Guided
Type the command, inspect every field, and explain why the object exists.
The CKA rewards speed, accuracy, and familiarity with Kubernetes resources. The strongest preparation does not memorize hundreds of command strings. It builds a compact operating system for discovering syntax, creating valid objects, inspecting state, and recovering from mistakes.
High-value recall includes resource names, object relationships, common imperative generators, and where to find help. Low-value recall is an exact long command that breaks when a version or task differs. Practice using the API and built-in documentation as part of normal work.
kubectl api-resources
kubectl explain deployment.spec.strategy
kubectl create deployment web --image=nginx --dry-run=client -o yaml
kubectl auth can-i list pods --as system:serviceaccount:team:reader
kubectl get events -A --sort-by=.lastTimestampObjects should not be learned as isolated YAML fragments. Build a namespace, configuration, workload, Service, traffic route, policy, and delivery path around one application. This creates a mental graph: a Service selects Pods, EndpointSlices represent ready backends, an HTTPRoute points to the Service, and a rollout changes the ReplicaSet that owns the Pods.
Type the command, inspect every field, and explain why the object exists.
Rebuild the resource from a requirement without copying the previous manifest.
Receive a symptom and diagnose the broken dependency under a time limit.
Explain the evidence and repair as though answering an interview panel.
Before applying a change, validate at progressively more realistic layers:
kubectl apply --dry-run=server -f object.yaml
kubectl diff -f object.yaml
kubectl apply -f object.yaml
kubectl wait --for=condition=Available deployment/web --timeout=120sDeliberately create selector mismatches, wrong namespaces, missing Secret keys, incorrect probe paths, unschedulable Pods, RBAC denials, and broken rollouts. The aim is not to avoid mistakes during practice. It is to recognize them quickly, preserve time, and make a controlled correction.
Application troubleshooting is only part of administrator work. On a disposable self-managed cluster, practice locating static Pod manifests, identifying component responsibilities, validating etcd snapshots, understanding certificate paths, and distinguishing scheduler failure from controller-manager failure.
Run 15-minute beginner tasks, 20-minute intermediate tasks, and 30-minute advanced incidents. Under time pressure, keep a scratchpad with the current context, namespace, symptom, leading hypothesis, and next command. This prevents repeated commands and random changes.
You should be able to discover an unfamiliar field, generate a valid starting object, move between imperative and declarative workflows, inspect controller state, troubleshoot dependencies, and explain why the change is safe. That capability remains useful after the exam environment changes.
Kubernetes Operator's Workbook, Second Edition turns these ideas into guided labs, 24 production incidents, control-plane recovery, and interview simulations.
Explore the workbook