MENU
Task
Create a NetworkPolicy named pod-access to restrict access to Pod users-service running in namespace dev-team.
Only allow the following Pods to connect to Pod users-service:
Suggested Answer: A
Get Premium CKS Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
32 comments · newest first
VE
Vernice
11 months ago
Yeah, but isn't it a bit overkill for a small team?
TY
Tyra
11 months ago
I think we also need to consider egress rules too.
DA
Daniel
12 months ago
Wait, can we really restrict access like that? Sounds tricky.
SU
Suzi
12 months ago
Totally agree, it's essential for security!
MA
Maddie
1 year ago
Just need to specify the podSelector in the NetworkPolicy.
SH
Shaun
1 year ago
I think we should use the `podSelector` to restrict access, but I can't recall if we need to include any specific ports or protocols.
BE
Bernardo
1 year ago
I feel like I might confuse the namespace settings. Do we need to specify the namespace in the NetworkPolicy?
RE
Renea
1 year ago
I remember practicing a similar question where we had to set up ingress rules. I hope this one is just as straightforward!
LA
Lai
1 year ago
I think we need to define the pod selector correctly to match the allowed Pods, but I'm not entirely sure about the syntax.
TA
Tawanna
1 year ago
Hmm, this seems straightforward. I'd go with HttpSession objects and a database to store the cart items.
BI
Billye
1 year ago
Analytics Builder could be a good choice, but I'm not as familiar with that tool. I'll need to review the capabilities of option C to see if it fits the requirements.
CA
Carri
2 years ago
This is a piece of cake. I'll just copy the YAML from the images and call it a day.
BE
Bettyann
2 years ago
Ha! I bet the correct answer is the one with the most options. That's usually how these exams work.
AL
Alba
1 year ago
User 3: Let's go with that then.
WH
Whitney
1 year ago
User 2: Yeah, that's a common strategy in exams.
RI
Rickie
1 year ago
User 1: I think the correct answer is the one with the most options.
AL
Alease
2 years ago
Wait, do I have to specify the namespace for the allowed Pods? That's not very clear in the question.
BO
Bobbie
1 year ago
Once you set up the NetworkPolicy with the correct namespaceSelector, only the specified Pods will be able to connect to users-service.
FR
Franklyn
1 year ago
Make sure to define the namespace in the 'namespaceSelector' to restrict access to the Pod users-service in the dev-team namespace.
CR
Cristina
1 year ago
You can use the 'namespaceSelector' field in the NetworkPolicy to specify the namespace.
RO
Romana
1 year ago
Yes, you need to specify the namespace for the allowed Pods.
JE
Jerrod
1 year ago
That's the right approach to restrict access to the Pod users-service in the dev-team namespace.
CU
Curt
1 year ago
Got it, I will make sure to include the 'namespaceSelector' field in the NetworkPolicy.
RO
Rodney
1 year ago
The NetworkPolicy should restrict access to the users-service Pod only for the specified Pods in the same namespace.
KA
Karan
1 year ago
You can use the 'namespaceSelector' field in the NetworkPolicy to specify the namespace.
GI
Gilbert
1 year ago
Yes, you need to specify the namespace for the allowed Pods.
WE
Wei
1 year ago
Make sure to define the NetworkPolicy with the correct namespace for the allowed Pods to connect to users-service.
EL
Elena
1 year ago
Yes, you need to specify the namespace for the allowed Pods. It should be in the same namespace as the users-service Pod.
CO
Cordelia
2 years ago
Okay, this looks straightforward. The NetworkPolicy should only allow the specified Pods to connect to the users-service.
CH
Chana
2 years ago
I believe using labels and selectors is key to restricting access.
JO
Joaquin
2 years ago
I agree, setting up NetworkPolicy can be tricky.
LA
Lashanda
2 years ago
I think the task is challenging.