Linux Foundation Exam CKA Topic 3 Question 63 Discussion

Actual exam question for Linux Foundation's CKA exam

Question #: 63
Topic #: 3

Score: 7%

Task

Create a new NetworkPolicy named allow-port-from-namespace in the existing namespace echo. Ensure that the new NetworkPolicy allows Pods in namespace my-app to connect to port 9000 of Pods in namespace echo.

Further ensure that the new NetworkPolicy:

* does not allow access to Pods, which don't listen on port 9000

* does not allow access from Pods, which are not in namespace my-app

AExplanation:
Solution:
#network.yaml
apiVersion: networking.k8s.io/v1
kind: NetworkPolicy
metadata:
name: allow-port-from-namespace
namespace: internal
spec:
podSelector:
matchLabels: {
}
policyTypes:
- Ingress
ingress:
- from:
- podSelector: {
}
ports:
- protocol: TCP
port: 8080
#spec.podSelector namespace pod
kubectl create -f network.yaml

Show Suggested Answer

Suggested Answer: A

by Matt at Jun 19, 2024, 11:55 AM

Limited Time Offer

25%

Off

Get Premium CKA Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Vallie

6 months ago

I'm a bit concerned about the 'does not allow access from Pods, which are not in namespace my-app' part. Shouldn't we also specify the 'from' selector in the ingress rule?

upvoted 0 times

Lettie

4 months ago

Let's update the NetworkPolicy yaml file to include the 'from' selector for the ingress rule. That way, we can restrict access to only Pods in the my-app namespace.

upvoted 0 times

...

Merlyn

5 months ago

That makes sense. We need to ensure that only Pods from the my-app namespace can access port 9000 in the echo namespace.

upvoted 0 times

...

Tegan

5 months ago

Yes, you're right. We should add the 'from' selector in the ingress rule to specify Pods in the my-app namespace.

upvoted 0 times

...

Ariel

5 months ago

Agreed, let's update the ingress rule to include the 'from' selector for Pods in namespace my-app.

upvoted 0 times

...

Frank

5 months ago

That's a good point. We need to make sure only Pods from namespace my-app can access port 9000.

upvoted 0 times

...

Dick

5 months ago

Yes, you're right. We should add the 'from' selector in the ingress rule to specify Pods in namespace my-app.

upvoted 0 times

...

Ryan

7 months ago

I feel confident about this question, I have practiced similar tasks before.

upvoted 0 times

...

Sommer

7 months ago

Haha, the question says 'ensure that the new NetworkPolicy allows Pods in namespace my-app to connect to port 9000', but the solution is using port 8080. Someone needs to pay more attention to the details!

upvoted 0 times