Certified Cloud Native Platform Engineer: exam-style tasks on a real kubeadm cluster on your own Mac, built and graded by the GoldenKube CLI. Each card shows the domain, the cluster topology it needs, the recommended time and its points; the scenario page has the full task text. Scenarios run on Kubernetes 1.35, the version the CNPE exam environment runs.
The Linux Foundation describes CNPE as "an online, proctored, performance-based test" that "requires solving multiple tasks from within a Linux-based remote desktop using the terminal and web-based interfaces". The candidate instructions say "The exams consist of 15-20 performance-based tasks" and that "The CNPE environment is currently running Kubernetes v1.35"; the general documentation allowed is kubernetes.io. The GoldenKube CNPE scenarios run on a local Kubernetes cluster and are graded from the cluster state, so a task that the exam might solve in a web interface is written so that its result can be checked in the cluster.
The scenarios are written against the five official domains: networking, storage and compute best practices, right-sizing and multi-tenancy (platform architecture and infrastructure); GitOps workflows, CI/CD pipelines and progressive delivery such as blue/green or canary (GitOps and continuous delivery); custom resource definitions, self-service provisioning, operators and automation frameworks (platform APIs and self-service capabilities); monitoring, alerting, logging and tracing, deployment metrics and incident remediation (observability and operations); and service-to-service security, RBAC, audit trails and compliance, policy engines and admission control, and security scanning in pipelines (security and policy enforcement).
| Questions | 15-20 performance-based tasks source |
|---|---|
| Duration (minutes) | 120 source |
| Passing score | 64% source |
| Price (USD) | 445 source |
| Validity (years) | 2 source |
| Delivery | Online, proctored, performance-based source |
| Prerequisites | None source |
| Retake policy | One retake per exam purchase if a passing score is not achieved source |
| Curriculum version | Exam environment runs Kubernetes v1.35 source |
Published scenarios per official CNPE domain, next to the domain's exam weight (checked 2026-10-28 on the official page). 20 published scenarios today.
| Domain | Exam weight | Published scenarios |
|---|---|---|
| Platform Architecture and Infrastructure | 15% | 3 |
| GitOps and Continuous Delivery | 25% | 5 |
| Platform APIs and Self-Service Capabilities | 25% | 5 |
| Observability and Operations | 20% | 4 |
| Security and Policy Enforcement | 15% | 3 |
goldenkube exam cnpe draws a curriculum-weighted set: 15 tasks in 120 minutes, pass at 64%. Solutions and hints are hidden in exam mode.
7 of 20 scenarios match · Clear filters
Expose app configuration as a Crossplane v2 namespaced composite API: define the XRD, write a pipeline Composition with patch-and-transform, and provision the first composite.
Single node · ~20 min · 10 points
goldenkube start cnpe-api-002
The infra repository should be reconciled by Flux, but one manifest in it does not apply. Wire up the GitRepository and Kustomization, then fix the repository so the reconciliation turns Ready.
Single node · ~18 min · 10 points
goldenkube start cnpe-git-002
Replace the storefront Deployment with an Argo Rollout that sends 20% of the pods to a new version, waits for a human, then completes; ship podinfo 6.17.0 through it.
Single node · ~18 min · 9 points
goldenkube start cnpe-git-003
Build a Tekton Pipeline whose first Task emits the release version as a result and whose second Task publishes it into the staging namespace with kubectl, then run it.
Single node · ~18 min · 9 points
goldenkube start cnpe-git-004
Ship only the shop namespace's container logs: run the OpenTelemetry Collector as a DaemonSet with the filelog receiver on the node's pod log files and print the records with the debug exporter.
Single node · ~18 min · 9 points
goldenkube start cnpe-obs-003
Move the bank and frontend workloads into the Istio mesh and require mutual TLS for every workload in bank, so meshed clients still reach the ledger while plaintext clients are refused.
Single node · ~16 min · 11 points
goldenkube start cnpe-sec-001
Produce a CycloneDX SBOM for an image from the node's containerd store with Trivy and publish it as a ConfigMap, then restrict the registries Pods in a namespace may pull from with an OPA Gatekeeper ConstraintTemplate and Constraint.
Single node · ~18 min · 10 points
goldenkube start cnpe-sec-003
goldenkube doctor.goldenkube login (free account).goldenkube submit; the result appears on your dashboard.Grading happens on your machine and is practice feedback, not an official score. Tasks are public; hints, reference solutions and grader internals are not.
Not yet. The CNPE scenarios are published and readable here, but the first signed build of the CLI is not on the Homebrew tap, so the catalog is a preview. Running a scenario needs that release and a free account.
The CNPE curriculum names tools only as examples, among them Argo, Crossplane, Flux, Gatekeeper, Kyverno, OpenTelemetry, Prometheus and Tekton, and says candidates are not tested on deep tool-specific knowledge beyond the listed competencies. Each scenario page shows the full task text, so you can see what a task asks before you run it.
No. The Linux Foundation lists no prerequisite for CNPE. CNPA is the multiple-choice platform engineering exam and covers much of the same vocabulary, so its GoldenKube question bank is a useful warm-up for the CNPE labs.