CKA 40-Day Study Roadmap

A day-by-day learning plan synthesized from the Tech Tutorials with Piyush CKA Full Course. Designed for the Certified Kubernetes Administrator exam (2025 Edition).

Phase 1: Foundation & Core Concepts (Days 0–10)

Day	Topic	CKA Domain
0	Course Introduction & Exam Overview	Architecture
1	What is Kubernetes & Why K8s?	Architecture
2	Kubernetes Architecture (Control Plane & Worker Nodes)	Architecture
3	Installing Kubernetes with kubeadm	Architecture
4	kubectl Essentials & Cluster Interaction	Architecture
5	Understanding Pods & Container Patterns	Workloads
6	Multi-Container Pods, Init Containers & Sidecars	Workloads
7	Labels, Selectors & Annotations	Workloads
8	Deployments, ReplicaSets & Replication Controllers	Workloads
9	Kubernetes Services (ClusterIP, NodePort, LoadBalancer, ExternalName)	Networking
10	Kubernetes Namespaces (default, kube-system, resource isolation, DNS)	Architecture

Phase 2: Workloads, Networking & Storage (Days 11–25)

Day	Topic	CKA Domain
11	Multi-Container Pods (Sidecar, Init, Adapter, Ambassador)	Workloads
12	DaemonSets, Jobs & CronJobs	Workloads
13	Static Pods, Manual Scheduling, Labels & Selectors	Workloads
14	Taints & Tolerations in Kubernetes	Workloads
15	Node Affinity Explained	Workloads
16	Kubernetes Requests and Limits	Workloads
17	Kubernetes Autoscaling — HPA vs VPA	Workloads
18	Kubernetes Health Probes — Liveness vs Readiness vs Startup	Workloads
19	ConfigMaps & Secrets	Architecture
20	SSL/TLS Fundamentals	Security
21	Manage TLS Certificates in K8s — CSR & kubeadm PKI	Security
22	Authentication & Authorization Basics	Architecture
23	RBAC: Roles, RoleBindings & Hands-On Demo	Architecture
24	RBAC Continued: ClusterRoles & ClusterRoleBindings	Architecture
25	Kubernetes Service Account & RBAC for Workloads	Architecture
26	Kubernetes Network Policies Explained	Networking
27	Setup a Multi Node Kubernetes Cluster Using Kubeadm	Architecture

Phase 3: Storage, Scheduling & Troubleshooting (Days 28–37)

Day	Topic	CKA Domain
28	Docker Storage: Volumes, Bind Mounts & Layered Architecture	Storage
29	Kubernetes Storage: Volumes, PersistentVolumes & PVCs	Storage
30	What Is DNS — External DNS Fundamentals	Networking
31	Understanding CoreDNS In Kubernetes	Networking
32	Kubernetes Networking Explained — CNI With @kubesimplify	Networking
33	Kubernetes Ingress Tutorial — Ingress Explained (with @AbhishekVeeramalla)	Networking
34	Restore	Architecture
35	ETCD Backup & Restore	Architecture
36	Kubernetes Logging & Monitoring	Troubleshooting
37	Application Failure Troubleshooting	Troubleshooting
38	Troubleshooting Control Plane Failure	Troubleshooting
39	Troubleshooting Worker Nodes Failures	Troubleshooting
40	Phase 3 Review & Practice Exam	—

Phase 4: Mock Exams & Final Preparation (Days 38–42)

Day	Focus
38	Mock Exam 1: Full 2-Hour Simulation
39	Mock Exam 2: Speed & Accuracy Drill
40	Weak Area Revision & kubectl Cheatsheet
41	Exam Strategy: Time Management & Documentation Search
42	Final Review & Confidence Building

Daily Study Methodology

1. Watch the daily video (20–40 min)
2. Lab — Replicate every command on a local cluster (kind/minikube)
3. Note — Summarize key commands and YAML patterns in your own words
4. Quiz — Try to solve related tasks without looking at notes
5. Log — Mark progress in the CKA Progress Tracker

Critical Exam Skills to Build

• YAML Speed: Practice writing Deployments, Services, and RBAC manifests from memory
• Service Types: Know the four types (ClusterIP, NodePort, LoadBalancer, ExternalName), their port fields, and when each applies
• kubectl Explain: Use kubectl explain --recursive to discover field structures quickly
• Context Switching: The exam uses multiple clusters; be fluent with kubectl config use-context
• Docs Navigation: Learn to find answers on kubernetes.io/docs in under 30 seconds
• Troubleshooting Chain: Master kubectl get → describe → logs → exec for rapid diagnosis

Sources

• CKA Day 0: Introduction & Roadmap
• CKA Day 9: Kubernetes Services Explained
• CKA Day 16: Kubernetes Requests and Limits
• CKA Day 18: Kubernetes Health Probes Explained — Liveness vs Readiness Probes
• CKA Day 19: Kubernetes ConfigMap and Secret Explained
• CKA Day 18: Kubernetes Health Probes Explained — Liveness vs Readiness Probes
• TLS Works
• CKA Day 21: Manage TLS Certificates In a Kubernetes Cluster — Create Certificate Signing Request
• CKA Day 22: Kubernetes Authentication and Authorization Simply Explained
• CKA Day 23: Kubernetes RBAC Explained — Role Based Access Control
• CKA Day 24: Kubernetes RBAC Continued — ClusterRole and ClusterRoleBinding
• CKA Day 25: Kubernetes Service Account — RBAC Continued
• CKA Day 26: Kubernetes Network Policies Explained
• CKA Day 27: Setup a Multi Node Kubernetes Cluster Using Kubeadm
• CKA Day 28: Docker Volume Explained — Docker Bind Mount & Docker Persistent Storage
• CKA Day 29: Kubernetes Volume Simplified — Persistent Volume, Persistent Volume Claim & Storage Class
• CKA Day 32: Kubernetes Networking Explained | Container Network Interface (CNI)
• CKA Day 33: Kubernetes Ingress Tutorial | Ingress Explained
• CKA Day 34: Step-By-Step Guide To Upgrade a Multi Node Kubernetes Cluster With Kubeadm

Related Pages

• CKA Certification Overview
• Kubernetes Concepts Index
• Kubernetes Authentication & Authorization — Day 22 topic: authn/authz pipeline and kubeconfig
• Kubernetes RBAC — Day 22 continuation: Roles, ClusterRoles, Bindings
• Kubernetes Service Account — Day 25: in-cluster identity and RBAC for workloads
• Kubernetes Network Policies — Day 26: zero-trust east-west traffic segmentation
• Kubeadm Cluster Setup — Day 27: production cluster installation, ports, CNI, certificates
• Docker Storage — Day 28: prerequisite for Kubernetes storage; layered architecture, volumes, bind mounts, and the K8s storage bridge
• Kubernetes Storage — Day 29: PVs, PVCs, StorageClasses, access modes, and reclaim policies
• CoreDNS — Day 31: cluster DNS and service discovery
• Kubernetes CNI — Day 32: Container Network Interface plugins and cluster networking
• Kubernetes Ingress — Day 33: Layer 7 HTTP/HTTPS routing, Ingress Controllers, and TLS termination
• Kubernetes Cluster Upgrade — Day 34: rolling update strategy, kubeadm upgrade commands, and worker-node sequencing
• Node Maintenance: Drain, Cordon, Uncordon — Day 34 prerequisite: node evacuation before upgrades
• Kubernetes Versioning & Version Skew — Day 34 prerequisite: release cadence, support window, and component compatibility
• Kubernetes ETCD Backup and Restore — Day 35: snapshot, restore, certificate paths, and stacked vs external ETCD
• Kubernetes Disaster Recovery — Day 35: DR hierarchy, RTO/RPO, persistent data protection, and cluster reconstruction
• Kubernetes Logging and Monitoring — Day 36: container/node/cluster logs, Metrics Server, and kubectl top for troubleshooting
• Kubernetes Application Troubleshooting — Day 37: systematic debugging chain, failure mode catalog, and events-first strategy
• Kubernetes Control Plane Troubleshooting — Day 38: kube-apiserver, etcd, scheduler, and controller-manager failure diagnosis and recovery
• Kubernetes Worker Node Troubleshooting — Day 39: kubelet, container runtime, CNI, kube-proxy, and resource pressure eviction diagnosis
• CKA Practice Tasks — Pre-exam cramming and daily lab drill index aligned with every topic in the roadmap
• Helm — Post-CKA specialization: Kubernetes package manager
• Helm Charts — Post-CKA specialization: chart authoring and templating
• Helm Release Management — Post-CKA specialization: release lifecycle and rollback
• Terraform — Post-CKA specialization: infrastructure-as-code for cloud and cluster infrastructure
• Atlantis — PR-driven Terraform workflow with plan/apply comments and project locking
• Atlantis Walkthrough — Source: Terraform collaboration through GitHub PRs
• CKA Progress Tracker

Post-CKA Specialization: DevSecOps & Helm

After completing the 40-day CKA curriculum, two structured specializations extend CKA knowledge into production operations:

DevSecOps Path

The DevOps to DevSecOps in 9 Hours course by Abhishek Veeramalla maps directly onto CKA knowledge:

CKA Foundation	DevSecOps Extension
Docker Fundamentals (Day 1–3)	Container Security — image scanning, non-root users, distroless images
Kubernetes Architecture & kubeadm (Day 5, 27)	Terraform Security — IaC scanning, state encryption, Vault integration
RBAC & Authentication (Day 22–25)	Kubernetes Security — least-privilege RBAC, NetworkPolicies, Pod Security
TLS & Certificates (Day 20–21)	GitOps Security — branch protection, secret scanning, PAT hygiene
CI/CD Concepts	SAST/DAST/SCA — SonarQube, OWASP ZAP, Trivy in GitHub Actions
PR Review & Approval Patterns	Atlantis — Terraform plan/apply comments and project locking

This progression turns a cluster administrator into a security-aware pipeline engineer.

Helm & Application Delivery Path

The Helm Zero to Hero course (also by Abhishek Veeramalla) covers the standard Kubernetes packaging layer:

CKA Foundation	Helm Extension
Kubernetes Architecture & kubeadm (Day 5, 27)	Helm v3 architecture — client-side only, no Tiller, API server direct
Deployments, Services, ConfigMaps (Day 8–10, 19)	Chart authoring — templating Deployments, Services, and ConfigMaps
Ingress (Day 33)	Installing Ingress Controllers via Helm repositories
Namespaces & RBAC (Day 10, 22–25)	Namespace-scoped releases and Helm RBAC considerations
Application Troubleshooting (Day 37)	Helm revision history, rollback, and release debugging

Mastering Helm is essential for any Kubernetes operator because the entire ecosystem (Prometheus, Grafana, Argo CD, cert-manager, NGINX Ingress) distributes via Helm charts.

---

Tags: cka kubernetes roadmap learning-plan 40-days devops devsecops