Certified Kubernetes Administrator (CKA) Study Guide (Benjamin Muschko)（Z-Library）

# Certified Kubernetes Administrator (CKA) Study Guide — Reading Guide ## 【One-Line Pitch】 A comprehensive, hands-on preparation guide for the performance-based CKA certification exam, covering everything from cluster installation to advanced troubleshooting—essential reading for anyone aiming to pass the 2025-updated exam and prove their Kubernetes administration skills. ## 【Book Arc】 - **Opening (~0%–9%)**: Exam overview and curriculum breakdown, including the five weighted domains (Cluster Architecture 25%, Workloads and Scheduling 15%, Servicing and Networking 20%, Storage 10%, Troubleshooting 30%) and practical exam-day strategies like setting contexts and namespaces. - **Early (~9%–28%)**: Core kubectl mastery—creating, updating, patching, and deleting objects—plus foundational Kubernetes concepts including declarative state management, controllers as reconciliation loops, and the API-based architecture. - **Early-Middle (~28%–38%)**: Cluster installation and lifecycle management using kubeadm, including version upgrades, node draining/cordoning, and the critical process of backing up and restoring etcd databases. - **Middle (~38%–47%)**: Authentication, authorization, and admission control—deep dives into kubeconfig files, RBAC with Roles/RoleBindings/ClusterRoles, and service account configuration for Pod-to-API communication. - **Middle-Late (~47%–53%)**: Workload management and scheduling, covering Deployments, ReplicaSets, ConfigMaps, Secrets, node affinity, and taints/tolerations for optimal workload placement. - **Late (~53%–end)**: Advanced topics including Operators and Custom Resource Definitions (CRDs), Helm and Kustomize for package management, plus comprehensive troubleshooting techniques for containers, services, networking, and DNS resolution. ## 【Key Takeaways】 - **Performance-based exam requires hands-on speed** (Early): The CKA isn't multiple-choice—you must solve real cluster problems under time pressure, making practical kubectl fluency more important than theoretical knowledge. - **Context and namespace setup is your first move** (Early): Before attempting any exam question, set the correct context and namespace with `kubectl config set-context` to avoid solving problems on the wrong cluster. - **kubectl offers multiple object management strategies** (Early): Use `run`/`create` for quick imperative creation, `edit` for full-configuration changes, and `patch` for fine-grained JSON merge patches—each suited to different scenarios. - **Cluster upgrades follow a strict sequence** (Early-Middle): Use `kubeadm upgrade plan` to check versions, `kubeadm upgrade apply` for the control plane, then drain nodes, upgrade kubelet/kubectl, and uncordon—never skip the drain step. - **etcd backup/restore is a core administrative duty** (Middle): Understanding the etcd backup process via etcdctl and SSH access to control plane nodes is essential for disaster recovery and a likely exam scenario. - **RBAC requires understanding the full binding chain** (Middle): Roles define permissions, RoleBindings map them to users/groups/service accounts—and you must verify access with commands like `kubectl auth can-i` to confirm what a user can actually do. - **Service accounts enable in-Pod API access** (Middle): Pods authenticate to the API server using bearer tokens auto-mounted at `/var/run/secrets/kubernetes.io/serviceaccount/token`, accessible via the `kubernetes.default.svc` service. - **Helm and Kustomize serve different purposes** (Late): Helm manages charts with versioning and upgrades, while Kustomize composes and customizes raw manifests—knowing when to use each is a key differentiator. ## 【Reading Tips】 - **Skim the exam curriculum overview** (~6%): The domain weightings tell you where to focus—Troubleshooting (30%) and Cluster Architecture (25%) deserve the most study time. - **Deep-read the kubectl chapters** (~9%–28%): These are your daily tools during the exam. Practice every command pattern until they're second nature, especially `patch` and `edit` for live object modification. - **Pay special attention to the etcd backup/restore section** (Middle): This is a classic exam scenario that trips up candidates—study the exact commands and sequence carefully. - **Work through the sample exercises** (throughout): The book includes practical exercises with Vagrant/VMware prerequisites—these simulate the real exam environment better than passive reading. - **Use the Exam Review Guide appendix** (Late): The final appendix condenses key concepts for last-minute review—perfect for the week before your exam date. ## 【Coverage Limits】 The excerpts primarily cover the first half of the book (exam details, kubectl, cluster installation, RBAC, and service accounts). Later sections on Operators/CRDs, Helm/Kustomize, and detailed troubleshooting are referenced in the table of contents but not fully excerpted here. ##