Kubernetes Certifications Guide: KCNA, CKA, CKAD and CKS

Choose KCNA if you need the foundation first

CNCF positions KCNA as a pre-professional certification for people building foundational Kubernetes and cloud-native knowledge.

KCNA can make sense if concepts such as Kubernetes architecture, containers, pods, nodes, clusters and the broader cloud-native landscape are still new. It gives you a structured conceptual base before you decide whether administration, development or security is the real target.

Choose CKA if you administer clusters

CKA is the administrator credential. The current exam is performance-based and focuses on hands-on Kubernetes administration.

Choose it when your work involves cluster architecture, installation and configuration, workloads and scheduling, services/networking, storage and troubleshooting.

For current exam facts, see the CKA certification guide.

Choose CKAD if you build applications on Kubernetes

CKAD is the developer route. It is designed around the skills needed to design, build, configure and expose cloud-native applications for Kubernetes.

The distinction from CKA is job ownership: CKA centers on administering the platform; CKAD centers on the applications running on it.

Choose CKS if Kubernetes security is the goal

CKS is a specialist security certification. Current CNCF/Linux Foundation policy requires a candidate to have passed CKA before attempting CKS.

That makes CKA → CKS a true prerequisite progression.

Administrator path

KCNA → CKA → CKS

KCNA is useful when you need foundational context. CKA is the core administrator credential. CKS follows if security is part of your role or target.

If you already administer Kubernetes comfortably, KCNA is not required before CKA.

Developer path

KCNA → CKAD

KCNA can establish the cloud-native foundation; CKAD then validates application-focused skills.

Again, KCNA is a learning-path choice, not a mandatory prerequisite.

Experienced administrator path

CKA → CKS

If you already have the foundational knowledge and operate clusters, this is the direct administration-to-security progression.