28 - CKA exam Q28 with Solution... Kubernetes Network Policy explained

CKA exam Q28
We have deployed a pod called web-pod (where port 80 was exposed using service web-pod). Incoming connections (from a pod apicheck) to web-pod service are not working.
Identify and make certain changes on pod apicheck (re-deploy is needed) so that it can access web-pod.
Note: A NetworkPolicy named api-allow was also created as part of the deployment.
Run following commands to create exam like environment:
echo 'kind: NetworkPolicy
apiVersion: networking.k8s.io/v1
metadata:
name: api-allow
spec:
podSelector:
matchLabels:
app: bookstore
role: api
ingress:
from:
podSelector:
matchLabels:
app: bookstore' |tee api-allow.yaml
g apply -f api-allow.yaml
g run web-pod --image nginx --labels app=bookstore,role=api --expose --port 80
g run apicheck --image alpine --labels role=api --command sleep 4800

It's an easy 1: It's an easy 1:
#kubenetes #CKA #DevOps #security #2022 #k8sgoogle
SOLUTION 25
alias g=kubectl
g get netpol
g describe netpol api-allow
g get pods --show-labels
g get svc
g exec -it apicheck -- wget web-pod
g get pods
g edit pod apicheck
g get pods --show-labels
g exec -it apicheck -- wget web-pod