Certified Kubernetes Security Specialist Challenge Series

Kubernetes
#21

Hi @philipsmit

Seems you missed the first line of the yaml…

apiVersion: networking.k8s.io/v1

Without that you should have received this and the policy not created

error: error validating "netpol.yaml": error validating data: apiVersion not set; if you choose to ignore these errors, turn validation off with --validate=false

Upon adding the api version and applying, the answer is marked correct

image
image886×805 46 KB

#22

Thanks. This might have just been a copy and paste error. the network policy object was created successfully, however marked incorrect…
I’ll try it again, and report back. Thanks again

#23

yes, the following is marked as incorrect

apiVersion: networking.k8s.io/v1
kind: NetworkPolicy
metadata:
  name: prod-netpol
  namespace: prod
spec:
  podSelector: {}
  policyTypes:
    - Ingress
  ingress:
    - from:
        - namespaceSelector:
            matchLabels:
              kubernetes.io/metadata.name: prod

kk-netpol

any ideas?

#24

Well that is odd. I just put in exactly what you have provided above, and I get green for prod-netpol

#25

CKS 1
CKS 11889×917 108 KB

All the individual tasks are passed but challenge is failed. Question says to expose NodePort service and inside the service specification, it is mentioned ClusterIP. All green but task not complete!!! Tried both services ClusterIP and NodePort.

#26

Hi @serinsusansunny

Click on the red arrow. It may reveal an additional task.

#27

Yes. Sorry, my bad. Forgot the apparmor addition.