Study. uk . com
  1. Home
  2. All questions
  3. Question 792

CKA study material · question 792 of 1000

After a default-deny egress policy is applied to a namespace, its Pods can no longer resolve any names. What is missing?

  1. An ingress rule on the CoreDNS Pods
  2. A dnsConfig on each Pod
  3. An egress rule permitting traffic to the cluster DNS Service
  4. An ipBlock covering the Service CIDR
Show the answer

Answer: C. An egress rule permitting traffic to the cluster DNS Service

A default-deny egress policy blocks DNS along with everything else, so an explicit rule allowing egress to the cluster DNS Service has to be added or name resolution stops.

Source: Network Policies (Kubernetes) — Default policies › Default deny all egress traffic

Challenge yourself on this topic → Study as cards