CKAD: Certified Kubernetes Application Developer

1. Exam Overview and Mechanics

#

• Duration: 2 Hours
• Format: 100% Performance-Based (Terminal). 15-20 practical tasks.
• Passing Score: 66%
• Environment: Proctored online. You are given a browser-based terminal connected to real Kubernetes clusters.
• Allowed Resources: You are allowed to keep exactly ONE browser tab open to the official kubernetes.io/docs documentation. No StackOverflow. No Google.

The time pressure is the true enemy in the CKAD. You have approximately 6-8 minutes per question. If a Pod is crashing, you must diagnose the logs, edit the YAML via vim, and redeploy it instantly.

2. Curriculum Breakdown

#

The CKAD curriculum focuses entirely on the workloads running inside the cluster, not the cluster itself (you don’t need to know how to install Kubernetes).

Domain 1: Application Design and Build (20%)

#

• Multi-Container Pods: You must know the Sidecar, Adapter, and Ambassador patterns.
• Jobs and CronJobs: Be able to deploy batch processing workloads.
• Volumes: Understand how to mount emptyDir and PersistentVolumeClaims into containers.

Domain 2: Application Deployment (20%)

#

• Deployments: Know how to perform rolling updates, rollbacks, and scale replicas.
• Blue/Green and Canary: Understand how to use Labels to route traffic to new application versions safely.

Domain 3: Application Observability and Maintenance (15%)

#

• Probes: You must know how to write Liveness, Readiness, and Startup probes.
• Logging: Know how to use kubectl logs and kubectl top to identify crashed or resource-starved Pods.

Domain 4: Application Environment, Configuration and Security (25%)

#

• ConfigMaps and Secrets: Know how to inject them as Environment Variables and Volume Mounts.
• ServiceAccounts and SecurityContexts: Know how to run a container as a non-root user and attach specific permissions.

Domain 5: Services and Networking (20%)

#

• Services: Know how to expose Deployments via ClusterIP and NodePort.
• Ingress: You will likely be asked to create an Ingress rule to route HTTP traffic based on URL paths.
• NetworkPolicies: Know how to write firewall rules that block or allow traffic between specific Pods.

3. Terminal Survival Strategies (The “HowToForge” Way)

#

If you memorize these terminal strategies, you will pass the exam.

Strategy 1: Never Write YAML from Scratch

#

Writing YAML by hand is slow and prone to spacing errors. Always use imperative commands to generate the YAML shell.

Instead of writing a Pod YAML, run this:

# This creates the YAML file without actually deploying the Pod
kubectl run my-nginx --image=nginx --dry-run=client -o yaml > pod.yaml

Then, use vim pod.yaml to add any complex requirements (like Volume Mounts or Liveness Probes) before applying it.

Strategy 2: Setup Aliases and Autocomplete

#

The very first thing you should do when the exam timer starts is configure your terminal.

# Aliases save thousands of keystrokes over 2 hours
alias k=kubectl

# Enable autocomplete so you can hit 'TAB' to auto-finish long resource names
source <(kubectl completion bash)
complete -F __start_kubectl k

Now, instead of typing kubectl get deployments -n very-long-namespace-name, you type: k get deploy -n very-long<TAB>.

Strategy 3: Master the Documentation Search

#

You are allowed to use kubernetes.io/docs. Do not try to memorize the exact YAML syntax for a NetworkPolicy or an Ingress.

Instead, practice using the search bar on the documentation site. Type “Network Policy”, click the first result, scroll down to the first YAML example, copy it, paste it into vim, and modify the Labels to match your exam question.

Strategy 4: The Explaining Command

#

If the documentation site is slow, use the built-in CLI documentation. kubectl explain is your best friend when you forget where a specific key goes in the YAML hierarchy.

# Forget where to put the livenessProbe?
kubectl explain pod.spec.containers.livenessProbe

Next Steps

#

Set up a local minikube or kind cluster on your laptop. Open a terminal. Do not close it until you can deploy a Node.js application, expose it via a Service, and inject a Secret into it using nothing but kubectl commands and vim.

Once you have conquered the CKAD, you are ready to manage the entire cluster infrastructure in the CKA (Certified Kubernetes Administrator) exam.