doubt about a network policy question - could someone help me?

Kubernetes
#1

I answered this question, but I’m not sure if it’s correct, could someone help me?
create a new network policy named allow-port-from-namespace in the existing namespace fubar
ensure that the new networkpolicy allows pods in namespace internal to connect to port 9000 of pods in namespace fubar
futher ensure that the new networkpolicy

  • does not allow access to pods, which don’t listen on port 9000
  • does not allow access from pods, which are not in namespace internal
apiVersion: networking.k8s.io/v1
kind: NetworkPolicy
metadata:
  name: allow-port-from-namespace
  namespace: fubar
spec:
  podSelector: {}
  policyTypes:
    - Ingress
  ingress:
    - from:
        - namespaceSelector:
            matchLabels:
              kubernetes.io/metadata.name: internal
      ports:
        - protocol: TCP
          port: 9000
#2

anyone could help me ?

#3

Where did you get this question?

#5

Just noticed. This is not satisfying the above network policy.
Where is this pod deployed?

#6

This netpol doing the below work. If I am not wrong,

All the pods on the “fubar” namespace can receive traffic on port 9000 from all the pods of the namespace with the label “kubernetes.io/metadata.name: internal”.

1 Like
#7

I have been searching for the solution for this question but it seems no one answers it in the exam. Only 4%.