CKAD-exercises VS kubernetes-network-policy-recipes

Practical exercises https://github.com/dgkanatsios/CKAD-exercises nice list of things you can do on your own, but you need to setup local environment. Minikube seems to be easiest. Note: don’t fall into ‘fancy’ solutions, there are multiple ways of doing something in kubectl/bash/yaml, but you should stick to way you feel comfortable with.

I took the LFS259 class and have been going through these exercises https://github.com/dgkanatsios/CKAD-exercises

https://github.com/dgkanatsios/CKAD-exercises but I did half of them in the https://killercoda.com/kimwuestkamp/scenario/cks-cka-ckad-remote-desktop just so I could get used to the exam environment

You saved my day today. On https://github.com/dgkanatsios/CKAD-exercises I spin pods and deploys and all in an eye-blink, and on killer.sh I didn't know how to start at each question.

Went thru all these exercises twice with my personal ubuntu desktop server: https://github.com/dgkanatsios/CKAD-exercises

Further reading: Controlling Access to Kubernetes API What is TLS Configure Service Accounts Dynamic Admission Control Network Policy Recipes

See: https://github.com/ahmetb/kubernetes-network-policy-recipes/blob/master/04-deny-traffic-from-other-namespaces.md for an example of what you are looking to do.

This is not great for multi-tenancy, but you can correct this with NetworkPolicies.

🔗 https://github.com/ahmetb/kubernetes-network-policy-recipes

I'd recommend using this collection of network policy recipes to test out these 2 tools and see how they can be helpful to your workflow.

Here's an example policy I've tried. https://github.com/ahmetb/kubernetes-network-policy-recipes/blob/master/03-deny-all-non-whitelisted-traffic-in-the-namespace.md

The Network Policies recipes here: https://github.com/ahmetb/kubernetes-network-policy-recipes -- Do not under any circumstances overlook this goldmine of network policy examples. Super important.

Good to learn more in Kubernetes network policy for CKx exams and EKS. Below are resources: 1/ read official doc and try to understand them well - https://kubernetes.io/docs/concepts/services-networking/network-policies/ 2/ bookmark samples for exams and EKS setups - https://kubernetes.io/docs/concepts/services-networking/network-policies/#networkpolicy-resource 3/ do more practices at https://github.com/ahmetb/kubernetes-network-policy-recipes 4/ visualize (image below) and try more at https://editor.cilium.io/ - it allows you to save the final netpol in k8s netpol OR Cilium netpol (EKS-A is using Cilium !)