How to Prepare for the CKA Exam (Cluster Admin Mindset)
CKA is about nodes, control plane health, networking, storage, and etcd — under a 2-hour clock. A practical prep plan for administrators, not app developers.
The CKA (Certified Kubernetes Administrator) exam is performance-based: 15–20 tasks, 2 hours, 66% to pass, on live clusters via SSH. You are the person called when nodes go NotReady, CoreDNS fails, or PVCs stick in Pending — not when someone typo'd an image tag.
Official format details live in the Linux Foundation CKA/CKAD candidate docs. This article is how to think like CKA wants you to think.
CKA domains (mental map)
| Area | Representative problems |
|---|---|
| **Cluster architecture** | Control plane components, kubeadm, HA concepts |
| **Workloads & scheduling** | Drain/cordon, taints, manual scheduling, PDB awareness |
| **Services & networking** | CoreDNS, kube-proxy, CNI pods, NetworkPolicy at cluster level |
| **Storage** | PV/PVC, StorageClass, reclaim policies, volume attach errors |
| **Troubleshooting** | Node NotReady, static pod failures, API reachability |
| **etcd & backup** | Snapshot, restore concepts, member health |
You still use kubectl constantly — but the failure often lives below the Deployment.
The CKA troubleshooting ladder
When something breaks cluster-wide, climb this ladder before random fixes:
1. Are nodes healthy?
kubectl get nodes
kubectl describe node <name>NotReady → kubelet, runtime, disk/memory pressure, certs — often on the node, not in the API.
2. Is the control plane up?
kubectl get pods -n kube-systemOn control plane hosts, static manifests live under /etc/kubernetes/manifests. Kubelet recreates them.
3. Is cluster networking alive?
Check CNI, CoreDNS, kube-proxy in kube-system. Pod-to-pod and DNS failures often trace here.
4. Is storage binding?
kubectl get pv,pvc,sc
kubectl describe pvc <name>Pending PVC → provisioning, StorageClass, or capacity — blocks pods that wait for volumes.
5. Only then — workload YAML
App misconfig happens, but CKA disproportionately tests platform layers.
Skills to drill hands-on
- Cordon and drain —
kubectl cordon,kubectl drain --ignore-daemonsets, respect PDBs - Static pod recovery — fix a broken apiserver or etcd manifest path on a CP node
- etcd snapshot —
etcdctl snapshot savewith correct certs (follow current doc paths for your version) - Certificate renewal —
kubeadm certs check-expiration,kubeadm certs renew - Join a worker — token create, join command, verify Ready
- Released PV workflow — Retain policy, clear
claimRefwhen appropriate
Use kind or kubeadm in VMs — CKA is not comfortable on Docker Desktop alone.
Study plan (6 weeks, part-time)
Weeks 1–2 — Platform basics
- Build a multi-node lab; break and fix kubelet, CNI, CoreDNS
- Read ContainerCreating: dependencies before the app runs
- Decision Trainer: Storage & Volumes, Scheduling & Resources
Weeks 3–4 — Control plane & etcd
- Practice static pod edits (in lab only), cert renewal, etcd health checks
- CKA Exam Prep scenarios: nodes, etcd, kubeadm ops
Week 5 — Timed scenarios
- Exam sprints on k8s Flashcards — 5-minute decision sets
- Bookmark: node troubleshooting, etcd, kubeadm, persistent volumes
Week 6 — Simulator
- Official Killer.sh simulator (bundled with exam purchase)
- Full run under clock; review tasks where SSH context switching cost time
CKA traps the exam loves
| Symptom | Trap answer | Better first step |
|---|---|---|
| Node NotReady | Delete node object | SSH → kubelet / runtime / disk |
| CoreDNS down | Restart random app pods | Fix kube-system CoreDNS deployment |
| PVC Pending | Delete Deployment | `describe pvc` → StorageClass / provisioner |
| API timeout | Edit app YAML | Check apiserver pod / LB / certs |
| Drain stuck | `--force` immediately | Check PDB and DaemonSets |
Decision Trainer marks these trap grades explicitly — the same mistakes cost points in the real exam.
How k8s Flashcards fits CKA prep
- Core topics — seven operational paths (Pro bundle); good for cross-training
- CKA Exam Prep — 100 cluster-admin scenarios, separate from Pro, with exam sprints
- Pod Debugging (free) — still worth it for Events/read discipline
CKA and CKAD packs are sold separately — pick the one matching your exam, or both if you sit both.
Related: CKA vs CKAD · Pending pods & scheduling