In this video, we will explore Kubernetes NetworkPolicy.
Sample Exam Question:
In the default namespace, we have created 2 deployments frontend and backend. Both deployments are exposed using ClusterIP Services.
Create a NetworkPolicy named fe-netpol to restrict outgoing TCP connections from frontend deployment and only allow those going to backend deployment.
Note: Make sure the Policy allows outgoing traffic on TCP/UDP ports 53 for DNS resolution.
In our case, we will setup deployment, services from scratch on a local 3 node Kubernetes cluster that I setup using KubeAdm. Then we will test the services are working. We will also test that frontend pod is able to connect to backend-service and outside world (like curl google.com)
After we apply Egress Network Policy, the frontend pods should still be able to connect to backend service, but can not curl google.com. Our NetworkPolicy successfully restricted the outbound connections from the POD.
#kubernetes #cka #ckad
21 окт 2024
