The Journey to 5 Kubernetes Certifications in One Month

I am not new to the world of Kubernetes; I have been working with these technologies since version 1.12. My first experiences involved the "hard way" of learning, where we prepared Chef cookbooks and manually generated certificates. Over time, we migrated to managed services like AWS EKS and GKE.

At one point in my career, with the end of Chef support, we switched to Kubespray installations with Ansible. In another company, we were entirely in the AWS cloud environment, focusing on EKS. Karpenter was a silver bullet for managing EKS workloads back then, and it still is.

Following these experiences, I wanted to certify my knowledge and set a goal to obtain 5 major certifications in one month. Here is the roadmap I followed during this process.

KCNA and KCSA Preparation Process

These two exams are in a multiple-choice format. You need to answer at least 75% of the questions correctly to pass.

• KCNA (Kubernetes and Cloud Native Associate): I used Bryan Krausen's course and practice exams on Udemy for preparation.
• KCSA (Kubernetes and Cloud Security Associate): I benefited from Mykhailo Tiapko's Udemy course. The hardest part of this exam was memorizing security abbreviations.

In both exams, you may encounter questions about what kubectl commands do and the fundamental building blocks of Kubernetes.

CKA (Certified Kubernetes Administrator)

For CKA preparation, I used Zeal Vora's "Certified Kubernetes Administrator 2025" course. I also solved practice tests on killer.sh and killercoda.com. Real exams no longer ask about etcd operations, but it is still good to know.

Topics You May Encounter in the Exam:

1. NetworkPolicies: You must understand well how labels work to restrict communication between Pods.
2. Troubleshooting: You should be able to inspect control-plane component logs (/var/log/pods, crictl logs).
3. Storage: Creating PV/PVCs and binding them to existing volumes.
4. Ingress & Gateway API: Using Gateway API with HTTPS.
5. Helm: Adding repositories, updating, and installing charts.
6. System: Installing packages with dpkg or installing CNI plugins via manifests.

CKAD (Certified Kubernetes Application Developer)

I did not use any specific material for this exam; I just scheduled it and took it. For someone who develops applications with Docker and Kubernetes in daily life, the exam content will be quite familiar. If you have a grasp of basic building blocks like Containers, Pods, and Deployments, you can pass this exam comfortably.

CKS (Certified Kubernetes Security Specialist)

I thought this would be the hardest exam, but it was on a similar level to CKA. For preparation, I again used Zeal Vora's course and the killer.sh CKS tests.

Topics to Pay Attention To:

1. Cilium: L3 policies and egressDeny rules.
2. Falco: Creating and overriding rules (parameters like %fd, %container).
3. Trivy: Image scanning and creating SBOM manifests.
4. NetworkPolicies: Just like in CKA, this is critically important here.
5. Auditing: Configuring audit logs for Kube-apiserver.
6. AppArmor & Seccomp: Loading profiles and applying them to Pods.

Conclusion and Advice

According to the Yerkes-Dodson law, you should not overexert yourself. This is not a race. If you are new to the Kubernetes world, give yourself time to read documentation and practice.

During the exam, the kubectl explain command is your best friend; it yields results much faster than searching through documentation. Even if you automate CI/CD processes with tools like Jenkins, these certifications are great milestones to gain fundamental security and management skills.

Is it possible to get them all in one month? Yes, it is. But this depends entirely on your existing knowledge and time management. Don't forget to use your weekends for rest, not for work.