Quick wins for a faster PC:
Clear out junk files and repair common Windows errorsFree Scan →Scan for outdated or missing drivers - takes under a minuteDriver Scan →Some links on this page are affiliate links: if you buy through them we may earn a commission, at no extra cost to you.
Bottom line: CNCF’s certification portfolio expanded with platform-engineering and Kyverno credentials, but the certificates do not guarantee a job. They can improve a candidate’s screening signal and provide a structured learning path when paired with hands-on projects, Linux, networking, cloud, security and software-delivery skills.
The story began with The New Stack’s April 4, 2025 report, which CNCF republished. Since then, CNCF has introduced the Certified Cloud Native Platform Engineering Associate (CNPA), the Certified Cloud Native Platform Engineer (CNPE) and Kyverno Certified Associate (KCA), added new training-distribution options and launched the CARE recertification program.
What CNCF actually revealed
The 2025 announcement was less a promise of automatic employment than an expansion of the cloud-native skills map. CNCF added credentials for platform engineering and Kyverno while continuing its established Kubernetes pathway. In 2026, the program also gained new purchasing and renewal options.
Recommended Free Tools
- CNPA: an associate-level introduction to platform-engineering concepts.
- CNPE: an advanced, practical credential for designing and operating enterprise-scale internal developer platforms.
- KCA: a specialized credential for Kyverno, the Kubernetes policy engine.
- Existing pathway: KCNA, KCSA, CKA, CKAD and CKS remain relevant for general Kubernetes knowledge, administration, application development and security.
CNCF’s 2025 education expansion is documented in its annual report. A separate announcement described CNPE’s enterprise platform-engineering scope. CKNE was announced in November 2025 as an upcoming intermediate Kubernetes networking certification for 2026; do not assume it is generally available until it appears in the current official catalog.
#1 Best Overall
The new certifications
CNPA: a foundation for platform engineering
CNPA is aimed at people building foundational knowledge of platform engineering. It is an associate-level, multiple-choice assessment rather than a practical administrator exam. CNCF says the exam was developed with contributions from industry participants and subject-matter experts.
It is a sensible starting point for a career changer or junior engineer who wants to understand internal developer platforms, developer experience and platform concepts before attempting more advanced implementation work. It is not evidence that the holder has operated a production platform.
CNCF’s CNPA announcement provides the credential’s background.
Do these 3 things before closing this tab:
1Clear out junk files and repair common Windows errors2Scan for outdated or missing drivers - takes under a minute3Repair Windows errors before they cause bigger problemsCNPE: practical enterprise platform engineering
CNPE targets engineers responsible for internal developer platforms and enterprise-scale platform operations. CNCF describes an emphasis on architecture, automation, platform operations and enabling application teams.
That makes CNPE different from CNPA: CNPA tests foundational knowledge, while CNPE is positioned as a more advanced and practical credential. It is not a shortcut into platform engineering. Candidates generally need experience with Linux, Kubernetes, cloud infrastructure, infrastructure as code, CI/CD, observability, security and software delivery.
KCA: a Kyverno specialization
KCA validates knowledge of Kyverno, an open-source Kubernetes policy engine. It is most relevant to policy-as-code, governance, security and platform teams that use or are evaluating Kyverno.
KCA is not a general-purpose Kubernetes certificate. Its value is highest when a target employer uses Kyverno; teams using Gatekeeper, native admission controls or another policy engine may value broader Kubernetes and security experience more.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
How the CNCF credentials fit together
| Career goal | Good starting point | Potential follow-up |
|---|---|---|
| New to Kubernetes and cloud native | KCNA | CKA or CKAD |
| Kubernetes administration, DevOps or SRE | CKA | CKS, CNPE or production projects |
| Kubernetes application development | CKAD | CKA, CKS or application-platform work |
| Kubernetes security | KCSA | CKS |
| Platform-engineering fundamentals | CNPA | CNPE |
| Enterprise internal developer platforms | CNPE | Portfolio and production experience |
| Kyverno policy management | KCA | CKS, CNPE or hands-on policy work |
The official catalog currently places KCNA and KCSA at beginner level, with CKA, CKAD, CKS, CNPA and CNPE occupying more intermediate or advanced parts of the pathway. The only hard sequence in this list is CKS: the certification requires CKA.
Do these certifications create job opportunities?
Indirectly, they can; automatically, they do not. A credential may help a career changer pass an initial screening filter, give an employer a standardized signal and organize study. Performance-based exams such as CKA, CKAD and CKS can also demonstrate timed practical ability against a published blueprint.
They do not prove that someone can run a large unreliable cluster during an incident, design a company’s network, communicate with developers, write production software or make architecture trade-offs. Employers may still prioritize Linux, networking, Terraform, a cloud platform, GitOps, CI/CD, observability, security, incident response and communication.
The Linux Foundation markets certifications as tools for career advancement and recognition on its CKA, KCNA and CKAD pages. Those are provider claims, not evidence that one certificate causes a particular hiring rate or salary.
How to interpret the older salary and shortage claims
The original 2025 article quoted a ZipRecruiter estimate of $204,500 in mean annual pay for a “senior Kubernetes engineer” and Portworx findings that 80% of organizations planned to build most new applications on cloud-native platforms within five years while 75% faced skills shortages. These figures were reported by the original coverage, not established government labor statistics.
Rank #4
“Senior Kubernetes engineer” is not a standardized occupation, and pay varies by location, seniority, employer, industry and total compensation. A survey about planned adoption does not mean every organization will hire certified Kubernetes professionals. Skills shortages can coexist with a difficult entry-level market because employers often want experienced practitioners.
Published prices and exam formats
The following are official price signals seen on August 18, 2026. Prices, promotions, bundles and regional taxes can change, so verify the checkout page before paying.
| Certification | Price seen | Format and validity |
|---|---|---|
| KCNA | $250 | Multiple choice; 90 minutes; valid two years; two attempts listed |
| CKA | $445 | Performance-based; two hours; valid two years; one retake listed |
| CKAD | $445 | Performance-based; two hours; valid two years; one retake listed |
| CKS | $445 | Performance-based; two hours; valid two years; CKA required |
| CNPA | $250 | Associate-level credential; verify current exam details |
| CNPE | $445 signal | Advanced platform-engineering credential; verify live checkout price |
| KCA | $250 | Associate-level Kyverno credential |
For CKA specifically, the current page states a 12-month window to schedule and take the exam, one retake, two exam-simulator attempts and a Kubernetes 1.35 exam environment. The exam is online-proctored and performance-based. Kubernetes exam versions change, so check the current candidate handbook and permitted documentation immediately before scheduling.
The general retake policy normally grants one retake within 12 months of purchase, subject to the product or corporate arrangement.
Best Value
CARE changes the maintenance calculation
CNCF introduced the CARE program in 2026. Under the announced rules, passing or recertifying CKA or CKAD can renew KCNA, while passing or recertifying CKS can renew KCSA. A June update says a passed or recertified CKS can reinstate or extend CKA to the CKS expiration date.
Effective dates and grandfathering provisions apply to qualifying certifications earned or renewed from January 1, 2026. Because eligibility depends on certification status and timing, check your account and the latest CARE rules before relying on an automatic renewal.
Which certification should you choose?
- Career changer or beginner: KCNA if you need broad vocabulary; CNPA if platform engineering is your target. Build a lab before buying a practical exam.
- Cluster administrator, DevOps or SRE: CKA. Expect command-line troubleshooting under time pressure.
- Application developer: CKAD for manifests, workloads, services, configuration and application lifecycle. It does not establish deep cluster-administration expertise.
- Security engineer or DevSecOps practitioner: KCSA for fundamentals, then CKS after CKA and substantial Linux, networking and container-security practice.
- Platform engineer: CNPA for fundamentals and CNPE when you already design or operate internal developer platforms. CNPA is not stated as a mandatory CNPE prerequisite.
- Kyverno user: KCA when your organization uses Kyverno and you already have broader Kubernetes knowledge.
The real cost of becoming employable
The exam fee is only part of the investment. Budget for training, practice labs, local or cloud cluster resources, retakes and time. You may also need Git, Terraform, cloud-provider services, networking, observability, security and software-engineering skills.
A certification is most persuasive beside evidence such as a public GitHub project, a documented homelab, an internal developer portal prototype, a policy-as-code repository, dashboards, incident exercises or measurable automation improvements. A badge without practical work may not persuade an experienced hiring manager.
In June 2026, CNCF and Linux Foundation Education announced a Udemy pathway bundling training with CKA, CKAD, CKS and CNPE exam purchases. It is a convenience option, not evidence that bundled training improves hiring outcomes. CKA and CKAD pages also show $625 exam-plus-THRIVE-ONE bundles versus $445 exam-only; the broader catalog is worthwhile only if you will use it.
A practical six-step plan
- Choose a target role rather than collecting badges.
- Read the official curriculum and list missing skills.
- Build one role-relevant project, such as a secure cluster, GitOps deployment or internal developer platform.
- Practice in a real or simulated environment under the exam time limit.
- Confirm the current price, Kubernetes version, proctoring rules, validity and retake terms.
- Put the certification on your résumé beside measurable project outcomes and the technologies used.
The Bottom Line
CNCF’s expanded certifications make the cloud-native career map clearer: KCNA and CNPA support foundational learning, CKA and CKAD test practical administration or development, CKS covers security, CNPE targets enterprise platform engineering and KCA covers Kyverno. They are worth considering when tied to a specific role and real practice. They are not substitutes for production experience, and no CNCF credential guarantees a job or a particular salary.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
