleshooting — 30% | ~30 | The largest domain, and it's a method, not a new set of nouns: describe before logs, logs before exec, node before app. Work the D5 blueprint page and a troubleshooting methodology, then run every drill: a broken cluster, a stuck pod, a networking failure, a storage incident, an RBAC gap, scale under load, and a failed upgrade. |
| 9 | Mock exams, speed & readiness (not scored) | ~15 | Two or three full timed mock exams, a daily pass through the kubectl fluency baseline, flashcards for anything still shaky, and the readiness checkpoint below before you book. |
What grading on end state changes about how you study
☺ Like you're 10: The exam never sees your reasoning, only the cluster you leave behind — so studying by watching is worth less than studying by typing and checking.
A performance-based exam rewards a specific kind of practice, and it's not re-watching video lessons. Three habits pay off disproportionately, and all three are worth building into every week of this plan, not saving for week 9.
# build these into your fingers this week, not exam week alias k=kubectl export do="--dry-run=client -o yaml" # scaffold real YAML instead of typing it from memory # e.g.: k create deploy web --image=nginx $do > deploy.yaml then edit the two lines that need it # never trust that a fix worked — the exam only grades what's actually true, not what you meant to do k apply -f deploy.yaml && k rollout status deploy/web k get pods -o wide # confirm Running, not just "no error from apply"
First, type, don't read — every command in this plan's linked pages should be run on your own lab, not just read on the page. Second, verify every claimed fix — a fix you believe you made but never confirmed with kubectl get or describe scores nothing, because grading only sees the end state, exactly as covered in the Troubleshooting blueprint page. Third, practice against a visible clock — a two-hour exam with roughly 15–20 tasks gives you well under ten minutes a task on average, and the only way to know if you're fast enough is to time yourself now, not discover it on the day.
Imperative commands with --dry-run=client -o yaml aren't a shortcut for people who don't know YAML — they're the fastest way for people who do know YAML to get a correct skeleton on screen without retyping boilerplate they'd get right anyway. Build this reflex early; see the kubectl fluency baseline for the full command set worth having cold.
Resources: official, this course, and timed practice
☺ Like you're 10: Three different kinds of resource do three different jobs — don't use a video for the thing only a live cluster can teach you.
Studying "everything you can find" wastes hours; studying the right kind of resource for each stage of the plan doesn't.
| Resource | Use it for |
|---|---|
| The published curriculum — github.com/cncf/curriculum | The exact competency wording, and confirming the version matches what you're studying. |
The Kubernetes documentation, kubernetes.io | The same allowlisted docs you're permitted to open during the exam — practice finding things in them now, not for the first time under the clock. |
| This course's blueprint — D1 · D2 · D3 · D4 · D5 | One page per domain, matched directly to the curriculum's own weights and competency wording. |
| Deep dives & tool guides — control plane, networking, storage, kubeadm, Helm | Going a layer deeper than the exam requires — useful once a blueprint page's surface feels too thin. |
| The capstone & drills — lab track, seven drills under Hands-On Labs | Building and breaking a real cluster with your own hands — the only kind of practice that actually resembles the exam. |
| Timed practice on this course — Practice Tasks, Mock Exam · Set 1, Set 2, Set 3 | Graded-on-end-state drills under a clock — the closest rehearsal for the actual exam format this course offers. |
| An official practice simulator (commonly bundled with exam registration) | The one resource that matches the exact exam UI and environment — confirm what your specific purchase includes. |
| Second opinions on the same exam — Platform Engineering's CKA page, SRE's CKA page, DevSecOps's CKA page | The same 30% Troubleshooting domain explained from a different angle — worth reading once this plan feels familiar. |
Keep a running weak-spot log as you go rather than trusting memory — the Field Notes page on this course is built for exactly that, and rereading it in week 9 is usually faster than re-doing every domain from scratch.
Readiness checkpoint — are you actually ready to book
☺ Like you're 10: Don't book the exam because the calendar says week 9 — book it once you can actually do these things, cold, under a clock.
Booking on a date rather than on readiness is the single most common way people waste the exam fee. Before you pay, you should be able to answer "yes" to all of these without hesitating:
1. Can you kubeadm init a control plane and join a worker, from memory, in under 15 minutes? 2. Can you take an etcd snapshot and restore it without looking up a single flag? 3. Given a Pod stuck Pending, can you find the reason from kubectl describe Events in under a minute? 4. Can you write a NetworkPolicy that allows one Pod to reach another and still lets DNS resolve, without a first attempt that silently breaks egress? 5. Can you tell, from a container's exit code and describe output, whether it was OOMKilled or failed to schedule? 6. Have you scored above the published pass mark on at least two of this course's three mock exams, inside the two-hour limit? 7. Have you worked through the exam-prep checklist and the self-check quiz without new surprises?
If more than one or two of those still feels shaky, that's not a reason to panic — it's a precise list of what to re-run before you spend the fee. Loop back to the matching week above, not to the whole plan.
Exam logistics — verify these yourself before you pay
☺ Like you're 10: The shape of the test changes now and then — read the official page before you hand over any money.
The details below are what the Linux Foundation and CNCF publish and what candidates consistently report. They're here to help you plan a calendar, not to be quoted back at anyone.
| Item | What is generally published |
|---|---|
| Format | Online, remotely proctored, performance-based — real tasks on live clusters in a browser terminal, graded on end state |
| Duration | 2 hours |
| Passing score | 66% |
| Validity | 2 years from the date you pass |
| Retake | Registration has historically included one free retake |
| Price | Around USD $445 list; bundles and regional pricing are common |
| Curriculum | 27 competencies across 5 domains; this plan follows v1.35 — confirm the version current when you sit |
| Permitted resources | A published allowlist of documentation sites, opened in-browser during the exam — read the current allowlist before you sit |
This page is an independent, unofficial study resource — not affiliated with the CNCF or the Linux Foundation. Price, duration, pass mark, retake policy, permitted documentation, and curriculum version all change over time. Confirm current details on the official Linux Foundation CKA page and the CNCF certification page before you pay for anything, and read the Candidate Handbook in your LF portal. The curriculum itself is published openly at github.com/cncf/curriculum. See Kubernetes Certifications for this course's full ladder, and the Golden Astronaut course if the CKA is one stop on the way to the full Golden Kubestronaut set.
Nutty: I've sorted all twenty-seven competencies into nine folders, one per week. It's very satisfying.
Gizmo: Or just skim exam dumps the night before. Same certificate, a fraction of the effort. 🤑
Timmy: It's a performance-based exam, Gizmo. There's nothing to "dump" — they hand you a broken cluster and grade what state you leave it in.
Remy: And a dump wouldn't make your hands faster anyway. Speed is the actual bottleneck on the day, not knowledge.
Foxy: Wait — the plan gives Troubleshooting two whole weeks. Isn't that just... the other four domains again, but broken?
Nutty: Pretty much. Which is exactly why it's worth 30% — every domain's failure mode lives inside it.
Remy: So don't save it for weeks 7 and 8 in your head. Break something small every single week, starting week 2.
1. What are the five CKA domains and their weights, from largest to smallest, and what do they sum to? 2. Why does this plan give D1 and D5 two weeks each while D2, D3, and D4 get one week each? 3. Roughly how many total study hours does this plan budget, and how is that split between the domain core and mock-exam/setup time? 4. Name two habits this page recommends specifically because the exam is graded on end state rather than on your reasoning. 5. What's the difference in purpose between this course's blueprint pages and its mock exams? 6. Give two concrete checks you should be able to pass before booking the exam.
Check your answers
- Troubleshooting 30%; Cluster Architecture, Installation & Configuration 25%; Services & Networking 20%; Workloads & Scheduling 15%; Storage 10% — summing to exactly 100%.
- Because they're the two largest domains by weight and competency count (25% / 8 competencies, and 30% / 5 broad competencies that touch every other domain) — a single week would mean skimming ground the exam actually tests heavily.
- Roughly 125–130 hours total: about 100 hours split across the five domains in proportion to their weight, plus another 25–30 hours for lab setup in week 1 and mock exams/speed drills in week 9.
- Any two of: type commands yourself instead of only reading them; verify every fix with
kubectl get/describerather than trusting that it worked; practice against a visible timer, since grading only sees the final cluster state, never your intent. - The blueprint pages teach each domain's concepts and commands, matched to the curriculum's own wording; the mock exams are timed, graded-on-end-state rehearsals of the actual exam format — one builds the knowledge, the other proves you can execute it under the clock.
- Any two from the readiness checklist — e.g. bootstrapping a control plane and joining a worker from memory in under 15 minutes; taking and restoring an etcd snapshot without looking up flags; scoring above the pass mark on at least two of the three mock exams inside the two-hour limit.