ClusterIP Service for a Deployment
Expose an existing Deployment inside the cluster with a ClusterIP Service that selects all its pods.
Two nodes · ~6 min · 5 points
- service
- clusterip
- endpoints
- networking
goldenkube start cka-net-001
Certified Kubernetes Administrator: exam-style tasks on a real kubeadm cluster on your own Mac, built and graded by the GoldenKube CLI. Each card shows the domain, the cluster topology it needs, the recommended time and its points; the scenario page has the full task text. Scenarios are verified on Kubernetes 1.37.
Published scenarios per official CKA domain, next to the domain's exam weight (checked 2026-10-23 on the official page). 37 published scenarios today.
| Domain | Exam weight | Published scenarios |
|---|---|---|
| Storage | 10% | 4 |
| Troubleshooting | 30% | 9 |
| Workloads & Scheduling | 15% | 9 |
| Cluster Architecture, Installation & Configuration | 25% | 8 |
| Services & Networking | 20% | 7 |
goldenkube exam cka draws a curriculum-weighted set: 15 tasks in 120 minutes, pass at 66%. Solutions and hints are hidden in exam mode.
7 of 37 scenarios match · Clear filters
Expose an existing Deployment inside the cluster with a ClusterIP Service that selects all its pods.
Two nodes · ~6 min · 5 points
goldenkube start cka-net-001
Expose a Deployment outside the cluster with a NodePort Service on a specific node port.
Two nodes · ~6 min · 5 points
goldenkube start cka-net-002
Restrict ingress to database pods so only client pods may reach them on a single TCP port.
Two nodes · ~9 min · 7 points
goldenkube start cka-net-003
Create an Ingress that routes a hostname and path prefix to an existing Service through the nginx IngressClass.
Two nodes · ~8 min · 7 points · Ingress
goldenkube start cka-net-004
Attach an HTTPRoute to an existing Gateway so a path prefix is routed to a Service.
Two nodes · ~9 min · 7 points · Gateway API
goldenkube start cka-net-005
Create a headless Service (clusterIP None) that selects an existing Deployment's pods.
Two nodes · ~6 min · 5 points
goldenkube start cka-net-006
Expose a Deployment on a Service port that differs from the container port.
Two nodes · ~6 min · 5 points
goldenkube start cka-net-007
goldenkube doctor.goldenkube login (free account).goldenkube submit; the result appears on your dashboard.Grading happens on your machine and is practice feedback, not an official score. Tasks are public; hints, reference solutions and grader internals are not.
The scenarios are published and the CLI runs them end to end, but the first signed public build is not on the Homebrew tap yet, so the catalog is in preview. The task text of every scenario is public now; running one needs the CLI release.
No. They are GoldenKube scenarios written to cover the published CKA domains in the same style: a live cluster, a situation, a task. GoldenKube does not have or claim exam content.
On your machine. Each scenario has a fixed set of state checks; on submit the grader reads your live cluster and the scenario passes when every check passes. Hints, the reference solution and the check definitions stay inside the CLI.