The Golden Kubestronaut Path
Pass every CNCF certification — KCNA, KCSA, CKA, CKAD, CKS, plus the project-specific associates — and you become a Kubestronaut. Maintain all of them simultaneously and you're a Golden Kubestronaut. The community passed 3,500 members in early 2026.
Multi-choice associate exams (covered by this practice library)
-
KCNA — Kubernetes and Cloud Native Associate
Kubernetes fundamentals, cloud native architecture, and observability
-
KCSA — Kubernetes and Cloud Native Security Associate
Kubernetes security, threat modeling, and compliance
-
CCA — Cilium Certified Associate
eBPF networking, observability, and security for Kubernetes
-
CGOA — GitOps Certified Associate
GitOps principles, patterns, and tooling (ArgoCD, Flux)
-
CBA — Certified Backstage Associate
Internal developer portals with Backstage
-
CNPA — Certified Cloud Native Platform Engineering Associate
Platform engineering for cloud-native environments
-
PCA — Prometheus Certified Associate
Monitoring and alerting with Prometheus and PromQL
-
KCA — Kyverno Certified Associate
Kubernetes policy management with Kyverno
-
OTCA — OpenTelemetry Certified Associate
Distributed tracing and observability with OpenTelemetry
-
CAPA — Certified Argo Project Associate
Argo Workflows, Events, CD, and Rollouts
Hands-on exams (not covered here — use Killer Shell)
The Kubestronaut path also includes CKA, CKAD, CKS, ICA, and LFCS. These are performance-based exams in a real cluster — practice with Killer Shell and KodeKloud labs. Multi-choice mocks won't help.
Suggested study order
- KCNA first — broadest cert, lowest difficulty, sets terminology for everything else.
- CKA → CKAD — the cluster-ops and app-developer hands-on pair. Skip if you're already CK-certified.
- KCSA — multi-choice security cert; builds the conceptual foundation (threat model, compliance, platform security) that CKS later asks you to apply hands-on.
- CKS — performance-based hardening and incident-response cert. Much easier with KCSA's vocabulary already in your head.
- Project specifics (CCA, CGOA, CBA, PCA, KCA, OTCA, CAPA, CNPA) — pick based on your current stack first; the others follow easily.
- LFCS — Linux fundamentals, required for Golden but unrelated to Kubernetes.