Exam day
CKAD exam requirements
Two hours of kubectl while a stranger watches your webcam. Machine, room, ID, PSI — not the syllabus. Confirm against the Linux Foundation handbook; they move this.
KubeLab is not the Linux Foundation or PSI. This is a reading of their public docs (August 2026). Your confirmation email wins if it disagrees.
- Duration
- 2 hours
- Tasks
- 15–20 CLI problems
- Pass
- 66%
- Price
- $445, one retake
- Cluster
- Kubernetes 1.35
- Valid
- 2 years
- To schedule
- 12 months
- Languages
- EN, JA, ZH
- Proctor
- PSI Bridge + Secure Browser
- Results
- Email within 24 hours
CKAD uses PSI Bridge and the PSI Secure Browser — a downloaded app, not a Chrome tab. You need to install it and kill other processes. Work laptops usually cannot.
Bring this
- A personal Windows, Mac, or Ubuntu machine you administer.
- One active monitor. 15" and 1080p recommended (1024×768 is the floor).
- 16 GB RAM recommended, 8 GB minimum. Reboot so about half the RAM is free.
- 500 MB free disk for the Secure Browser.
- A webcam you can point around the room. Desktop: an external cam you can pick up.
- Built-in mic and speakers. No headset, no earbuds, no AirPods.
- Wired broadband if you can. 3 Mbps up and down. 750 kbps is the floor.
- HTTPS to AWS S3 and WebRTC allowed. No VPN, no corporate firewall, no HTTP proxy.
- Latest Chrome to schedule. The Secure Browser is Chrome-based; other browsers are a worse rehearsal.
Leave this
- A work or school laptop. MDM, no admin, corporate firewall — it will not install.
- A second monitor. Disable extras so the OS reports one display.
- Any VM, even if the compatibility check is green.
- A Chromebook. CKAD needs the Secure Browser, not the Chrome extension.
- A phone or tablet. Surface Pro with a front camera is the only tablet PSI lists.
- VPN, corporate firewall, HTTP proxy, headphones, extra cameras left plugged in.
Operating systems PSI lists
Supported
- Windows 10 or 11, 64-bit
- macOS Sonoma 14, Sequoia 15, Tahoe 26
- Ubuntu 22.04, 24.04, 26.04 LTS
Not supported
- Windows Education, Windows Enterprise, S-Mode, Snapdragon
- macOS Ventura 13 and older
- Ubuntu 20.04, non-LTS (odd-year) Ubuntu
- ChromeOS / Chromebook (no Secure Browser)
Windows Education and Windows Enterprise are on the refuse list. That is the edition a work laptop actually runs. A $445 professional exam that rejects the professional OS. Bring a personal machine.
Ubuntu: launch the Secure Browser from the desktop icon. Not from a terminal. You are about to sit a Linux exam. They still want a double-click.
- Run the PSI system check (camera, mic, bandwidth together). syscheck.bridge.psiexams.com · video-diagnostics.twilio.com
- After you book, run the Secure Browser tutorial from the Test Taker portal. That is the only rehearsal that installs the real app.
- Mac: allow Camera, Microphone, Automation, and Input Monitoring for the Secure Browser.
- Do not sit this in a VM even if the compatibility check is green. The check does not bind them. A green check on a VM is a decorative lie.
- Walled private room, door closed. Not a café, lobby, or open office.
- Alone. No guests, no children, no pets — service dog only.
- Empty desk: no paper, no notes, no second devices.
- Nothing under the desk they can pick a fight with. They will ask you to move the bin.
- Light on your face. No bright window behind you. Stay in the camera frame.
- Wall décor is fine. Printouts and cheat-sheets on the wall are not. You will take them down.
- Dress as if someone is watching. Someone is, for two hours, and they record it.
- Physical, unexpired, government-issued, with photo. Not a photocopy, not a phone.
- First and last name must match the Linux Foundation checklist exactly — including script. If the ID is in Chinese, register in Chinese.
- Passport, driver’s license, national ID, green card, My Number Card. Signature required unless it is a biometric ID without one.
- Military IDs and credit cards are not accepted for online PSI.
- After you click Start My Test, the name is frozen.
- Ages 16–18: parental form two weeks ahead, student ID, guardian at check-in with their own ID.
-
01
Clear the machine
Reboot. Plug the laptop in. Close everything. Pause antivirus if you can. Mac: Bluetooth off. Extra cameras and mics unplugged.
-
02
Launch on time
Take Exam is live 30 minutes before the slot. Start within 30 minutes of the scheduled time or you are a no-show: no refund, no reschedule.
-
03
Install, then check-in
First time: download and install the Secure Browser. Accept the agreements. Photo of the ID, then a selfie.
-
04
Scan the room
360° of the walls, floor to ceiling, wrists and ears (and glasses), the desk including under the laptop. Show the phone, then put it behind you out of reach.
-
05
Wait, then sit
A check-in specialist should take you in under 15 minutes. Use live chat, not the US phone numbers, if you are not in the US. The proctor releases the exam after you accept the rules again.
-
06
End cleanly
End Exam, then End Session. Close the Secure Browser before you stand up. Walking off camera after you finished can still void the result.
If you disconnect, the two-hour clock keeps running. $445, and a Wi-Fi blip eats the remaining time. Wired if you can. Re-launch, check in again, no extra minutes.
- No talking — including to yourself, including reading a question aloud.
- Do not look off the screen. Do not cover your mouth. Stay in frame.
- Do not leave the chair without the proctor’s permission.
- No food, no gum. Water in a clear, unlabeled bottle or glass.
- No notes, no second device, no writing on paper. No watch, no smart glasses, no in-ear anything.
- Unplugging the camera ends the session immediately.
Muttering while you debug is how humans work. It is also how they pause you. Looking at the ceiling to think is a violation. Two hours of kubectl under a behavior policy written for multiple-choice.
Only from Firefox inside the exam VM. Not from your own machine. Search on kubernetes.io/docs is allowed; do not open hits that leave that site.
Bring this
- kubernetes.io/docs — and translations, though English is the one they keep current.
- kubernetes.io/blog
- helm.sh/docs
- Links in the task’s Quick Reference box
- man pages and /usr/share on the exam host
- Distro packages you install yourself
Leave this
- Gateway API docs — that is CKA, not CKAD
- Google, Stack Overflow, ChatGPT, personal notes, a second browser on your laptop
On each SSH host: kubectl (alias k) with bash completion, yq, curl, wget, man. sudo -i works. Nested SSH does not. Do not reboot the base node.
- Each task names an SSH host. Work there, then exit back to base.
- Terminal copy/paste: Ctrl+Shift+C / Ctrl+Shift+V. Firefox in the VM: Ctrl+C / Ctrl+V.
- Ctrl+W closes the PSI Chrome tab. Use Ctrl+Alt+W.
- The INSERT key is disabled “for security”. In vim, type i. This is not security. It is a remote desktop from 2014.
- Weird international keys: use the on-screen Virtual Keyboard icon.
- Zoom with +/− on the PSI toolbar. Drag the question panel. Maximize Firefox if the find bar is off-screen.
- Score email within 24 hours. Pass: PDF and badge, valid two years.
- Fail: one retake is included unless you bought a SINGLE voucher.
- Uninstall the Secure Browser. Next attempt should install clean.
- Renew by passing again before expiry. Two killer.sh simulator sessions come with the usual voucher (36 hours each).
KubeLab is not PSI. No webcam, no Secure Browser, a live cluster in the browser. One mock is free. The skill is kubectl. Their desktop is a one-day tax.
Can I use my work laptop?
Assume no. You need to install the Secure Browser and kill processes. Windows Enterprise and Education are unsupported. Use a personal machine.
Can I use two monitors?
No. One active monitor. Disable the rest. A laptop with the lid closed plus one external display is fine if the OS shows a single screen.
Will a Chromebook work?
Not for CKAD. PSI’s Chrome extension can run on ChromeOS; the CKAD sitting uses the Secure Browser, which Chromebooks do not get.
Do I need a second camera on my phone?
Linux Foundation CKAD docs describe one webcam and a room scan, not a phone filming you for two hours. PSI publishes a second-camera product for some exams. Follow the confirmation email if it asks for one.
Can I take a bathroom break?
Only with the proctor’s permission, and the clock does not stop. Plan to sit still for two hours.
Is there a prerequisite?
No. CKAD has no required prior cert. CKS is the one that needs CKA first.
What score do I need?
66% or above. About 15–20 weighted CLI tasks, two hours, Kubernetes 1.35. Results by email within 24 hours.