Study. uk . com
  1. Home
  2. All questions
  3. Question 882

CKA study material · question 882 of 1000

A Service is configured correctly and its Pods are healthy, but only some clients can reach it. What should be ruled out before deep proxy debugging?

  1. A NetworkPolicy selecting the backing Pods
  2. An expired serving certificate on the API server
  3. A stale entry in the node's ARP cache
  4. A missing PodDisruptionBudget
Show the answer

Answer: A. A NetworkPolicy selecting the backing Pods

An ingress policy on the backend Pods can make a perfectly configured Service unreachable from some sources, so policies are checked before the proxy layer.

Source: Debug Services (Kubernetes) — Any Network Policy Ingress rules affecting the target Pods?

Challenge yourself on this topic → Study as cards