Skip to main content

11. Ingress, NetworkPolicies & DNS

HTTP routing with Ingress, default-deny NetworkPolicies, CoreDNS.

⏱ ≈ 30 min this module · 📚 ≈ 6.9 h full track

🔒 Unlock this course to read the material and run the labs.

See options to unlock →
🔒 The written material unlocks with the course.
🧪 Hands-on lab Hard · 190 XP · 30min

Goal

Lock down a namespace so only labelled clients can reach its Pods.

Requirements (your default namespace, lab)

  • A default-deny ingress NetworkPolicy deny-all (empty podSelector, policyTypes: [Ingress])
  • A NetworkPolicy allow-frontend that permits ingress only from Pods labelled role=frontend

The judge asserts both policies exist and are shaped correctly.

🔒 Unlock the course to run this lab.

← Lab: expose a Deployment with a Service Storage: Volumes, PV, PVC & StorageClasses →