CKA 40-Day Study Roadmap
A day-by-day learning plan synthesized from the Tech Tutorials with Piyush CKA Full Course. Designed for the Certified Kubernetes Administrator exam (2025 Edition).
Phase 1: Foundation & Core Concepts (Days 0–10)
| Day | Topic | CKA Domain |
|---|---|---|
| 0 | Course Introduction & Exam Overview | Architecture |
| 1 | What is Kubernetes & Why K8s? | Architecture |
| 2 | Kubernetes Architecture (Control Plane & Worker Nodes) | Architecture |
| 3 | Installing Kubernetes with kubeadm | Architecture |
| 4 | kubectl Essentials & Cluster Interaction | Architecture |
| 5 | Understanding Pods & Container Patterns | Workloads |
| 6 | Multi-Container Pods, Init Containers & Sidecars | Workloads |
| 7 | Labels, Selectors & Annotations | Workloads |
| 8 | Deployments, ReplicaSets & Replication Controllers | Workloads |
| 9 | Kubernetes Services (ClusterIP, NodePort, LoadBalancer, ExternalName) | Networking |
| 10 | Kubernetes Namespaces (default, kube-system, resource isolation, DNS) | Architecture |
Phase 2: Workloads, Networking & Storage (Days 11–25)
| Day | Topic | CKA Domain |
|---|---|---|
| 11 | Multi-Container Pods (Sidecar, Init, Adapter, Ambassador) | Workloads |
| 12 | DaemonSets, Jobs & CronJobs | Workloads |
| 13 | Static Pods, Manual Scheduling, Labels & Selectors | Workloads |
| 14 | Taints & Tolerations in Kubernetes | Workloads |
| 15 | Node Affinity Explained | Workloads |
| 16 | Kubernetes Requests and Limits | Workloads |
| 17 | Kubernetes Autoscaling — HPA vs VPA | Workloads |
| 18 | Kubernetes Health Probes — Liveness vs Readiness vs Startup | Workloads |
| 19 | ConfigMaps & Secrets | Architecture |
| 20 | SSL/TLS Fundamentals | Security |
| 21 | Manage TLS Certificates in K8s — CSR & kubeadm PKI | Security |
| 22 | Authentication & Authorization Basics | Architecture |
| 23 | RBAC: Roles, RoleBindings & Hands-On Demo | Architecture |
| 24 | RBAC Continued: ClusterRoles & ClusterRoleBindings | Architecture |
| 25 | Kubernetes Service Account & RBAC for Workloads | Architecture |
| 26 | Kubernetes Network Policies Explained | Networking |
| 27 | Setup a Multi Node Kubernetes Cluster Using Kubeadm | Architecture |
Phase 3: Storage, Scheduling & Troubleshooting (Days 28–37)
| Day | Topic | CKA Domain |
|---|---|---|
| 28 | Docker Storage: Volumes, Bind Mounts & Layered Architecture | Storage |
| 29 | Kubernetes Storage: Volumes, PersistentVolumes & PVCs | Storage |
| 30 | What Is DNS — External DNS Fundamentals | Networking |
| 31 | Understanding CoreDNS In Kubernetes | Networking |
| 32 | Kubernetes Networking Explained — CNI With @kubesimplify | Networking |
| 33 | Kubernetes Ingress Tutorial — Ingress Explained (with @AbhishekVeeramalla) | Networking |
| 34 | Restore | Architecture |
| 35 | Troubleshooting: Nodes, Pods & Networking | Troubleshooting |
| 36 | Troubleshooting: Control Plane & Storage | Troubleshooting |
| 37 | Phase 3 Review & Practice Exam | — |
Phase 4: Mock Exams & Final Preparation (Days 38–42)
| Day | Focus |
|---|---|
| 38 | Mock Exam 1: Full 2-Hour Simulation |
| 39 | Mock Exam 2: Speed & Accuracy Drill |
| 40 | Weak Area Revision & kubectl Cheatsheet |
| 41 | Exam Strategy: Time Management & Documentation Search |
| 42 | Final Review & Confidence Building |
Daily Study Methodology
- Watch the daily video (20–40 min)
- Lab — Replicate every command on a local cluster (kind/minikube)
- Note — Summarize key commands and YAML patterns in your own words
- Quiz — Try to solve related tasks without looking at notes
- Log — Mark progress in the CKA Progress Tracker
Critical Exam Skills to Build
- YAML Speed: Practice writing Deployments, Services, and RBAC manifests from memory
- Service Types: Know the four types (ClusterIP, NodePort, LoadBalancer, ExternalName), their port fields, and when each applies
- kubectl Explain: Use
kubectl explain --recursiveto discover field structures quickly - Context Switching: The exam uses multiple clusters; be fluent with
kubectl config use-context - Docs Navigation: Learn to find answers on
kubernetes.io/docsin under 30 seconds - Troubleshooting Chain: Master
kubectl get → describe → logs → execfor rapid diagnosis
Sources
- CKA Day 0: Introduction & Roadmap
- CKA Day 9: Kubernetes Services Explained
- CKA Day 16: Kubernetes Requests and Limits
- CKA Day 18: Kubernetes Health Probes Explained — Liveness vs Readiness Probes
- CKA Day 19: Kubernetes ConfigMap and Secret Explained
- CKA Day 18: Kubernetes Health Probes Explained — Liveness vs Readiness Probes
- TLS Works
- CKA Day 21: Manage TLS Certificates In a Kubernetes Cluster — Create Certificate Signing Request
- CKA Day 22: Kubernetes Authentication and Authorization Simply Explained
- CKA Day 23: Kubernetes RBAC Explained — Role Based Access Control
- CKA Day 24: Kubernetes RBAC Continued — ClusterRole and ClusterRoleBinding
- CKA Day 25: Kubernetes Service Account — RBAC Continued
- CKA Day 26: Kubernetes Network Policies Explained
- CKA Day 27: Setup a Multi Node Kubernetes Cluster Using Kubeadm
- CKA Day 28: Docker Volume Explained — Docker Bind Mount & Docker Persistent Storage
- CKA Day 29: Kubernetes Volume Simplified — Persistent Volume, Persistent Volume Claim & Storage Class
- CKA Day 32: Kubernetes Networking Explained | Container Network Interface (CNI)
- CKA Day 33: Kubernetes Ingress Tutorial | Ingress Explained
- CKA Day 34: Step-By-Step Guide To Upgrade a Multi Node Kubernetes Cluster With Kubeadm
Related Pages
- CKA Certification Overview
- Kubernetes Concepts Index
- Kubernetes Authentication & Authorization — Day 22 topic: authn/authz pipeline and kubeconfig
- Kubernetes RBAC — Day 22 continuation: Roles, ClusterRoles, Bindings
- Kubernetes Service Account — Day 25: in-cluster identity and RBAC for workloads
- Kubernetes Network Policies — Day 26: zero-trust east-west traffic segmentation
- Kubeadm Cluster Setup — Day 27: production cluster installation, ports, CNI, certificates
- Docker Storage — Day 28: prerequisite for Kubernetes storage; layered architecture, volumes, bind mounts, and the K8s storage bridge
- Kubernetes Storage — Day 29: PVs, PVCs, StorageClasses, access modes, and reclaim policies
- CoreDNS — Day 31: cluster DNS and service discovery
- Kubernetes CNI — Day 32: Container Network Interface plugins and cluster networking
- Kubernetes Ingress — Day 33: Layer 7 HTTP/HTTPS routing, Ingress Controllers, and TLS termination
- Kubernetes Cluster Upgrade — Day 34: rolling update strategy, kubeadm upgrade commands, and worker-node sequencing
- Node Maintenance: Drain, Cordon, Uncordon — Day 34 prerequisite: node evacuation before upgrades
- Kubernetes Versioning & Version Skew — Day 34 prerequisite: release cadence, support window, and component compatibility
- CKA Progress Tracker