Linux Foundation Exam CKA Topic 3 Question 63 Discussion

Actual exam question for Linux Foundation's CKA exam

Question #: 63
Topic #: 3

[All CKA Questions]

Score: 7%

Task

Create a new NetworkPolicy named allow-port-from-namespace in the existing namespace echo. Ensure that the new NetworkPolicy allows Pods in namespace my-app to connect to port 9000 of Pods in namespace echo.

Further ensure that the new NetworkPolicy:

* does not allow access to Pods, which don't listen on port 9000

* does not allow access from Pods, which are not in namespace my-app

AExplanation:
Solution:
#network.yaml
apiVersion: networking.k8s.io/v1
kind: NetworkPolicy
metadata:
name: allow-port-from-namespace
namespace: internal
spec:
podSelector:
matchLabels: {
}
policyTypes:
- Ingress
ingress:
- from:
- podSelector: {
}
ports:
- protocol: TCP
port: 8080
#spec.podSelector namespace pod
kubectl create -f network.yaml

Show Suggested Answer

Suggested Answer: A

by Matt at Jun 19, 2024, 12:55 PM

Limited Time Offer

25%

Off

Get Premium CKA Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Vallie

1 years ago

I'm a bit concerned about the 'does not allow access from Pods, which are not in namespace my-app' part. Shouldn't we also specify the 'from' selector in the ingress rule?

upvoted 0 times

Lettie

12 months ago

Let's update the NetworkPolicy yaml file to include the 'from' selector for the ingress rule. That way, we can restrict access to only Pods in the my-app namespace.

upvoted 0 times

...

Merlyn

1 years ago

That makes sense. We need to ensure that only Pods from the my-app namespace can access port 9000 in the echo namespace.

upvoted 0 times

...

Tegan

1 years ago

Yes, you're right. We should add the 'from' selector in the ingress rule to specify Pods in the my-app namespace.

upvoted 0 times

...

Ariel

1 years ago

Agreed, let's update the ingress rule to include the 'from' selector for Pods in namespace my-app.

upvoted 0 times

...

Frank

1 years ago

That's a good point. We need to make sure only Pods from namespace my-app can access port 9000.

upvoted 0 times

...

Dick

1 years ago

Yes, you're right. We should add the 'from' selector in the ingress rule to specify Pods in namespace my-app.

upvoted 0 times

...

Ryan

1 years ago

I feel confident about this question, I have practiced similar tasks before.

upvoted 0 times

...

Sommer

1 years ago

Haha, the question says 'ensure that the new NetworkPolicy allows Pods in namespace my-app to connect to port 9000', but the solution is using port 8080. Someone needs to pay more attention to the details!

upvoted 0 times