Certified Kubernetes Administrator (CKA)
Run Kubernetes clusters: install and upgrade with kubeadm, back up etcd, RBAC, workloads, scheduling, services and networking, storage, Helm and Kustomize, and troubleshooting. Phase 4 of my path.
- Course by
- CNCF
- Course code
- CKA
- Version
- Kubernetes 1.3x
- Lessons
- 70
- Official courseCKA curriculum (CNCF) + LFS158 Introduction to Kubernetes (free)
- Best bookCertified Kubernetes Administrator (CKA) Study Guide — Benjamin Muschko, O'Reilly 2022
- ExamCKA — hands-on, 2 hours, kubernetes.io docs allowed, one free retake
These summaries follow the public outline of the course. I wrote every lesson in my own words and tested the commands on RHEL 10. They are not Red Hat training material. Take the official course for the full content and the hands-on labs.
Parts and chapters
Part 1
Cluster architecture, installation and configuration (25 %)
- 1Understand the Kubernetes architectureCluster architecture5 lessons
- 2Build a cluster with kubeadmInstallation and configuration6 lessons
- 3Upgrade the cluster and back up etcdCluster maintenance6 lessons
- 4Control access with RBAC and service accountsRole-based access control6 lessons
- 5Install components with Helm and KustomizeHelm, Kustomize, CRDs and operators4 lessons
Part 2
Workloads and scheduling (15 %)
Part 3
Services and networking (20 %)
Part 4
Storage (10 %)
Part 5
Troubleshooting (30 %) and the exam
What you learn
The main skills of the course and the chapter where you learn each one.
Cluster architecture
- Prepare nodes and build a cluster with kubeadmChapter 2 Build a cluster with kubeadm
- Upgrade the cluster, back up and restore etcdChapter 3 Upgrade the cluster and back up etcd
- Manage RBACChapter 4 Control access with RBAC and service accounts
- Install components with Helm and Kustomize; understand CRDs and operatorsChapter 5 Install components with Helm and Kustomize
Workloads and scheduling
- Deployments, rollouts, rollbacks, ConfigMaps, Secrets and autoscalingChapter 6 Run apps with Deployments, ConfigMaps and Secrets
- Resource limits, taints, affinity and pod admissionChapter 7 Control where pods run and how much they use
Services and networking
- Services, endpoints and CoreDNSChapter 8 Reach pods with Services and DNS
- Ingress and the Gateway APIChapter 9 Route HTTP traffic with Ingress and the Gateway API
- NetworkPolicies and CNI pluginsChapter 10 Limit pod traffic with NetworkPolicies
Storage
- StorageClasses, dynamic provisioning, PVs and PVCsChapter 11 Give pods persistent storage
Troubleshooting
- Troubleshoot clusters, nodes, components, services and networkingChapter 12 Troubleshoot pods, nodes, the control plane and the network