Becoming Estonia's first Kubestronaut

A while back I became the first CNCF Kubestronaut in Estonia. The jacket is nice, but the reason I went after it is more practical: the program is a genuinely good map of what it takes to run Kubernetes well, end to end.

What is a Kubestronaut?

The Kubestronaut program is the CNCF’s recognition for anyone who holds all five of its Kubernetes certifications at the same time:

• KCNA — Kubernetes and Cloud Native Associate (the foundations)
• KCSA — Kubernetes and Cloud Native Security Associate
• CKA — Certified Kubernetes Administrator (running clusters)
• CKAD — Certified Kubernetes Application Developer (shipping workloads)
• CKS — Certified Kubernetes Security Specialist (hardening them)

The administrator and security exams are hands-on: you’re dropped into a real cluster with a list of tasks and a clock. There’s nowhere to hide behind multiple-choice answers — you either know how to do the thing or you don’t.

Why bother with all five?

Plenty of people are great at one slice of Kubernetes. The value of doing the full set is that it forces you across the whole surface — from a developer’s view of a Pod, to an operator’s view of etcd and upgrades, to a security specialist’s view of admission control and supply-chain risk.

For the work I do — building and operating platforms for other teams — that breadth matters. When I’m advising on a cluster, the security questions and the day-two operations questions and the developer-experience questions all show up in the same conversation. Having worked through each domain deliberately means I’m not guessing.

Is it worth it for you?

If you operate Kubernetes seriously, I’d say yes — not for the badge, but because preparing properly closes the gaps you didn’t know you had. Start with KCNA to frame the landscape, then pick the path (admin, developer, or security) closest to your day job and go deep.

And if you’d rather have someone who’s already been through it help you build the platform? That’s what I do.