Skip to content

Hands-on Kubernetes labs

Exam-style tasks for the performance-based certifications, run on a real kubeadm cluster on your own Mac with the GoldenKube CLI and graded locally. Each card shows the task's domain, the cluster topology it needs, the recommended time and its points; the detail page has the full task text.

7 of 37 scenarios match · Clear filters

CKACluster Architecture, Installation & ConfigurationMedium

Namespaced RBAC: Role and RoleBinding for a ServiceAccount

Grant a ServiceAccount read access to pods in one namespace using a Role and a RoleBinding.

Single node · ~6 min · 6 points

  • rbac
  • role
  • rolebinding
  • serviceaccount
  • namespace

goldenkube start cka-arc-001

CKACluster Architecture, Installation & ConfigurationMedium

Cluster-scoped RBAC: ClusterRole for listing nodes

Grant a namespaced ServiceAccount cluster-wide read access to nodes using a ClusterRole and ClusterRoleBinding.

Single node · ~6 min · 6 points

  • rbac
  • clusterrole
  • clusterrolebinding
  • serviceaccount
  • nodes

goldenkube start cka-arc-002

CKACluster Architecture, Installation & ConfigurationMedium

etcd snapshot backup

Take a snapshot of the cluster's etcd datastore and store it as a file on the control plane node.

Single node · ~8 min · 6 points

  • etcd
  • backup
  • etcdctl
  • control-plane

goldenkube start cka-arc-003

CKACluster Architecture, Installation & ConfigurationEasy

Long-lived ServiceAccount token Secret

Create a ServiceAccount and a controller-populated long-lived token Secret bound to it.

Single node · ~6 min · 5 points

  • serviceaccount
  • secret
  • token
  • authentication

goldenkube start cka-arc-004

CKACluster Architecture, Installation & ConfigurationMedium

Static Pod on the control plane

Run a Pod directly through the kubelet by placing a manifest in the static pod directory.

Single node · ~7 min · 6 points

  • static-pod
  • kubelet
  • control-plane
  • manifests

goldenkube start cka-arc-005

CKACluster Architecture, Installation & ConfigurationMedium

Install an application with Helm

Add a chart repository and install a chart as a named release into a namespace using Helm.

Single node · ~10 min · 7 points

  • helm
  • package-management
  • release

goldenkube start cka-arc-007

CKACluster Architecture, Installation & ConfigurationEasy

PriorityClass and a prioritized Pod

Create a non-default PriorityClass and run a Pod that uses it.

Single node · ~6 min · 5 points

  • priorityclass
  • scheduling
  • pod

goldenkube start cka-arc-008

Exams covered

  • CKA · Certified Kubernetes Administrator · scenarios verified on Kubernetes 1.37 · 37 published scenarios · mock exam: 15 tasks in 120 minutes, pass at 66%

How to run a lab

  1. Install the CLI and Multipass, then run goldenkube doctor.
  2. Sign in with goldenkube login (free account).
  3. Start a scenario with its id, solve the task on the cluster, run goldenkube submit.

Grading happens on your machine and is practice feedback, not an official score. Tasks are public; hints, reference solutions and grader internals are not.