Certified Kubernetes Administrator: exam-style tasks on a real kubeadm cluster on your own Mac, built and graded by the GoldenKube CLI. Each card shows the domain, the cluster topology it needs, the recommended time and its points; the scenario page has the full task text. Scenarios are verified on Kubernetes 1.37.
Published scenarios per official CKA domain, next to the domain's exam weight (checked 2026-10-23 on the official page). 37 published scenarios today.
| Domain | Exam weight | Published scenarios |
|---|---|---|
| Storage | 10% | 4 |
| Troubleshooting | 30% | 9 |
| Workloads & Scheduling | 15% | 9 |
| Cluster Architecture, Installation & Configuration | 25% | 8 |
| Services & Networking | 20% | 7 |
goldenkube exam cka draws a curriculum-weighted set: 15 tasks in 120 minutes, pass at 66%. Solutions and hints are hidden in exam mode.
18 of 37 scenarios match · Clear filters
Safely take a worker node out of service by cordoning it and evicting its workload pods without deleting the node.
Two nodes · ~7 min · 7 points
goldenkube start cka-arc-006
Expose an existing Deployment inside the cluster with a ClusterIP Service that selects all its pods.
Two nodes · ~6 min · 5 points
goldenkube start cka-net-001
Expose a Deployment outside the cluster with a NodePort Service on a specific node port.
Two nodes · ~6 min · 5 points
goldenkube start cka-net-002
Restrict ingress to database pods so only client pods may reach them on a single TCP port.
Two nodes · ~9 min · 7 points
goldenkube start cka-net-003
Create an Ingress that routes a hostname and path prefix to an existing Service through the nginx IngressClass.
Two nodes · ~8 min · 7 points · Ingress
goldenkube start cka-net-004
Attach an HTTPRoute to an existing Gateway so a path prefix is routed to a Service.
Two nodes · ~9 min · 7 points · Gateway API
goldenkube start cka-net-005
Create a headless Service (clusterIP None) that selects an existing Deployment's pods.
Two nodes · ~6 min · 5 points
goldenkube start cka-net-006
Expose a Deployment on a Service port that differs from the container port.
Two nodes · ~6 min · 5 points
goldenkube start cka-net-007
Taint a worker node and run a Pod that tolerates the taint and is placed on that node.
Two nodes · ~7 min · 6 points
goldenkube start cka-sch-001
Create a headless Service and a StatefulSet whose pod gets its own dynamically provisioned PVC.
Two nodes · ~10 min · 7 points · Storage
goldenkube start cka-sto-004
A worker node reports NotReady; diagnose and restore it without recreating the node.
Two nodes · ~7 min · 7 points
goldenkube start cka-trb-001
The kubelet on a worker refuses to start; find the misconfiguration and fix it on the node.
Two nodes · ~8 min · 7 points
goldenkube start cka-trb-002
A worker is NotReady although its kubelet runs; find the underlying runtime problem and fix it.
Two nodes · ~6 min · 6 points
goldenkube start cka-trb-004
Service name resolution has stopped working; investigate and restore the cluster DNS component.
Two nodes · ~5 min · 5 points
goldenkube start cka-trb-005
A Service forwards nowhere; find the mismatch and fix the Service only.
Two nodes · ~6 min · 6 points
goldenkube start cka-trb-006
A Deployment pinned to one node cannot schedule; find the node-level cause and fix it.
Two nodes · ~5 min · 6 points
goldenkube start cka-trb-007
Run one Pod per node, including the control plane, with a DaemonSet.
Two nodes · ~6 min · 5 points
goldenkube start cka-wkl-004
Pin a Pod to nodes with a given label using required node affinity rather than a nodeSelector.
Two nodes · ~6 min · 5 points
goldenkube start cka-wkl-005
goldenkube doctor.goldenkube login (free account).goldenkube submit; the result appears on your dashboard.Grading happens on your machine and is practice feedback, not an official score. Tasks are public; hints, reference solutions and grader internals are not.
The scenarios are published and the CLI runs them end to end, but the first signed public build is not on the Homebrew tap yet, so the catalog is in preview. The task text of every scenario is public now; running one needs the CLI release.
No. They are GoldenKube scenarios written to cover the published CKA domains in the same style: a live cluster, a situation, a task. GoldenKube does not have or claim exam content.
On your machine. Each scenario has a fixed set of state checks; on submit the grader reads your live cluster and the scenario passes when every check passes. Hints, the reference solution and the check definitions stay inside the CLI.