EX280 — what the OpenShift administrator exam actually tests

EX280 earns you Red Hat Certified System Administrator in OpenShift. Note the name: it isn’t “OpenShift Administrator”, and the distinction matters when you write it on a CV or a tender response.

The current exam is based on Red Hat OpenShift Container Platform 4.18. Versions and curricula move, so confirm the objectives on Red Hat’s own exam page before booking.

A live cluster, not a question paper

The exam is performance-based. You’re given a live environment and a list of tasks, and you’re graded on whether the resulting cluster state meets objective criteria. No multiple choice, no essays, and no partial credit for describing what you would have done.

That changes how you prepare. Reading is close to worthless past the first pass. What you need is a cluster you can break.

The nine objectives

Red Hat publishes these:

• Manage OpenShift Container Platform
• Work with resource manifests
• Deploy applications
• Manage authentication and authorization
• Configure network security
• Expose non-HTTP/SNI applications
• Enable developer self-service
• Manage OpenShift operators
• Configure application security

What people underestimate

“Expose non-HTTP/SNI applications.” Almost everyone practises HTTP routes until they can do them asleep, then meets this objective for the first time in the exam. Routes are the easy case. Getting a plain TCP service reachable from outside the cluster is a different mechanism, and if you’ve never configured it you’ll lose the time you were counting on for something else.

Operators. Managing operators means more than installing one from OperatorHub. Know how subscriptions, install plans and channels relate, and what happens when an install plan needs manual approval, because a stuck install plan looks exactly like a broken operator until you know where to look.

Authentication. Configuring an identity provider end to end, with users who resolve and role bindings that apply, is fiddly under time pressure. It also cascades: get it wrong early and several later tasks fail for reasons that look unrelated.

Time. Nearly everyone who fails had the knowledge and ran out of clock. Practise against a timer, not against a tutorial.

Who Red Hat has in mind

Red Hat names system and software architects, system administrators, cluster operators, site reliability engineers, and DevOps professionals.

Recommended preparation is DO180 (OpenShift Administration I: Operating a Production Cluster) then DO280 (OpenShift Administration II: Configuring a Production Cluster). Red Hat System Administration I (RH124) or comparable experience is listed as a prerequisite, and RHCSA is strongly recommended but not required.

Our read on RHCSA: skip it only if you’re already fluent on Linux. The exam won’t test you on systemd directly, but every minute spent fighting the operating system is a minute not spent on OpenShift.

Where the scope stops

EX280 doesn’t test cluster installation, upgrades, etcd operations, backup and restore, or multicluster anything. It’s scoped to operating a cluster that already exists.

That’s the correct scope for an entry-level exam, but be clear-eyed about what it buys you. Passing EX280 doesn’t make you the person who owns the platform. It makes you someone who can competently work inside one. Ownership starts at the next rung, EX380.

Preparing without a budget

You don’t need a Red Hat subscription to practise most of this. CodeReady Containers or a single-node OpenShift install covers the majority of the objectives, and the parts it won’t cover (some networking, some operator behaviour) are worth knowing you’ve missed rather than assuming you’ve got.

If your laptop won’t carry a local cluster, CertLabs runs OpenShift lessons in a browser terminal with no local setup at all. It’s our own platform, and it’s preparation material rather than anything official from Red Hat.

Build the cluster. Break authentication. Fix it. Break it differently. That loop is the exam.