Summary
Keywords
Full Transcript
In this CKA practice scenario, we compare three Kubernetes NetworkPolicies and decide which one provides the least privilege while still allowing traffic from the frontend deployment to the backend deployment. GitHub Repo - https://github.com/vj2201/CKA-PREP-2025-v2.git You’ll learn: How to analyze ingress rules How podSelector + namespaceSelector work How to identify overly permissive policies Why NetworkPolicy-3 is the correct choice How to think like the CKA exam Policies reviewed: network-policy-1.yaml → allows ALL traffic (most permissive) network-policy-2.yaml → limits traffic, but includes a broad IPBlock network-policy-3.yaml → tightest scope using namespace + pod selectors Final Answer: ✔️ Deploy network-policy-3.yaml — the least privileged and most secure. If you found this useful, check out more CKA labs, YAML walkthroughs, and exam strategy videos on the channel. 💙 devops, cloud, aws, azure, gcp, kubernetes, k8s, cka, ckad, cks, devsecops, terraform, docker, cicd, github actions, argocd, helm, sre, cloud engineer, devops engineer, infrastructure as code, gitops, kubernetes tutorial, kubernetes exam, cka prep, kubectl, eks, aks, gke, monitoring, grafana, prometheus, observability, linux, cloud native, platform engineering
