What the Certified Cloud Native Platform Engineer curriculum covers and what to focus on to avoid wasting time
Platform engineering has become the connective tissue of cloud native organizations – the discipline that turns Kubernetes from “infrastructure the ops team runs” into “a product developers self-serve.” The CNCF’s new Certified Cloud Native Platform Engineer (CNPE) certification is the first credential that formally validates those skills and, like most CNCF exams, it’s dense: five broad domains, each assuming real hands-on fluency.
If you’re planning to sit the exam, here’s what’s actually in scope and where most candidates underestimate the work.
1. Platform Architecture and Infrastructure (15%)
This isn’t just about knowing Kubernetes networking. You need an understanding of how to design for multi-tenancy, right-size compute/storage/network resources at scale, and build cost visibility into the platform itself. This is a domain a lot of infra-focused engineers might skip past because it sits closer to FinOps than to YAML.
2. GitOps and Continuous Delivery (25%)
Building and securing GitOps-driven deployment pipelines end to end and not just “I’ve used ArgoCD once.” You should know how to configure, execute, and debug with progressive delivery strategies (e.g., Blue/Green or Canary) in mind. Expect to be tested on pipeline security as well as pipeline mechanics.
3. Platform APIs and Self-Service Capabilities (25%)
Custom resource definitions (CRDs) and Kubernetes Operators used to expose self-service capabilities through platform APIs. This is where “I can write a Deployment manifest” stops being enough because you need to understand how platforms expose infrastructure as an API surface.
4. Observability and Operations (20%)
Monitoring, logging, tracing, and alerts aren’t separate checkboxes here. The exam expects you to connect them to actual incident diagnosis and platform efficiency metrics, plus secure service-to-service communication (mTLS, service mesh concepts).
5. Security and Policy Enforcement (15%)
RBAC across platform resources, policy engines (OPA/Kyverno-style), and admission controllers. This domain rewards people who’ve actually locked down a cluster, so you need to do more than just reading about RBAC roles.
How long should you budget?
If you’re coming in with solid Linux, container, and Kubernetes fundamentals already, reading the docs over a few weekends might lead you to underestimate domains 3 and 5 specifically. The CRD/Operator and policy-engine material is where self-study candidates can lose the most time.
That’s the gap our 5-day CNPE Boot Camp is built to close: every domain covered through lecture, live demo, and hands-on labs, followed by dedicated exam drills test prep before you sit the certification (voucher included).
We have a few public sessions coming up and only a few more students needed for Barcelona, Nov 30 – Dec 4, 2026! Register with the link below:
👉 Certified Cloud Native Platform Engineer (CNPE) Boot Camp with Exam