Skip to content

Hands-on Kubernetes labs

Exam-style tasks for the performance-based certifications, run on a real kubeadm cluster on your own Mac with the GoldenKube CLI and graded locally. Each card shows the task's domain, the cluster topology it needs, the recommended time and its points; the detail page has the full task text.

10 of 37 scenarios match · Clear filters

CKACluster Architecture, Installation & ConfigurationMedium

Namespaced RBAC: Role and RoleBinding for a ServiceAccount

Grant a ServiceAccount read access to pods in one namespace using a Role and a RoleBinding.

Single node · ~6 min · 6 points

  • rbac
  • role
  • rolebinding
  • serviceaccount
  • namespace

goldenkube start cka-arc-001

CKACluster Architecture, Installation & ConfigurationMedium

Cluster-scoped RBAC: ClusterRole for listing nodes

Grant a namespaced ServiceAccount cluster-wide read access to nodes using a ClusterRole and ClusterRoleBinding.

Single node · ~6 min · 6 points

  • rbac
  • clusterrole
  • clusterrolebinding
  • serviceaccount
  • nodes

goldenkube start cka-arc-002

CKACluster Architecture, Installation & ConfigurationMedium

etcd snapshot backup

Take a snapshot of the cluster's etcd datastore and store it as a file on the control plane node.

Single node · ~8 min · 6 points

  • etcd
  • backup
  • etcdctl
  • control-plane

goldenkube start cka-arc-003

CKACluster Architecture, Installation & ConfigurationMedium

Static Pod on the control plane

Run a Pod directly through the kubelet by placing a manifest in the static pod directory.

Single node · ~7 min · 6 points

  • static-pod
  • kubelet
  • control-plane
  • manifests

goldenkube start cka-arc-005

CKACluster Architecture, Installation & ConfigurationMedium

Install an application with Helm

Add a chart repository and install a chart as a named release into a namespace using Helm.

Single node · ~10 min · 7 points

  • helm
  • package-management
  • release

goldenkube start cka-arc-007

CKAStorageMedium

Manual PersistentVolume and matching claim

Create a hostPath PersistentVolume and a PersistentVolumeClaim that binds to it.

Single node · ~7 min · 6 points

  • storage
  • pv
  • pvc
  • hostpath

goldenkube start cka-sto-002

CKAStorageMedium

Default StorageClass

Make an existing StorageClass the cluster default and provision a PVC without naming a class.

Single node · ~8 min · 6 points · Storage

  • storage
  • storageclass
  • default
  • pvc

goldenkube start cka-sto-003

CKATroubleshootingMedium

CrashLoopBackOff: container command exits

A Deployment's containers keep exiting; find out why and make them stay running.

Single node · ~6 min · 6 points

  • troubleshooting
  • crashloopbackoff
  • deployment
  • logs

goldenkube start cka-trb-008

CKAWorkloads & SchedulingMedium

ConfigMap env var and Secret volume

Create a ConfigMap and a Secret and consume them from a Pod as an environment variable and a mounted volume.

Single node · ~8 min · 6 points

  • configmap
  • secret
  • pod
  • env
  • volume
  • workloads

goldenkube start cka-wkl-003

Exams covered

  • CKA · Certified Kubernetes Administrator · scenarios verified on Kubernetes 1.37 · 37 published scenarios · mock exam: 15 tasks in 120 minutes, pass at 66%

How to run a lab

  1. Install the CLI and Multipass, then run goldenkube doctor.
  2. Sign in with goldenkube login (free account).
  3. Start a scenario with its id, solve the task on the cluster, run goldenkube submit.

Grading happens on your machine and is practice feedback, not an official score. Tasks are public; hints, reference solutions and grader internals are not.