In CKAD Mock exam 6, question no: 12, there is a question related to network policy. In the second part of the question
“frontend-ckad-svcn” is not accessible from backend pods
In this, the current network policy itself has egress and it is going to the to pods where label matching with frontend, in this scenario itself from backend pods, i can trigger frontend-ckad-svcn right?
Why i have to allow all the to criteria of the network policy to access the frontend-ckad-svcn from backend pods?
This i am asking for my understanding, can someone help me to clarify this ?
In a normal scenario, you would indeed access a backend from a frontend rather than the other way round.
In this case the question says to do something, so if you do what the question asks correctly, it will be passed.
The question was to allow the frontend-ckad-svcn to access from backend pod but the solution given was allowing all the pods to access from backend-pod. Is this right solution? Or Is there any better solution for this?
Hey! I am also stuck on this ques. Did you ever find correct soln?