Skip to content

Hands-on Kubernetes labs

Exam-style tasks for the performance-based certifications, run on a real kubeadm cluster on your own Mac with the GoldenKube CLI and graded locally. Each card shows the task's domain, the cluster topology it needs, the recommended time and its points; the detail page has the full task text.

14 of 37 scenarios match · Clear filters

CKACluster Architecture, Installation & ConfigurationEasy

Long-lived ServiceAccount token Secret

Create a ServiceAccount and a controller-populated long-lived token Secret bound to it.

Single node · ~6 min · 5 points

  • serviceaccount
  • secret
  • token
  • authentication

goldenkube start cka-arc-004

CKACluster Architecture, Installation & ConfigurationEasy

PriorityClass and a prioritized Pod

Create a non-default PriorityClass and run a Pod that uses it.

Single node · ~6 min · 5 points

  • priorityclass
  • scheduling
  • pod

goldenkube start cka-arc-008

CKAServices & NetworkingEasy

ClusterIP Service for a Deployment

Expose an existing Deployment inside the cluster with a ClusterIP Service that selects all its pods.

Two nodes · ~6 min · 5 points

  • service
  • clusterip
  • endpoints
  • networking

goldenkube start cka-net-001

CKAServices & NetworkingEasy

NodePort Service with a fixed port

Expose a Deployment outside the cluster with a NodePort Service on a specific node port.

Two nodes · ~6 min · 5 points

  • service
  • nodeport
  • networking

goldenkube start cka-net-002

CKAServices & NetworkingEasy

Headless Service

Create a headless Service (clusterIP None) that selects an existing Deployment's pods.

Two nodes · ~6 min · 5 points

  • service
  • headless
  • dns
  • networking

goldenkube start cka-net-006

CKAServices & NetworkingEasy

Service port vs targetPort

Expose a Deployment on a Service port that differs from the container port.

Two nodes · ~6 min · 5 points

  • service
  • clusterip
  • targetport
  • networking

goldenkube start cka-net-007

CKATroubleshootingEasy

Cluster DNS down

Service name resolution has stopped working; investigate and restore the cluster DNS component.

Two nodes · ~5 min · 5 points

  • troubleshooting
  • coredns
  • dns
  • kube-system

goldenkube start cka-trb-005

CKATroubleshootingEasy

ImagePullBackOff: wrong image tag

A Deployment's pods cannot pull their image; correct the image and get the replicas Ready.

Single node · ~5 min · 5 points

  • troubleshooting
  • imagepullbackoff
  • deployment
  • image

goldenkube start cka-trb-009

CKAWorkloads & SchedulingEasy

Rolling update of a Deployment

Update the image of a running Deployment with a rolling update and confirm all pods run the new image.

Single node · ~4 min · 4 points

  • deployment
  • rolling-update
  • rollout
  • workloads

goldenkube start cka-wkl-002

CKAWorkloads & SchedulingEasy

DaemonSet on every node

Run one Pod per node, including the control plane, with a DaemonSet.

Two nodes · ~6 min · 5 points

  • daemonset
  • toleration
  • control-plane
  • workloads

goldenkube start cka-wkl-004

CKAWorkloads & SchedulingEasy

Required node affinity

Pin a Pod to nodes with a given label using required node affinity rather than a nodeSelector.

Two nodes · ~6 min · 5 points

  • node-affinity
  • scheduling
  • labels
  • workloads

goldenkube start cka-wkl-005

CKAWorkloads & SchedulingEasy

Guaranteed QoS Pod

Create a Pod whose resource settings place it in the Guaranteed QoS class.

Single node · ~4 min · 4 points

  • qos
  • resources
  • requests
  • limits
  • workloads

goldenkube start cka-wkl-006

CKAWorkloads & SchedulingEasy

Job with completions and parallelism

Run a batch Job that must complete a fixed number of times with limited parallelism.

Single node · ~5 min · 4 points

  • job
  • batch
  • completions
  • parallelism
  • workloads

goldenkube start cka-wkl-007

Exams covered

  • CKA · Certified Kubernetes Administrator · scenarios verified on Kubernetes 1.37 · 37 published scenarios · mock exam: 15 tasks in 120 minutes, pass at 66%

How to run a lab

  1. Install the CLI and Multipass, then run goldenkube doctor.
  2. Sign in with goldenkube login (free account).
  3. Start a scenario with its id, solve the task on the cluster, run goldenkube submit.

Grading happens on your machine and is practice feedback, not an official score. Tasks are public; hints, reference solutions and grader internals are not.