CKA vs CKAD: Which Kubernetes Certification Should You Get First?

If you manage Kubernetes clusters, get the CKA. If you build and deploy applications on Kubernetes, get the CKAD. If you do both (and most DevOps engineers do), start with the CKA because it covers more ground and makes the CKAD significantly easier afterward.

That is the quick answer. The rest of this article explains why, breaks down exactly how the two exams differ, and helps you figure out which path saves you the most time and money.

The Quick Verdict

Choose CKA if you are a DevOps engineer, SRE, platform engineer, or sysadmin. Your day involves cluster operations, infrastructure, networking, and keeping things running.

Choose CKAD if you are a software developer who deploys to Kubernetes. Your day involves writing code, building containers, configuring deployments, and debugging application issues on K8s.

Choose CKA first if you are not sure. About 40% of the content overlaps between the two exams. The CKA covers that shared ground plus cluster administration topics that the CKAD skips entirely. Starting with the CKA means you study the overlapping material once, then only need to learn the CKAD-specific topics for your second cert.

Side by Side Comparison

	CKA	CKAD
Full name	Certified Kubernetes Administrator	Certified Kubernetes Application Developer
Price	$445	$445
Exam format	Performance-based, live terminal	Performance-based, live terminal
Duration	2 hours	2 hours
Passing score	66%	66%
Number of tasks	15 to 20	15 to 20
Validity	2 years	2 years
Free retake	Yes, one included	Yes, one included
practice sessions sessions	2 included	2 included
Prerequisites	None	None
Open book	kubernetes.io/docs only	kubernetes.io/docs only
Primary audience	Cluster admins, DevOps, SREs	Developers deploying to K8s
Difficulty	Harder (broader scope)	Moderate (narrower scope)

The exam format is identical. Same price, same duration, same proctoring platform, same passing score. The difference is entirely in what they test.

What the CKA Covers That the CKAD Does Not

The CKA goes deeper into cluster operations. These topics do not appear on the CKAD at all:

Cluster installation and configuration. The CKA tests your ability to bootstrap a cluster using kubeadm, including initializing the control plane, joining worker nodes, and managing bootstrap tokens. The CKAD assumes the cluster already exists.

Cluster upgrades. Upgrading a Kubernetes cluster version with kubeadm is a common CKA task. Knowing the correct order (control plane first, then workers) and the specific commands matters. The CKAD never touches this.

etcd backup and restore. Taking snapshots of etcd and restoring them is a CKA staple. You need to know the etcdctl commands and the certificate paths. This is pure infrastructure work that does not show up on the CKAD.

Node maintenance. Cordoning, draining, and uncordoning nodes. Managing taints and tolerations at the node level. Troubleshooting kubelet issues. All CKA territory.

Troubleshooting cluster components. When the API server, scheduler, or controller manager goes down, the CKA expects you to diagnose and fix it. The CKAD only cares about application-level troubleshooting.

RBAC at the cluster level. Both exams touch RBAC, but the CKA goes deeper into ClusterRoles, ClusterRoleBindings, and managing access across namespaces. The CKAD focuses on namespace-scoped Roles.

If these topics sound like your daily work, CKA is your exam.

What the CKAD Covers That the CKA Does Not

The CKAD goes deeper into application lifecycle topics:

Multi-container Pod patterns. Sidecars, init containers, and ambassador containers get more attention on the CKAD. You need to understand when to use each pattern and how to configure them correctly.

Probes in depth. Liveness probes, readiness probes, and startup probes. The CKAD expects you to configure all three types and understand when each one fires and what happens when they fail.

Helm basics. The CKAD includes Helm chart operations: installing, upgrading, rolling back, and searching for charts. The CKA does not test Helm.

Custom Resource Definitions. The CKAD may ask you to work with CRDs. This is about extending the Kubernetes API, which is more of a developer concern.

API deprecations and versioning. Understanding API versions, deprecated resources, and how to convert between API versions. The CKAD cares about this because developers need to keep their manifests current.

Job and CronJob patterns. Both exams cover Jobs, but the CKAD goes deeper into parallelism settings, completion counts, backoff limits, and CronJob scheduling syntax.

If your work revolves around deploying and managing applications rather than running clusters, these CKAD-specific topics are more relevant to you.

The 40% Overlap

Here is what both exams test. If you study for one, you are already partially prepared for the other.

Pods, Deployments, and ReplicaSets. Creating, updating, scaling, and troubleshooting basic workloads. Both exams hit this hard.

Services and networking. ClusterIP, NodePort, and LoadBalancer services. Exposing deployments. Understanding how service discovery works with DNS. Both exams expect you to create and debug services.

ConfigMaps and Secrets. Creating them, mounting them as volumes, referencing them as environment variables. Standard on both exams.

Persistent Volumes and Claims. Creating PVs and PVCs, binding them, mounting them in Pods. Both exams include storage tasks.

NetworkPolicies. Writing ingress and egress rules. Both exams can ask you to create or modify network policies.

Resource requests and limits. Setting CPU and memory requests and limits on containers. Both exams cover this.

Labels, selectors, and annotations. Filtering resources, using label selectors in services and deployments. Fundamental to both exams.

Namespace management. Creating namespaces, deploying resources into specific namespaces, working across namespaces. Both exams require this.

This overlap is why starting with the CKA is efficient. You cover all of this material once, add the CKA-specific cluster admin topics, and then only need to learn the CKAD-specific application patterns for your second exam.

Difficulty Comparison

The CKA is harder than the CKAD for most people. Three reasons:

Broader scope. The CKA covers everything the CKAD covers in the overlap areas, plus cluster installation, upgrades, etcd operations, and deep troubleshooting. More topics means more study time.

Troubleshooting weight. Troubleshooting is 30% of the CKA. These questions are unpredictable because the failure could be anywhere: a typo in a manifest, a misconfigured kubelet, a broken certificate, a wrong port number. You cannot memorize your way through troubleshooting. You have to understand how the system works.

Cluster-level tasks. Working with kubeadm, etcd, and static pod manifests requires comfort with Linux system administration. If you are coming from a pure development background without much Linux experience, these tasks feel unfamiliar.

The CKAD is more focused. The tasks are mostly about creating and configuring application resources correctly. If you already work with Kubernetes deployments, services, and config in your day job, the CKAD will feel more natural.

That said, neither exam is easy. Both have pass rates around 50 to 60%. The time pressure is real on both. You need to be fast with kubectl regardless of which exam you take.

CKA vs CKAD Exam Domains

CKA Domains

Domain	Weight
Cluster Architecture, Installation & Configuration	25%
Troubleshooting	30%
Workloads & Scheduling	15%
Services & Networking	20%
Storage	10%

CKAD Domains

Domain	Weight
Application Design and Build	20%
Application Deployment	20%
Application Environment, Configuration & Security	25%
Services & Networking	20%
Application Observability and Maintenance	15%

Notice how the CKAD frames everything around "applications." The CKA frames everything around "clusters." Same technology, different perspective.

Study Time Comparison

Background	CKA Study Time	CKAD Study Time
Working with K8s daily	3 to 4 weeks	2 to 3 weeks
Some K8s experience	6 to 8 weeks	4 to 6 weeks
Strong Linux, new to K8s	8 to 12 weeks	6 to 8 weeks
New to Linux and K8s	Do LFCS first, then 8 to 12 weeks	Do LFCS first, then 6 to 8 weeks
Already passed CKA	N/A	2 to 3 weeks
Already passed CKAD	4 to 6 weeks	N/A

The last two rows are the key insight. Going from CKA to CKAD takes 2 to 3 weeks because you only need to pick up Helm, multi-container patterns, and a few other application-specific topics. Going from CKAD to CKA takes 4 to 6 weeks because you need to learn cluster admin, etcd, kubeadm, and deep troubleshooting from scratch.

This asymmetry is why CKA first is the more efficient path for most people.

Career Value: Which Cert Gets You Hired?

Both certifications show up in job postings. But they appear in different roles.

CKA shows up in:

• DevOps Engineer
• Platform Engineer
• Site Reliability Engineer (SRE)
• Cloud Engineer
• Infrastructure Engineer
• Kubernetes Administrator

CKAD shows up in:

• Backend Developer
• Cloud Native Developer
• Software Engineer (with K8s focus)
• Application Architect
• DevOps Engineer (some postings)

The CKA appears in more job listings because cluster administration is a broader skill that applies to more roles. Even developers who mostly write code often end up needing CKA-level knowledge when they troubleshoot deployment issues or configure production workloads.

Salary-wise, both certifications boost your earning potential similarly. The certification itself is a signal of Kubernetes competence. Employers care less about which specific cert you have and more about whether you have demonstrated, validated K8s skills. Read the full salary breakdown in our Kubernetes certification salary guide.

The Bundle Strategy

If you plan to get both (and many people do), the CKA + CKAD bundle from the Linux Foundation saves you money over buying them separately.

There is also the CKA + CKAD + CKS triple bundle if you want to go further into security.

And if you want the full set, the Kubestronaut bundle includes all five Kubernetes certifications (KCNA, KCSA, CKA, CKAD, CKS) at a significant discount.

The order that makes the most sense for most people:

1. CKA (the foundation)
2. CKAD (quick win after CKA because of overlap)
3. CKS (requires CKA, so you are already eligible)
4. KCNA and KCSA (associate-level, easiest of the five, can be done anytime)

See the full Kubernetes certification path guide for a detailed walkthrough.

Which One if You Can Only Pick One?

If you can only take one exam and will never take the other, here is how to decide.

Pick the CKA if:

• You manage or will manage Kubernetes clusters
• You work in DevOps, SRE, or platform engineering
• You want the certification that appears in the most job postings
• You are not sure what your role will look like in 2 years (CKA is more versatile)
• You want to eventually take the CKS (it requires CKA)

Pick the CKAD if:

• You are a developer and will stay a developer
• You deploy apps to Kubernetes but someone else runs the clusters
• You want a shorter, more focused study period
• You already understand Linux and basic K8s but want to go deeper on the application side

For most people reading this, the CKA is the better first choice. It covers more ground, opens more doors, and makes every other Kubernetes certification easier to get afterward.

Study Resources for Both Exams

For the CKA

Our full CKA study guide covers every domain, includes a week-by-week study plan, and lists the best courses and practice resources.

For the CKAD

Our CKAD study guide focuses on the application development topics and the exam-specific patterns you need to know.

For both

• Practice sessions come free with each exam registration
• kubernetes.io/docs is your primary reference during both exams
• The Linux Foundation offers official training courses for both exams

The best preparation strategy is the same for both: practice in a real terminal until the commands are muscle memory. Reading is not enough. You need to do the work.

FAQ

Can I take the CKAD before the CKA?

Yes. Neither exam has prerequisites. You can take them in any order. The CKAD does not require the CKA, and the CKA does not require the CKAD. The only Kubernetes certification with a prerequisite is the CKS, which requires a valid CKA.

How much overlap is there between CKA and CKAD?

About 40% of the content overlaps. Both exams test Pods, Deployments, Services, ConfigMaps, Secrets, PVs/PVCs, NetworkPolicies, and namespace management. If you pass one, you already know a significant chunk of the other.

Is the CKAD easier than the CKA?

For most people, yes. The CKAD has a narrower scope focused on application deployment. The CKA adds cluster administration, etcd operations, kubeadm, and heavier troubleshooting. That said, the CKAD is not easy. It has the same 2 hour time limit and the same pass rate range.

Can I take both exams on the same day?

Technically you could schedule them the same day, but that is a bad idea. Each exam is 2 hours of intense focus in a proctored environment. You would be mentally exhausted by the second exam. Space them at least 2 to 3 weeks apart.

Do employers care which one I have?

Most employers care that you have a Kubernetes certification. The specific one matters less than the validated skill it represents. That said, CKA appears in more job postings than CKAD, especially for infrastructure and DevOps roles. If you have both, even better.

Should I get both CKA and CKAD?

If Kubernetes is central to your career, getting both is a strong move. The CKA + CKAD combination covers administration and development, which is the full picture for most Kubernetes work. The bundle discount makes it financially reasonable, and the study overlap means you are not starting from scratch on the second exam.

How long between CKA and CKAD?

If you pass the CKA first, 2 to 3 weeks of focused CKAD study is enough for most people. The overlap is significant. You mainly need to learn Helm, multi-container patterns, probes in depth, and a few other application-focused topics. Do not wait too long after the CKA or you will lose the muscle memory.

Is the CKA + CKAD bundle worth it?

Yes, if you plan to take both within the bundle's validity period. The bundle costs less than buying two individual exams, and each exam still comes with its own free retake and practice sessions. There is no downside compared to buying separately.