Every pod can talk to every pod. Even web to your database.
You'll learn to
explain default allow-all and ingress/egress rules
Recap
- 1A NetworkPolicy selects pods by labels and allows traffic
- 2Selected for ingress = only what's listed gets in
- 3Your CNI must enforce it (Calico, Cilium; not basic flannel)
Check yourself
A policy selects the database pod for ingress and allows only the API. Traffic from web?
6.17
Stamp this lesson
Watched it and passed the check? Mark it in your logbook.