Kubernetes - Networking
You want to restrict pods to only receive traffic from pods in the same namespace and send traffic only to a specific external IP range 192.168.1.0/24. Which NetworkPolicy configuration achieves this?
You want to restrict pods to only receive traffic from pods in the same namespace and send traffic only to a specific external IP range 192.168.1.0/24. Which NetworkPolicy configuration achieves this?
hard📝 Best Practice Q15 of 15
Step-by-Step Solution
Solution:
Step 1: Configure ingress to allow same-namespace pods
UsingpodSelector: {}allows traffic from all pods in the same namespace.Step 2: Configure egress to allow only specific external IP range
Egress usestowithipBlockfor 192.168.1.0/24 to restrict outgoing traffic.Final Answer:
ingress: - from: - podSelector: {} egress: - to: - ipBlock: cidr: 192.168.1.0/24 -> Option CQuick Check:
Ingress 'from' podSelector + Egress 'to' ipBlock [OK]
Quick Trick: Ingress uses 'from' podSelector; egress uses 'to' ipBlock [OK]
Common Mistakes:
- Using 'from' in egress rules
- Using namespaceSelector instead of podSelector for ingress
- Mixing 'to' and 'from' keywords incorrectly
Master "Networking" in Kubernetes
Want More Practice?
15+ quiz questions · All difficulty levels · Free
Free Signup - Practice All QuestionsMore Kubernetes Quizzes