[Solved] What will be the effect of this NetworkPolicy snippet?spec: podSelector: {} egress: - to: - ipBlock: cidr: 10.0.0.0/24 except: - 10.0.0.5/32 | Kubernetes

Kubernetes - Networking

What will be the effect of this NetworkPolicy snippet?

spec:
  podSelector: {}
  egress:
  - to:
    - ipBlock:
        cidr: 10.0.0.0/24
        except:
        - 10.0.0.5/32

APods can send traffic to any IP including 10.0.0.5

BPods can send traffic only to IPs in 10.0.0.0/24 except 10.0.0.5

CPods cannot send traffic to any IP

DPods can send traffic only to 10.0.0.5

Step-by-Step Solution

Solution:

Step 1: Understand podSelector and egress
podSelector: {} selects all pods; egress limits traffic to IPs in 10.0.0.0/24 except 10.0.0.5.
Step 2: Interpret ipBlock with except
Pods can send traffic to the subnet except the excluded IP 10.0.0.5.
Final Answer:
Pods can send traffic only to IPs in 10.0.0.0/24 except 10.0.0.5 -> Option B
Quick Check:
Egress IP block with except excludes IP = A [OK]

Quick Trick: ipBlock except excludes specific IPs from allowed range [OK]

Common Mistakes:

Master "Networking" in Kubernetes

9 interactive learning modes - each teaches the same concept differently

More Kubernetes Quizzes

What will be the effect of this NetworkPolicy snippet?