There are five official Kubernetes certifications from the Cloud Native Computing Foundation (CNCF): KCNA, KCSA, CKA, CKAD, and CKS. Two of them are multiple-choice entry-level exams at 250 US dollars each, three are practical hands-on exams at 445 US dollars each (as of August 2026). Anyone who holds all five active at the same time is recognized by the CNCF as a Kubestronaut.
I've taken all five exams myself and am one of the Kubestronauts in Germany. Here's the overview I wish I'd had before my first registration: what each exam tests, what it costs, and in which order they make sense. What I do with Kubernetes professionally is on my Kubernetes page.
The five certifications at a glance
| Certification | Format | Price (as of August 2026) |
|---|---|---|
| KCNA (Kubernetes and Cloud Native Associate) | multiple choice, online | 250 USD |
| KCSA (Kubernetes and Cloud Native Security Associate) | multiple choice, online | 250 USD |
| CKA (Certified Kubernetes Administrator) | hands-on, 2 hours | 445 USD |
| CKAD (Certified Kubernetes Application Developer) | hands-on, approx. 2 hours | 445 USD |
| CKS (Certified Kubernetes Security Specialist) | hands-on, 2 hours, requires CKA | 445 USD |
All five exams run online with proctored supervision, and every exam price includes one free retake. After registering, you have 12 months to schedule and take the exam. Each certificate is valid for 24 months, after which recertification is due.
KCNA and KCSA: the two entry-level exams
KCNA tests basic understanding of Kubernetes and the cloud native ecosystem: concepts, architecture, terminology. KCSA does the same for security. Both are multiple choice, and both are doable without months of cluster practice.
An honest assessment: for experienced admins, the associate exams are no career accelerator; they're too theory-heavy for that. They pay off in two cases. First, as a structured entry point if you're new to the topic and want a framework for learning. Second, on the path to Kubestronaut, because you need both for it.
CKA: the centerpiece
The CKA (Certified Kubernetes Administrator) is the best-known Kubernetes certification and, in my view, the most important one. Two hours, real clusters, real tasks on the command line: fixing deployments, tracking down network problems, managing cluster components. Nobody can guess their way through this, you have to be able to do it.
That's exactly what makes it valuable. A passed CKA proves practical ability, not memorized knowledge. If you only get one single Kubernetes certification, get this one.
CKAD: the developer perspective
The CKAD (Certified Kubernetes Application Developer) is also a hands-on exam, but it looks at Kubernetes from the application perspective: building, configuring, deploying, and observing applications instead of administering the cluster itself.
CKA and CKAD overlap noticeably in content. If you've passed the CKA, you've already covered a large part of the road to the CKAD. As a standalone entry point, the CKAD makes sense if you work with Kubernetes as a developer without operating clusters.
CKS: the security specialization
The CKS (Certified Kubernetes Security Specialist) is the most demanding of the five exams. It formally requires a passed CKA and covers cluster hardening, supply chain security, runtime security, and policies, again fully hands-on.
Plan the most preparation time for the CKS. The topics are specialized, the tasks are long, and the time limit is tight. In return, it's the exam where you learn the most about running real clusters securely, the preparation included.
What the Kubernetes certifications cost in total
All five exams together cost 1,835 US dollars at list price (as of August 2026): three times 445 for CKA, CKAD, and CKS plus two times 250 for KCNA and KCSA. On top of that comes preparation material if needed; the Linux Foundation offers bundles of exam plus course, for the CKA starting at 625 US dollars, for example.
Two money-saving tips, both verifiable: the Linux Foundation regularly runs discount promotions on exams, so it pays not to buy at full price. And anyone who reaches Kubestronaut status gets five 50 percent vouchers for further certifications every year, which can also be given away.
Also factor in the validity: 24 months per certificate means Kubestronaut status needs ongoing maintenance. For this, the CNCF introduced a revised recertification structure in 2026 with the CARE program.
The Kubestronaut: all five at once
The CNCF's Kubestronaut program recognizes people who hold all five Kubernetes certifications active at the same time. Worldwide, more than 3,500 people have achieved this since the program launched (as of March 2026).
Beyond the famous Kubestronaut jacket, there are tangible benefits: the five annual 50 percent exam vouchers, 20 percent off three CNCF events per year (such as KubeCon or KubeDays), access to the private Kubestronaut Slack, and a Credly badge.
Is it worth it? As a learning program, yes: the five exams together cover administration, development, and security, and the path there forces broad, practical engagement with Kubernetes. As a pure signal to employers, the CKA alone is enough. The Kubestronaut is the goal for people who really want to master the subject.
My recommended order
- KCNA if you're new to the topic. If you already work with Kubernetes daily, you can also catch up on it later on the path to Kubestronaut.
- CKA as the foundation. It forces the practice that all further exams benefit from.
- CKAD right after, while the CKA practice is fresh. The overlap then works in your favor.
- KCSA as the theoretical entry into the security topics.
- CKS last, with the biggest preparation block.
The timeline for this is individual, but for perspective: this is a project of months, not a sprint. Gathering real practice between the exams isn't a detour, it's the reason the later exams get easier.
Where to start
Before you book the first exam, make sure the fundamentals are solid: your own practice cluster, confident kubectl use, the core objects under control. The complete learning path to get there, from containers to exam readiness, is described here: Learn Kubernetes: the Kubestronaut roadmap.
And in case you're wondering what a Kubernetes person has to do with AI topics: my daily work now runs with an AI workforce. Structured delegation is a skill you learn in both worlds.
