Section 7: Security (35-40)

What's a rule when deploying applications in Kubernetes?

• Pods should be able to communicate with each other

• 1. Applications must run on dedicated nodes

• Only stateless applications can be deployed

• 1. Manual scaling is required for all applications

Kubernetes is configured by default with _____________ rules that allow any Pods to communicate with any other Pods or services in the cluster.

• Allow all

• Allow any

• All Allow

• Any allow

__________________ in Kubernetes controls pod communication by specifying allowed or denied traffic between pods, namespaces, and external endpoints.

• Pod policy

• Network rules

• FW Rules

• Pod rules

• Network policy

We use ____________ and ____________ to link a network policy with a Pod.

• podName parameter

• labels

• selectors

• netPolicyName parameter

• ruleName

What 3 fields are set under the "spec" field in a Network Policy definition file

• podSelector

• ruleName

• policyTypes

• ingress/egress

• netPolicyName

Under this field, we use "matchLabels" to specify the label of the Pod where we want to apply the network policy.

What of the fields of a Network Policy definition file does the above statement refer to?

• podSelector

• ruleName

• policyTypes

• ingress

• netPolicyName

Here we specify if the traffic is of the type ingress or egress.

What of the fields of a Network Policy definition file does the above statement refer to?

• podSelector

• ruleName

• policyTypes

• ingress

• netPolicyName

Here we specify the label of the other Pod from where the connections is coming or going, depending on the policyType.

What of the fields of a Network Policy definition file does the above statement refer to?

• podSelector

• ruleName

• policyTypes

• - From

• netPolicyName

Here we specify the protocol and port where we want to allow the connections in the Pod where this network policy will be applied.

What of the fields of a Network Policy definition file does the above statement refer to?

• podSelector

• protocol

• policyTypes

• ingress

• ports

Analize the attached Network Policy definition file. What parameters would you add to allow traffic coming from a backup server with the IP address 192.168.5.10?

• - ipRange

• • - ipBlock

• - ipAddress

• ip: 192.168.5.10/32

• cidr: 192.168.5.10/32