Certified Kubernetes Administrator: exam-style tasks on a real kubeadm cluster on your own Mac, built and graded by the GoldenKube CLI. Each card shows the domain, the cluster topology it needs, the recommended time and its points; the scenario page has the full task text. Scenarios are verified on Kubernetes 1.37.
Published scenarios per official CKA domain, next to the domain's exam weight (checked 2026-10-23 on the official page). 37 published scenarios today.
| Domain | Exam weight | Published scenarios |
|---|---|---|
| Storage | 10% | 4 |
| Troubleshooting | 30% | 9 |
| Workloads & Scheduling | 15% | 9 |
| Cluster Architecture, Installation & Configuration | 25% | 8 |
| Services & Networking | 20% | 7 |
goldenkube exam cka draws a curriculum-weighted set: 15 tasks in 120 minutes, pass at 66%. Solutions and hints are hidden in exam mode.
22 of 37 scenarios match · Clear filters
Grant a ServiceAccount read access to pods in one namespace using a Role and a RoleBinding.
Single node · ~6 min · 6 points
goldenkube start cka-arc-001
Grant a namespaced ServiceAccount cluster-wide read access to nodes using a ClusterRole and ClusterRoleBinding.
Single node · ~6 min · 6 points
goldenkube start cka-arc-002
Take a snapshot of the cluster's etcd datastore and store it as a file on the control plane node.
Single node · ~8 min · 6 points
goldenkube start cka-arc-003
Run a Pod directly through the kubelet by placing a manifest in the static pod directory.
Single node · ~7 min · 6 points
goldenkube start cka-arc-005
Safely take a worker node out of service by cordoning it and evicting its workload pods without deleting the node.
Two nodes · ~7 min · 7 points
goldenkube start cka-arc-006
Add a chart repository and install a chart as a named release into a namespace using Helm.
Single node · ~10 min · 7 points
goldenkube start cka-arc-007
Restrict ingress to database pods so only client pods may reach them on a single TCP port.
Two nodes · ~9 min · 7 points
goldenkube start cka-net-003
Create an Ingress that routes a hostname and path prefix to an existing Service through the nginx IngressClass.
Two nodes · ~8 min · 7 points · Ingress
goldenkube start cka-net-004
Attach an HTTPRoute to an existing Gateway so a path prefix is routed to a Service.
Two nodes · ~9 min · 7 points · Gateway API
goldenkube start cka-net-005
Taint a worker node and run a Pod that tolerates the taint and is placed on that node.
Two nodes · ~7 min · 6 points
goldenkube start cka-sch-001
Create a Deployment whose replicas are guaranteed to land on different nodes.
Three nodes · ~8 min · 6 points
goldenkube start cka-sch-002
Create a PersistentVolumeClaim on a named StorageClass and mount it in a Pod.
Single node · ~7 min · 6 points · Storage
goldenkube start cka-sto-001
Create a hostPath PersistentVolume and a PersistentVolumeClaim that binds to it.
Single node · ~7 min · 6 points
goldenkube start cka-sto-002
Make an existing StorageClass the cluster default and provision a PVC without naming a class.
Single node · ~8 min · 6 points · Storage
goldenkube start cka-sto-003
Create a headless Service and a StatefulSet whose pod gets its own dynamically provisioned PVC.
Two nodes · ~10 min · 7 points · Storage
goldenkube start cka-sto-004
A worker node reports NotReady; diagnose and restore it without recreating the node.
Two nodes · ~7 min · 7 points
goldenkube start cka-trb-001
The kubelet on a worker refuses to start; find the misconfiguration and fix it on the node.
Two nodes · ~8 min · 7 points
goldenkube start cka-trb-002
A worker is NotReady although its kubelet runs; find the underlying runtime problem and fix it.
Two nodes · ~6 min · 6 points
goldenkube start cka-trb-004
A Service forwards nowhere; find the mismatch and fix the Service only.
Two nodes · ~6 min · 6 points
goldenkube start cka-trb-006
A Deployment pinned to one node cannot schedule; find the node-level cause and fix it.
Two nodes · ~5 min · 6 points
goldenkube start cka-trb-007
A Deployment's containers keep exiting; find out why and make them stay running.
Single node · ~6 min · 6 points
goldenkube start cka-trb-008
Create a ConfigMap and a Secret and consume them from a Pod as an environment variable and a mounted volume.
Single node · ~8 min · 6 points
goldenkube start cka-wkl-003
goldenkube doctor.goldenkube login (free account).goldenkube submit; the result appears on your dashboard.Grading happens on your machine and is practice feedback, not an official score. Tasks are public; hints, reference solutions and grader internals are not.
The scenarios are published and the CLI runs them end to end, but the first signed public build is not on the Homebrew tap yet, so the catalog is in preview. The task text of every scenario is public now; running one needs the CLI release.
No. They are GoldenKube scenarios written to cover the published CKA domains in the same style: a live cluster, a situation, a task. GoldenKube does not have or claim exam content.
On your machine. Each scenario has a fixed set of state checks; on submit the grader reads your live cluster and the scenario passes when every check passes. Hints, the reference solution and the check definitions stay inside the CLI.