Golden Kubestronaut Study Guide

Are you new to Kubernetes and Cloud Native technologies and considering aiming for the Golden Kubestronaut? I was in this position coming from a virtualization background. I used CNCF certifications as milestones to structure my studies. This guide is the result of the insights I gained along this journey.

This guide is designed to help you:

  • Determine if you have the time and resources to begin this journey
  • Learn from a curated list of good learning resources
  • Follow what I believe is the optimal order to study and pass each certification
  • Apply tips for both lab-based and multiple-choice exams
  • Understand what level of skills you can realistically expect at the end
  • Explore what I consider the next steps toward real expertise
  • Use an alternative approach if you can’t afford the exams


This article is licensed under CC BY 4.0.

Background

This guide is a follow‑up to my previous article Kubestronaut Challenge.
I began this journey with minimal experience in Linux, Kubernetes, and Cloud Native solutions but with 20 years of IT experience primarily with virtualization and related technologies.
I achieved the Kubestronaut in about two months of full‑time study during the summer of 2025, and completed the remaining certifications in roughly six weeks at the beginning of 2026.

Your timeline will differ based on your available time, experience, and learning style.

Note: The CNPE became a requirement for the Golden Kubestronaut on March 1st, 2026. I will update this guide after attempting it.

Before You Start

Before attempting this journey, ensure that you have the time and resources to complete it.

KodeKloud subscription

This has been my primary study resources for all exams.
Most courses are good, some of them are excellent.
The price is fair, especially during promotions, which happens quite often.
At of 17/03/2026 the Annual Pro plan is 45% off, costing $250 per year.

Exams

The Golden Kubestronaut Bundle currently costs $4229 and includes 16 certifications.
Promotions are common, so you can often expect a 40 to 50% discount.
If you cannot commit to completing all certifications within one year, it may be better to spread them out and strategically use the Kubestronaut coupons you receive (refers to the Tips section).

If the cost is an obstacle, refer to the final section of this guide for an alternative approach.

Time

It is by far the highest cost and there is no shortcut.

  • Full time means no work income.
  • Outside of work means giving up free time and possibly sleep.

Ideally, learning while working is the best balance, but it’s unlikely that any project will cover all the technologies included in the Golden Kubestronaut. In addition most real‑world environments only use a subset of Kubernetes features.

Employer Support

The support of an employer can make a significant difference by providing dedicated learning time in addition to covering exam costs.

Learning plan

Order Justification

Attempting the certifications in the right order makes each subsequent exam easier.

My main recommendation is to take the LFCS before the Kubestronaut certifications.
A solid Linux and Docker foundation is essential for Kubernetes, and if I had done the LFCS earlier, it would have made both the CKA and CKS significantly easier.

I also recommend taking the KCNA and KCSA after the lab-based exams.
Hands‑on experience makes theoretical exams easier because several topics overlap.

Linux and Docker Foundation

Many experienced DevOps professionals give the same recommendations:

  • Learn Linux before Docker.
  • Learn Docker before Kubernetes.

These are good recommendations but I learned them too late.
To avoid making the same mistake, the LFCS should be your first certification.

Learning Linux Basics Course & Labs | KodeKloud
Crash Course: Linux For Absolute Beginners | KodeKloud
DevOps Pre-Requisite Course | KodeKloud
(Sections: Linux Basics, Networking Basics, Source Control Management (SCM))
Docker Training Course for the Absolute Beginner | KodeKloud
Prep Course – Linux Foundation Certified System Administrator (LFCS) Certification | KodeKloud
LFCS | Killercoda
Killer Shell – Exam Simulators (LFCS)

Attempt the LFCS

Kubestronaut

Kubestronaut requires five certifications. It was the most challenging part of the entire journey for me, especially the CKS, which I passed only on my second attempt.
If your Kubernetes knowledge was superficial when starting, expect to learn a lot during this phase.

Introduction to Cloud Infrastructure Technologies (LFS151)
Introduction to Kubernetes (LFS158)
Kubernetes and Cloud-Native Associate (KCNA) | KodeKloud
Kubernetes for the Absolute Beginners – Hands-on Tutorial | KodeKloud
Kubernetes Challenges | KodeKloud
Helm for Beginners | KodeKloud
Certified Kubernetes Administrator (CKA) | KodeKloud
Certified Kubernetes Application Developer (CKAD) | KodeKloud
Ultimate Certified Kubernetes Application Developer (CKAD) Mock Exam Series | KodeKloud
Killercoda Interactive Environments (CKAD)

Isovalent Network Policy Editor for Kubernetes
Play with the “standard” network policies but keep Cilium ones for a later stage.
Killer Shell – Exam Simulators (CKAD)

Attempt the CKAD

Review Certified Kubernetes Administrator (CKA) | KodeKloud
Ultimate Certified Kubernetes Administrator (CKA) Mock Exam Series | KodeKloud
Killercoda Interactive Environments (CKA)
Killer Shell – Exam Simulators (CKA)

Attempt the CKA

Review Introduction to Cloud Infrastructure Technologies (LFS151)
Kubernetes and Cloud Native Security Associate (KCSA) | KodeKloud (security is part of KCNA)

Pass the KCNA
It will be a very easy exam after the CKAD and CKA.

Certified Kubernetes Security Specialist (CKS) | KodeKloud
Prep Course – Istio Certified Associate (ICA) Certification | KodeKloud
(Focus only on sections relevant for the CKS)
Prep Course – Cilium Certified Associate (CCA) Certification | KodeKloud
(Focus only on sections relevant for the CKS)
Isovalent Network Policy Editor for Kubernetes
Practice Network policies and Cilium policies.
Cilium labs Cilium – Interactive Tutorials & Learning Labs
There are many labs, for CKS it is not required to do all of them but at least everything related to network policies encryption and MTLS.
DevSecOps – Kubernetes DevOps & Security | KodeKloud
(Focus only on relevant section for the CKS. Note: The whole course is probably a good foundation for CNPE)
Read the CIS Kubernetes Benchmark
YouTube – Kubernetes CKS Full Course Theory + Practice + Browser Scenarios
Warning: AppArmor is outdated on this course
Youtube – Kubesimplify Kubernetes CKS Certification(NEW UPDATE 2025)
CKS – Challenges | KodeKloud
Ultimate Certified Kubernetes Security Specialist (CKS) Mock Exam Series | KodeKloud
Killer Shell CKS | Killercoda
Killer Shell – Exam Simulators
Sailor.sh CKS – More practice is good. I only managed to run the test with 12 questions and not the 20 planned. But in GitHub there were the 20 questions so i have just studied from there.

Attempt CKS

Review Kubernetes and Cloud Native Security Associate (KCSA) | KodeKloud

Attempt the KCSA

It will be an easier exam after the CKS.

From Kubestronaut to Golden Kubestronaut

The remaining certifications cover many solutions delivering capabilities for an Enterprise Kubernetes Platform. It means that the concepts learned here will reapply with alternative products.
The CBA and the CNPA are unique because they serve as an introduction to Platform Engineering.

Follow the KodeKloud Golden Kubestronaut learning path for the remaining certifications.
The order doesn’t really matter as long as you keep CNPA as the last one.

In addition, make sure you are familiar with each exam’s Domains & Competencies and read the official documentation accordingly. This is mandatory for the CBA exam, where the course alone will not be enough.

Note: CNPE is not covered yet in this guide but it is part of the “Platform Engineering” track and follows the CNPA.

Additional Tips

I have documented multiples tips during this journey.

Year 1:
Get the Kubestronaut in middle or end of the year. You will receive as benefit 5 50% coupons.
Purchase the next 5 five exams before the end of the year.
Year 2:
You will receive another time 5 50% reduction coupons.
Purchase the next 5 five exams before the end of the year.

Golden Kubestronaut is a foundation

For those starting without a background in Linux, Kubernetes and Cloud Native solutions, achieving the Golden Kubestronaut is a strong milestone.
However, it is “only” a very good foundation for the journey ahead.

Expertise Level Estimation

I use the following expertise scale:
1-2 Basic knowledge
3-4 Junior level
5-6 Professional level
7-8 Senior level
9-10 Expert level

By following this learning plan alone, I would estimate that it is possible to reach around 4/10 for Kubernetes and related technologies.
The reason is simple. The exams do not evaluate several key skills required in production environments.

Real Skills Not Tested

Operations

During the lab based exams, you are given a clearly defined task and all required parameters.
In a real environment, administrators must first identify which task needs to be done, decide how to do it, and determine which parameters to use.

Troubleshooting

During the lab based exam, you are given a clearly defined issue. Sometimes, the command to verify the solution is also provided.
In real environments, detecting that an issue even exists can be far more challenging, for example after a seemingly successful upgrade

Design

Design skills are not tested.
When design a solution an architect has to identify and meet customer requirements, identify constraints, identify and mitigate risks, justify architectural decisions.

I think the CNCF should create a Expert certification dedicated for testing architecture skills, using a defense format where the candidate has to defend a real world design.
Such certification may be too hard, costly and demanding for the “Golden Kubestronaut” so it could require the creation of a new tier “Platinum Kubestronaut”.

From Foundation to Expertise

This list contains the tasks that, in my opinion, in addition to real-word experience, contribute to reach a higher level of expertise.
This list is a work in progress.

  • Learn when to use an existing Enterprise Kubernetes Platform solution or build it yourself.
  • Increase troubleshooting Linux skills. SadServers: Linux, DevOps & SRE Labs | Job Interview Prep
  • Build a complete Platform Engineering portal in a lab, document the project on GitHub.
  • Collect, review and analyze reference design.
  • Develop AI skills. Identify when and how to integrate AI to assist in Kubenetes and/or Platform Engineering operations. e.g. Analyze logs.
  • Learning FinOps

What if you can’t afford exams?

If you can’t afford the exams, I still recommend following this study guide to learn the concepts.
You can also purchase the five Killer Shell simulators directly to test yourself in conditions close to the real exams.

The next step is to build your own portfolio on GitHub.
Find a realistic scenario, define requirements and constraints, design and build a solution while justifying every decision. Then repeat the process with new scenarios to demonstrate a range of skills.

Add to your CV the certificates of completion for the KodeKloud course and the links to the projects you have built and documented on GitHub.
These will demonstrate both your theorical and practical skills.

In my opinion, this is more valuable than certifications alone.
In other words:
Certifications < Portfolio < Portfolio + Certifications.

Good luck on your journey. If you have any feedback on this guide, please let me know.