Linux Foundation Exam CKAD Topic 10 Question 36 Discussion

Actual exam question for Linux Foundation's CKAD exam

Question #: 36
Topic #: 10

[All CKAD Questions]

Refer to Exhibit.

Set Configuration Context:

[student@node-1] $ | kubectl

Config use-context k8s

Task

You have rolled out a new pod to your infrastructure and now you need to allow it to communicate with the web and storage pods but nothing else. Given the running pod kdsn00201 -newpod edit it to use a network policy that will allow it to send and receive traffic only to and from the web and storage pods.

AExplanation:
To allow a pod to send and receive traffic only to and from specific pods, you can use network policies in Kubernetes.
First, you will need to create a network policy that defines the allowed traffic. You can create a network policy yaml file with the following rules:
apiVersion: networking.k8s.io/v1
kind: NetworkPolicy
metadata:
name: newpod-network-policy
namespace: default
spec:
podSelector:
matchLabels:
app: kdsn00201-newpod
ingress:
- from:
- podSelector:
matchLabels:
app: web
- podSelector:
matchLabels:
app: storage
This policy will only allow incoming traffic to the pod with the label app=kdsn00201-newpod from pods with the label app=web or app=storage. If you have different labels on your web and storage pods please update the matchLabels accordingly.
Once you have created the network policy, you can apply it to the cluster by running the following command:
kubectl apply -f <network-policy-file>.yaml
This will apply the network policy to the cluster, and the newpod will only be able to send and receive traffic to and from the web and storage pods.
Please note that, NetworkPolicy resource is not available by default, you need to enable the NetworkPolicy feature on your Kubernetes cluster. This feature is enabled by default on some clusters and must be explicitly enabled on others. You can check if NetworkPolicy is available by running the command kubectl api-versions | grep networking
Also, you need to ensure that the pods that you want to allow traffic to and from are running on the same namespace.

Show Suggested Answer

Suggested Answer: A

by Geoffrey at Apr 14, 2024, 11:55 PM

Limited Time Offer

25%

Off

Get Premium CKAD Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Dewitt

1 months ago

Ah, the joys of Kubernetes networking. I'm glad they're testing this, as it's a critical skill for working with Kubernetes in the real world. Time to put my network policy knowledge to the test!

upvoted 0 times

Larae

9 days ago

Don't forget to enable the NetworkPolicy feature on your Kubernetes cluster before applying the network policy.

upvoted 0 times

...

Sylvie

21 days ago

Creating a network policy yaml file with the correct rules will help restrict traffic to specific pods.

upvoted 0 times

...

Maryln

26 days ago

I agree, understanding network policies in Kubernetes is essential for managing communication between pods.

upvoted 0 times

...

Juan

1 months ago

Haha, I bet the exam writers had fun coming up with this one. Gotta love the subtle humor in the 'kdsn00201-newpod' pod name. Anyway, I'm confident I can nail this network policy question.

upvoted 0 times

...

Dorothy

2 months ago

So, we should define the rules in the network policy yaml file and apply it to the cluster to restrict the pod's communication.

upvoted 0 times

...

Jerry

2 months ago

Hmm, I think I got this. The key is to create a network policy that allows the new pod to communicate with the web and storage pods, but nothing else. I'll make sure to double-check the label matching in the policy.

upvoted 0 times

Becky

6 days ago

Remember to enable the NetworkPolicy feature on your Kubernetes cluster if it's not available by default.

upvoted 0 times

...

Willard

20 days ago

User 2: Yes, make sure the labels in the policy match the labels of the web and storage pods correctly.

upvoted 0 times

...

Lauran

22 days ago

Apply the network policy to the cluster using the kubectl apply command.

upvoted 0 times

...

Tonette

23 days ago

Check the label matching in the policy to ensure it only communicates with the web and storage pods.

upvoted 0 times

...

Ronnie

28 days ago

Make sure to create a network policy that specifies the allowed traffic for the new pod.

upvoted 0 times

...

Belen

1 months ago

User 1: I understand, we need to create a network policy for the new pod to communicate only with web and storage pods.

upvoted 0 times

...

Eva

2 months ago

Wow, this is a great question! The network policy concept is really important to understand for securing Kubernetes environments. I like how the question provides the necessary context and images to guide the answer.

upvoted 0 times

...

Latosha

2 months ago

Yes, we need to create a network policy that allows traffic only to and from the web and storage pods.

upvoted 0 times

...

Dorothy

2 months ago

I think the question is about setting up a network policy for a new pod to communicate only with specific pods.

upvoted 0 times

...