CKA vs CKAD vs CKS: Kubernetes Certs 2026

CKA, CKAD, and CKS test different Kubernetes responsibilities. CKA maps to cluster administration, CKAD to application development on Kubernetes, and CKS to security work after earning CKA. Choose by role, not by an assumed prestige ladder.

All three are online performance-based exams. Candidates work through command-line tasks in a proctored environment rather than answering a conventional multiple-choice test. Exam prices, versions, curricula, and terms below are point-in-time observations from official pages accessed 2026-08-24. Recheck exam and checkout details before purchase.

Quick comparison

Decision factor	CKA	CKAD	CKS
Role-specific scope	Cluster administration and operations	Application design, deployment, configuration, and troubleshooting	Kubernetes security and hardening
Prerequisite	No prerequisite listed on the current exam page	No prerequisite listed on the current exam page	CKS requires a passed CKA before the CKS exam; CKA does not have to remain active
Exam interface	Online, proctored, performance-based command-line work	Online, proctored, performance-based command-line work	Online, proctored, performance-based command-line work
Current exam-only list price	$445 exam-only	$445 exam-only	$445 exam-only
Current software version	Kubernetes v1.35	Kubernetes v1.35	Kubernetes v1.35
Choose it when	You operate clusters	You deploy and debug applications	You secure Kubernetes platforms and workloads

The current Linux Foundation pages also list a $625 subscription bundle and a $645 course bundle for each exam. Exact regional prices and package contents can change.

Shared exam terms

When checked, each Linux Foundation exam page stated:

• 12-month eligibility from purchase;
• one retake;
• two exam-simulator attempts;
• a two-hour exam;
• two-year validity after certification.

The CKS page separately requires candidates to have passed CKA before attempting CKS; CKA does not have to remain active. These are product-specific terms, not a promise that every regional checkout, training package, or future exam window will remain identical.

The current CKA, CKAD, and CKS pages identify Kubernetes v1.35 as the exam environment. CNCF says quarterly updates are planned to track Kubernetes releases. Recheck before publication or purchase rather than treating one software version as permanent.

CKA: cluster administration

The CKA page from the Linux Foundation and the CNCF CKA overview define the administrator scope. It includes certification-specific domains around cluster architecture and configuration, workloads and scheduling, services and networking, storage, and troubleshooting.

CKA is the direct fit when your work includes tasks such as:

• configuring and maintaining clusters;
• operating nodes and cluster components;
• managing networking and storage behavior;
• diagnosing workload, node, or control-plane problems;
• handling cluster lifecycle and operational recovery.

Choose CKA when those tasks reflect your current or intended role. It does not guarantee an administrator job, salary, or employer preference.

CKA preparation

Build practice around the exact current domains. Use the current CKA course page from KodeKloud only for the capabilities and labs that page currently lists. Compare the course syllabus with the official exam domains before enrolling.

Ratings and enrollment are not compared in this guide. Use exact-course evidence only; provider counters do not create an independent cross-course quality measure.

CKAD: application development on Kubernetes

The CKAD page from the Linux Foundation and the CNCF CKAD overview define the developer scope. The current domains cover application design and build, deployment, observability and maintenance, environment and configuration, security, services, and networking.

CKAD is the direct fit when you:

• create and update Kubernetes workload resources;
• configure applications and their runtime needs;
• expose services and troubleshoot application access;
• use probes, logs, and command-line tools to diagnose workloads;
• work inside an existing cluster rather than owning the cluster lifecycle.

Do not assume that every CKAD course covers every tool or that application topics transfer to the administrator or security exams. Check the exact current syllabus.

CKAD preparation

Compare any prep course with the official domains. The current KodeKloud CKAD course page can establish its current labs and features, but it does not establish exam-wide outcomes or comparative difficulty.

CKS: Kubernetes security after CKA

The CKS page from the Linux Foundation and the CNCF CKS overview define the security scope. CKS requires a passed CKA, but CKA does not have to remain active at the scheduled CKS exam time.

Current CKS domains include cluster setup and hardening, system hardening, reducing microservice vulnerabilities, supply-chain security, and monitoring, logging, and runtime security. This scope fits work such as:

• restricting cluster and workload privileges;
• hardening nodes, APIs, and workloads;
• reviewing image and software-supply-chain controls;
• applying policy and vulnerability-reduction practices;
• investigating runtime and audit signals.

Tool examples must remain tied to the current CKS page or exact course syllabus. Do not transfer tools between exams or claim that every course covers the same security stack.

CKS preparation

Use the current KodeKloud CKS course page to verify its actual lab and curriculum claims. Match those claims to the official CKS domains. A named tool in one course does not make it an exam requirement unless the current official blueprint says so.

Which certification should you take first?

Use this conditional recommendation:

• Choose CKA if you provision, operate, upgrade, or troubleshoot clusters.
• Choose CKAD if you build, deploy, configure, and diagnose applications on an existing cluster.
• Choose CKS if your work focuses on Kubernetes security and you already meet the CKS prerequisite.

There is no reproducible difficulty or overlap benchmark on the official pages. Prepare against current domains rather than relying on fixed task counts, overlap percentages, prep timelines, or easiest-versus-hardest labels.

If your role spans application and platform work, compare both domain lists and take the exam that covers your immediate responsibilities first. There is no universal sequence between CKA and CKAD. CKS is different because its prerequisite sets the order.

How to evaluate a prep course

1. Open the current official exam page and record the software version and domains.
2. Open the exact prep-course syllabus.
3. Map every course section to an official domain.
4. Confirm the current lab environment, support, access period, and plan terms.
5. Practice command-line tasks without step-by-step prompts.
6. Check the Linux Foundation candidate rules before exam day.
7. Recheck regional checkout, scheduling, and identity requirements.

The Linux Foundation candidate handbook is the source for current candidate-facing rules. Course marketing is not a substitute for those rules.

Current price and package notes

The official pages listed the same three purchase shapes for each certification when checked:

Purchase shape	Point-in-time list price
Exam only	$445
Exam with THRIVE-ONE annual subscription	$625
Exam with corresponding training course	$645

These values are dated, not permanent. Check the exact regional checkout for tax, currency, eligibility, promotion, and included access. The KodeKloud pricing page defines its own current plan terms and should not be merged into Linux Foundation exam entitlements.

What the certifications do not prove

The certification owners describe intended skill scopes and exam interfaces. They do not provide a current first-party labor-market dataset that supports salary ranges, vacancy totals, recruiter preference, or hiring outcomes.

There is no salary or employment guarantee. Check current target roles separately, and use the certification alongside evidence of work you can explain: incident analysis, deployment and rollback, cluster maintenance, policy enforcement, or security investigation.

Ratings, enrollments, simulator usage, and provider testimonials are also not normalized exam-performance measures. This guide does not compare them.

Bottom line

Choose by the work you need to perform. CKA covers cluster administration, CKAD covers application development on Kubernetes, and CKS covers security after CKA. Verify the official role-specific scope, current software version, prerequisite, package, and exam terms before purchase.

The retained Linux Foundation, CNCF, KodeKloud, and candidate-handbook pages were reachable when accessed 2026-08-24. That is a point-in-time source signal, not a guarantee of regional purchase eligibility, scheduling, price, curriculum, simulator access, support, or future availability.

For training options, see the best Kubernetes courses guide. For the surrounding skill set, see the best DevOps courses guide. The cloud certification path guide covers a separate set of cloud credentials.

Methodology and sources

This refresh used the official Linux Foundation pages for CKA, CKAD, and CKS; the CNCF pages for CKA, CKAD, and CKS; the Linux Foundation candidate handbook; and exact KodeKloud course and plan pages. Certification-specific domains and exact current syllabus claims remain separate.