The Road to Golden Kubestronaut

Welcome to The Road to Golden Kubestronaut.

If the CNCF certification list has ever made you close the tab, you are in the right place. Sixteen exams looks like a wall. It is a path. You take one exam. Then you take the next one. That is the whole method.

I started the same way. One certification, then another, until the five Kubernetes exams made me a Kubestronaut. I liked the climb, so I kept walking through the rest of the cloud native exams and Linux, and became a Golden Kubestronaut. My profile is on the CNCF Golden Kubestronaut map. This series is the guide I wanted on day one. Come with me. We will take them in an order that makes each exam prepare you for the next.

You can stop at Kubestronaut and be done with something real. You can keep going to Golden if the work starts to feel like yours. Both are worth it. Neither one asks you to be ready for the last exam before you book the first.

What you are walking toward

Kubestronaut is five current Kubernetes certifications: KCNA, CKA, CKAD, KCSA, and CKS. Pass those and you have the title. That is a finish line, not a warm-up you have to apologize for.

Golden Kubestronaut is every current CNCF certification, plus LFCS. Today that adds PCA, ICA, CCA, CAPA, CGOA, CBA, OTCA, KCA, CNPA, and CNPE on top of the five. CNCF will add new exams later, and they give you time to prepare. The live list is on the program page and the FAQ. Keep each certification unexpired and the title stays yours.

The path, one exam at a time

First, become a Kubestronaut

These five are enough. Learn them in this order and each one hands you something the next exam uses.

1. KCNA (Kubernetes and Cloud Native Associate). Multiple choice. Your front door. The words, the cluster, and a map of the landscape so nothing later feels like a foreign language.
2. CKA (Certified Kubernetes Administrator). Hands-on, two hours. You learn to run the cluster: architecture, workloads, networking, storage, and troubleshooting. This is where confidence starts to feel earned.
3. CKAD (Certified Kubernetes Application Developer). Hands-on, two hours. You learn to build what runs on that cluster. Design, configuration, exposure, observability.
4. KCSA (Kubernetes and Cloud Security Associate). Multiple choice. Security ideas, in calm conditions, before anyone puts you in a lab and starts the clock.
5. CKS (Certified Kubernetes Security Specialist). Hands-on, two hours. You can book this once CKA is active. Hardening, supply chain, workloads, runtime. This is the exam that turns the first four into Kubestronaut.

Then pause, and notice what you did

Becoming a Kubestronaut. A short stop. The badge, the community, and the decision to continue. When you get here, take the evening off before you look at the next mountain.

If you want to keep going: Golden

Same habit. A new subject every time. Linux first, because everything else sits on it. Then observability, networking, delivery, policy, and finally the platform exams, which reuse what you already know.

1. PCA (Prometheus Certified Associate). Metrics, PromQL, alerting. You learn to see what the cluster is doing.
2. OTCA (OpenTelemetry Certified Associate). Traces, metrics, and logs. The wider story around the metrics you just learned.
3. CCA (Cilium Certified Associate). How pods actually talk, and how you secure that path.
4. ICA (Istio Certified Associate). Hands-on. A service mesh: traffic, security, telemetry. Another lab exam, and you will already know how to be calm in one.
5. CGOA (GitOps Certified Associate). Desired state and reconciliation. A cleaner way to ship.
6. CAPA (Certified Argo Project Associate). Argo CD, Workflows, Rollouts, and Events. The tools people mean when they say GitOps out loud.
7. CBA (Certified Backstage Associate). A catalog and a front door for the engineers you support.
8. KCA (Kyverno Certified Associate). Policy as Kubernetes resources. Your CKS instincts, written down so the cluster enforces them.
9. CNPA (Cloud Native Platform Engineering Associate). Multiple choice. What a platform is for. Required for Golden since 15 October 2025.
10. CNPE (Certified Cloud Native Platform Engineer). Hands-on. You put the platform together: architecture, GitOps, self-service, observability, policy. Required for Golden since 1 March 2026. Save it for last. By then it will feel like a review of the road behind you.
11. LFCS (Linux Foundation Certified System Administrator). Hands-on. Processes, networking, storage, permissions. The operating system under every cluster you will ever touch.

After the exams

Keeping the title. This last post is not another exam. Certifications expire, and CNCF sometimes adds a new one. The post explains how to stay a Golden Kubestronaut after you have passed them all, and what the title includes.

Why walk it with this series

Each exam post gives you the current syllabus and a short list of resources, so your study time goes to learning. You will see where that exam sits, what it is asking, and which certification comes next. The hands-on exams are CKA, CKAD, CKS, LFCS, ICA, and CNPE. Everything else is multiple choice. You will know that before you book anything.

Go at your own pace. One exam a month is a serious pace. One exam a quarter still gets you there. The only pace that fails is waiting until you feel ready for all of them.

Who this is for

• You know some Kubernetes and want a reason to go deeper.
• You have one certification and want to see the rest of the road.
• You opened the Golden Kubestronaut page, counted the exams, and decided it was for someone else.

It is for you. Start with KCNA.

What you will need

• The official page for the exam in front of you, from the CNCF certification catalog.
• A Kubernetes cluster when the hands-on exams arrive. kind or minikube is enough to practice.
• A terminal, and the willingness to sit one exam before you plan the next.

The next post is KCNA. It is the front door. Walk through it.

Stay tuned by subscribing to the blog or following me on X, LinkedIn, and the CNCF Golden Kubestronaut map.