Quick answer

The Kubernetes certification path depends on role. KCNA validates foundational cloud-native knowledge; KCSA validates foundational cloud-native security knowledge; CKA validates Kubernetes administration; CKAD validates Kubernetes application development; CKS validates advanced Kubernetes security and requires a prior CKA pass.

All five are currently available online. CKA, CKAD and CKS are two-hour performance-based exams; KCNA and KCSA are 90-minute multiple-choice associate exams.

Which Kubernetes Certification Fits Your Role?

Choose KCNA for cloud-native foundations, KCSA for foundational security, CKA for cluster administration, CKAD for Kubernetes application development and CKS for advanced security after a previous CKA pass. Role fit matters more than collecting every credential.

Kubernetes certification path showing KCNA, KCSA, CKA, CKAD and CKS by role and prerequisite relationship.
Foundational and professional credentials serve different jobs. CKS requires a previous CKA pass.
CertificationChoose it when…FormatCurrent price
KCNAYou need foundational Kubernetes/cloud-native knowledge before a professional hands-on credential.90-min multiple-choice$250
KCSAYou need foundational Kubernetes/cloud-native security knowledge before advanced security specialization.90-min multiple-choice$250
CKAYou administer, install, operate and troubleshoot Kubernetes clusters.2-hour performance-based$445
CKADYou design, build, configure and expose applications on Kubernetes.2-hour performance-based$445
CKSYou already passed CKA and want to validate Kubernetes security skills.2-hour performance-based$445

How Do CKA, CKAD and CKS Differ?

CKAD are not simply “easy, medium, hard” versions of the same exam. They validate different work.

Choose CKA

If your daily work is cluster administration, troubleshooting, networking, storage and platform operations.

CKA online guide →

Choose CKAD

If you work primarily with applications, workloads, configuration, services and application delivery on Kubernetes.

CKAD online guide →

Choose CKS

If you have previously passed CKA and want to demonstrate Kubernetes security specialization.

CKS online guide →

Choose KCNA

If you are earlier in the journey and need a conceptual cloud-native foundation before a hands-on professional exam.

KCNA online guide →

Choose KCSA

If your current objective is foundational Kubernetes and cloud-native security rather than an advanced hands-on security specialization.

KCSA online guide →

How Does the 2026 CARE Change Affect Certification Planning?

CNCF’s CARE program now links some certification maintenance paths. From June 18, 2026, passing or recertifying CKS can reinstate or extend a previously earned CKA so the expiration dates align. CNCF also uses CARE relationships for foundational certifications such as KCNA.

Which Kubernetes Certification Training Route Fits Your Goal?

Linux Foundation currently pairs CKA with LFS258, CKAD with LFD259, CKS with LFS260 and KCNA with LFS250. KCSA currently has an exam-only and certification + THRIVE route on its certification page. Professional exams also have $625 certification + THRIVE-ONE Annual bundle options; KCNA and KCSA + THRIVE are currently $495.

Compare online course routes → Compare bundles →

What Does This Certification Hub Deliberately Not Do?

CKAD page gives enough role comparison to make a purchase decision. It does not try to become a giant encyclopedia of every CNCF certification or a generic Kubernetes tutorial site.

Frequently asked questions

Which Kubernetes certification should I take first?

If you are new to cloud native, KCNA is the foundational associate option. If your foundation goal is cloud-native security, consider KCSA. If you already work with Kubernetes, choose CKA for administration or CKAD for application development. CKS is the advanced security specialization and requires a previous CKA pass.

Do I need CKA before CKAD?

No current prerequisite used here requires CKA before CKAD.

Do I need CKA before CKS?

Yes. CNCF states that CKS candidates must have taken and passed CKA before attempting CKS; CKA does not have to be active.

Can CKS renew CKA?

Under the current CARE policy, passing or recertifying CKS can reinstate or extend a previously earned CKA from June 18, 2026.

Sources checked

Current Kubernetes certification prices, formats, role distinctions and CKS prerequisite information on this page were rechecked against the first-party sources below on 7 Sep 2026. Recheck the official product or policy page before purchase or exam day because changeable terms can move.

Last fact check: 7 Sep 2026