NetworkPolicy: allow ingress from one app only
Restrict ingress to database pods so only client pods may reach them on a single TCP port.
Two nodes · ~9 min · 7 points
- networkpolicy
- ingress
- cilium
- networking
- security
goldenkube start cka-net-003
Exam-style tasks for the performance-based certifications, run on a real kubeadm cluster on your own Mac with the GoldenKube CLI and graded locally. Each card shows the task's domain, the cluster topology it needs, the recommended time and its points; the detail page has the full task text.
3 of 37 scenarios match · Clear filters
Restrict ingress to database pods so only client pods may reach them on a single TCP port.
Two nodes · ~9 min · 7 points
goldenkube start cka-net-003
Create an Ingress that routes a hostname and path prefix to an existing Service through the nginx IngressClass.
Two nodes · ~8 min · 7 points · Ingress
goldenkube start cka-net-004
Attach an HTTPRoute to an existing Gateway so a path prefix is routed to a Service.
Two nodes · ~9 min · 7 points · Gateway API
goldenkube start cka-net-005
goldenkube doctor.goldenkube login (free account).goldenkube submit.Grading happens on your machine and is practice feedback, not an official score. Tasks are public; hints, reference solutions and grader internals are not.