The Golden Kubestronaut Path
Pass the five Kubernetes certifications and you're a Kubestronaut. Hold every active CNCF certification at once — the Kubernetes core plus every project-specific associate — and you're a Golden Kubestronaut. This is the full map: what's on it, the order that wastes the least time, and where to practise.
Every multiple-choice associate exam, at a glance
These are the exams covered here, in a sensible study order. Each links to a full mock-exam hub with practice questions and explanations.
| Certification | Level | Duration | Study time | Practice |
|---|---|---|---|---|
| KCNAFreeKubernetes and Cloud Native Associate | Beginner | 90 min | 1–6 wks | Practice → |
| CGOAFreeGitOps Certified Associate | Beginner | 90 min | 1–6 wks | Practice → |
| CAPACertified Argo Project Associate | Intermediate | 90 min | 1–6 wks | Practice → |
| CCACilium Certified Associate | Intermediate | 90 min | 2–8 wks | Practice → |
| CBACertified Backstage Associate | Intermediate | 90 min | 1–6 wks | Practice → |
| CNPACertified Cloud Native Platform Engineering Associate | Intermediate | 90 min | 2–8 wks | Practice → |
| PCAPrometheus Certified Associate | Intermediate | 90 min | 2–8 wks | Practice → |
| OTCAOpenTelemetry Certified Associate | Intermediate | 90 min | 2–8 wks | Practice → |
| KCAKyverno Certified Associate | Intermediate | 90 min | 1–6 wks | Practice → |
| KCSAKubernetes and Cloud Native Security Associate | Intermediate | 90 min | 2–8 wks | Practice → |
Pass mark is 75% across all CNCF associate exams. Durations and the question count can change — confirm on the official CNCF page for each exam.
Suggested study order — and why
- KCNA (free here) — broadest and lowest difficulty. It sets the terminology every later exam assumes you already know.
- CKA → CKAD — the hands-on cluster-ops and app-developer pair. Doing them early builds the muscle memory the security and project exams lean on.
- KCSA — security concepts that CKS later asks you to apply hands-on. Cheaper to learn the vocabulary here first.
- CKS — performance-based hardening; much easier with KCSA's model already in your head.
- Project associates — CGOA (free here), CAPA, CCA, CBA, CNPA, PCA, KCA, OTCA. Pick the ones that match your current stack first; the overlap with your day job does most of the studying for you.
- LFCS — Linux fundamentals, required for Golden. Slot it wherever your Linux is weakest.
Multiple-choice vs hands-on: prep is different
The associate exams in the table above are multiple-choice — mock exams are the highest-leverage way to prepare, because the format is exactly what you'll face. The path also includes performance-based exams done in a real cluster: CKA, CKAD, CKS, LFCS, and ICA. Mock multiple-choice questions won't help much there — practise in a live environment with Killer Shell and KodeKloud instead. This site focuses on the multiple-choice exams, where it can actually move your score.
Cost and time budget
Budget realistically. Each multiple-choice associate is roughly its listed study window of focused prep; the hands-on exams take longer. Exam fees change periodically and the Linux Foundation runs occasional bundles, so check the official CNCF certification pages before you commit — don't trust a fee you read in a blog post.
Start free — take a KCNA or CGOA mock exam90-minute timed simulation · full explanations on every answer · free with an accountThe certifications, one by one
KCNA — Kubernetes and Cloud Native AssociateFree mock
Kubernetes fundamentals, cloud native architecture, and observability. Rated beginner; plan 1–6 weeks. KCNA practice questions →
CGOA — GitOps Certified AssociateFree mock
GitOps principles, patterns, and tooling (ArgoCD, Flux). Rated beginner; plan 1–6 weeks. CGOA practice questions →
CAPA — Certified Argo Project Associate
Argo Workflows, Events, CD, and Rollouts. Rated intermediate; plan 1–6 weeks. CAPA practice questions →
CCA — Cilium Certified Associate
eBPF networking, observability, and security for Kubernetes. Rated intermediate; plan 2–8 weeks. CCA practice questions →
CBA — Certified Backstage Associate
Internal developer portals with Backstage. Rated intermediate; plan 1–6 weeks. CBA practice questions →
CNPA — Certified Cloud Native Platform Engineering Associate
Platform engineering for cloud-native environments. Rated intermediate; plan 2–8 weeks. CNPA practice questions →
PCA — Prometheus Certified Associate
Monitoring and alerting with Prometheus and PromQL. Rated intermediate; plan 2–8 weeks. PCA practice questions →
OTCA — OpenTelemetry Certified Associate
Distributed tracing and observability with OpenTelemetry. Rated intermediate; plan 2–8 weeks. OTCA practice questions →
KCA — Kyverno Certified Associate
Kubernetes policy management with Kyverno. Rated intermediate; plan 1–6 weeks. KCA practice questions →
KCSA — Kubernetes and Cloud Native Security Associate
Kubernetes security, threat modeling, and compliance. Rated intermediate; plan 2–8 weeks. KCSA practice questions →
Golden Kubestronaut FAQ
What is the Golden Kubestronaut?
The Golden Kubestronaut is a CNCF recognition for holding every active CNCF certification at the same time — the five Kubernetes certifications that make you a Kubestronaut (CKA, CKAD, CKS, KCNA, KCSA) plus every project-specific associate exam. The list grows as CNCF adds new certifications.
How long does the Golden Kubestronaut path take?
Most people spend several months to over a year, depending on their background. Each multiple-choice associate is roughly 1–8 weeks of study; the hands-on, performance-based exams (CKA, CKAD, CKS, LFCS) take longer because you practise in a live cluster.
How many certifications do you need?
All active CNCF certifications — currently more than a dozen, and the count rises over time. Check the official CNCF certification page for the current list, since new exams are added periodically.
What order should I take the exams in?
Start with KCNA for the shared vocabulary, then the hands-on CKA and CKAD pair, then KCSA before the hands-on CKS. Fit the project associates (CGOA, CCA, CBA, PCA, KCA, OTCA, CAPA, CNPA) around the tools you already use day to day.
Are these mock exams brain dumps?
No. Sharing real exam questions violates the Linux Foundation candidate agreement and only teaches you to recognise answers. Every question here is original, written against the published CNCF curriculum by someone who passed the exam.
Which exams are multiple-choice and which are hands-on?
Multiple-choice (covered here): KCNA, KCSA, CGOA, CCA, CAPA, CBA, CNPA, PCA, KCA, OTCA. Hands-on and performance-based in a live cluster: CKA, CKAD, CKS, LFCS, and ICA.
How much does the path cost?
Exam fees change periodically and the Linux Foundation sometimes offers bundles — check the official CNCF certification pages for current pricing before you budget.