Exampractice
DevOps & Linux

CKAD Study Plan for Kubernetes Developers

A six-week CKAD study plan built around a developer's schedule — weekly goals, kubectl speed drills, and milestones that tell you when you're on track.

Kenji Nakamura · 6 min read
Six-week study calendar illustration with Kubernetes hexagon tiles representing CKAD preparation milestones

A working developer who already ships containerised code can typically prepare for the Certified Kubernetes Application Developer (CKAD) exam in about six weeks of structured evening-and-weekend study; the plan below shows exactly what to do in each of those weeks. The Linux Foundation publishes no official study-hours figure — how long you need depends on how much Kubernetes you touch day to day — so this schedule is built to flex: compress it if you deploy to Kubernetes daily, stretch each phase if you are meeting kubectl for the first time.

One framing thought before week one. The CKAD, run by the Cloud Native Computing Foundation (CNCF) through the Linux Foundation, is a two-hour, online-proctored, performance-based exam: you solve live tasks in real clusters from a command line, and as of 2026 it runs on Kubernetes v1.35 with a 66% pass mark. That format dictates the plan's shape. Reading and video-watching appear only in the first half; from week three onwards, everything is typing. For the exam's full logistics — domains, current fees, registration, validity — see the CKAD exam guide rather than this plan, and if you are torn between this exam and the administrator track, the CKAD vs CKA ordering question is answered separately.

How the six weeks are weighted

The CKAD's five domains, with the provider's 2026 weights, are: Application Environment, Configuration and Security (25%), Application Design and Build (20%), Application Deployment (20%), Services and Networking (20%), and Application Observability and Maintenance (15%). The plan front-loads the two domains developers find least familiar — configuration/security and networking — because your existing build-and-deploy instincts already cover much of the rest.

Plan your calendar around three sessions of 60–90 minutes on weekdays plus one longer weekend block. Every session ends at a keyboard: a concept you have not typed is a concept you do not yet have.

Week 1 — environment, imperative kubectl, and Pods

Goal: a personal practice cluster and imperative-command reflexes.

  • Set up a disposable local cluster (minikube, kind, or a cloud sandbox — anything you can break and rebuild).
  • Learn the imperative commands that generate YAML for you: kubectl run, kubectl create deployment, kubectl expose, each with --dry-run=client -o yaml. Writing manifests from a blank file is the single biggest time-waster in this exam; kill the habit now.
  • Cover Pods deeply: multi-container patterns (sidecar and init containers), commands and arguments, restart policies.
  • Bookmark-and-navigate drill: practise finding things in the official Kubernetes docs fast. The exam's allowed-resources rule permits specified official documentation inside the exam environment (check the candidate handbook for the current rule), so doc navigation is an examinable skill in all but name.

Milestone check: you can go from empty terminal to a running multi-container Pod, defined via a generated-then-edited manifest, in under five minutes.

Week 2 — configuration and security (the 25% domain)

Goal: fluency in the exam's heaviest domain.

  • ConfigMaps and Secrets: created imperatively, consumed as environment variables and as mounted volumes.
  • SecurityContexts at Pod and container level: runAsUser, capabilities, read-only root filesystems.
  • ServiceAccounts and how a Pod uses one; resource requests and limits; ResourceQuotas and LimitRanges in a namespace.
  • Probes: liveness, readiness and startup, and what each one actually changes about scheduling and traffic.

Milestone check: given a plain Deployment, you can retrofit a Secret, a SecurityContext and both probes from memory, checking only field names with kubectl explain.

Week 3 — design, build and deployment

Goal: the workload-management core, plus Helm and Kustomize.

  • Deployments end to end: rolling updates, rollbacks with revision history, scaling, and the difference between recreate and rolling strategies.
  • Jobs and CronJobs, including completions, parallelism and backoff limits.
  • Labels, selectors and annotations as the connective tissue for everything else.
  • Package and customise applications with Helm and Kustomize at the level the curriculum expects — installing, upgrading, overlaying — not chart authorship.

This is also the week to switch your daily work over, where policy allows: use your practice habits on real tickets, because nothing embeds kubectl rollout undo like needing it.

Milestone check: deploy an app, roll out a bad image, diagnose it, roll back, and scale — inside ten minutes.

Week 4 — services, networking and observability

Goal: close the classic developer blind spot.

  • Services (ClusterIP, NodePort) and how DNS names resolve between namespaces.
  • Ingress rules for host- and path-based routing.
  • NetworkPolicies: write one that restricts traffic and then prove it works — the proving is what the exam grades.
  • Observability: kubectl logs (including previous-container logs), kubectl describe, events, and debugging Pods that never reach Running.

Milestone check: expose a two-tier app through a Service and Ingress, lock it down with a NetworkPolicy, and debug a deliberately broken deployment a colleague (or you, yesterday) sabotaged.

Week 5 — speed drills and full simulation

Goal: convert competence into pace.

The CKAD is widely regarded as a race; two hours is generous only if you never hesitate. This week, stop learning topics and start drilling them against a stopwatch — set per-task budgets of five to eight minutes and treat overruns as failures even when the YAML was eventually correct. (The drill techniques themselves — imperative fluency, editor setup, skip-and-return triage — are covered in depth in our guide to preparing for the CKAD exam; this plan just tells you when to apply them.)

Take your first full-length timed simulation at the end of the week. Your exam purchase includes two 36-hour sessions of the killer.sh simulator — deliberately harder than most candidates find the live exam — so spend the first session now and save the second for week six. Score it against the 66% pass mark and, more importantly, tag every dropped mark with its domain.

For extra repetitions between simulator sessions, timed CKAD practice questions let you rehearse objective by objective and see which domain keeps leaking marks — analyse the results rather than replaying questions until you remember answers, which teaches you the questions, not Kubernetes.

Milestone check: first full simulation completed, scored, and decomposed into a weak-domain list.

Week 6 — weak domains, second simulation, logistics

Goal: repair, confirm, book.

  1. Days 1–3: re-drill only the task types that dropped marks in the simulation. Depth beats breadth now.
  2. Day 4: second killer.sh session. You want a score comfortably above 66% on tasks you have not seen before.
  3. Day 5: logistics rehearsal. The exam is delivered remotely via the PSI Bridge secure browser — run the compatibility check on your actual machine, clear your desk, remember the single-monitor rule, and re-read the candidate handbook.
  4. Day 6: light consolidation only — aliases, doc bookmarks, context-switching habit (kubectl config use-context before every task, without exception).
  5. Day 7: rest, then sit the exam.

If the second simulation lands below the pass mark, defer without guilt: your purchase includes a 12-month eligibility window and one free retake, so there is no financial pressure to sit before you are ready. As of 2026 the exam is listed at $445 USD standalone (course and subscription bundles cost more; confirm current pricing on the Linux Foundation's page).

Common ways this plan goes wrong

  • Watching instead of typing. Video courses feel like progress; the exam only measures what your fingers know. Cap passive study at one-third of any week.
  • Perfect YAML from scratch. If you are still hand-writing full manifests in week four, return to the week-1 imperative drills.
  • Ignoring the 25% domain. Developers gravitate to Deployments and Services because they are familiar. Configuration and security is the biggest single slice of the exam.
  • Saving all timing pressure for the end. The stopwatch enters in week five here, but per-task time awareness should colour every session from week two. The exam's difficulty is pace, as the assessment of how hard the CKAD exam is makes clear.
  • Booking on hope. Two above-threshold simulations are your evidence. One lucky run is not.

Your first week starts tonight

The distance between "I use Kubernetes at work" and "I can pass a two-hour live-cluster exam" is not knowledge — it is repetitions under a clock, and six weeks of them is enough for most working developers. Spin up the practice cluster tonight, generate your first Pod manifest imperatively, and let the plan carry you from there. Pass it, and the credential is valid for two years — and if your ambitions later turn towards cluster operations, the administrator track and its own checklist will be waiting.

Exam facts in this guide were checked against official certification-provider pages on . Fees, exam codes and policies change — confirm on the provider’s own site before you book.

Put it into practice

Test what you have just read

Reading about an exam only takes you so far. Work through practice questions for your certification and find the gaps before exam day does.

You may also like