StudyToCert

All certifications / CKA / Lessons

Certified Kubernetes Administrator CKA (Kubernetes v1.35 curriculum) · Domain 3: Services and Networking

NetworkPolicies: default deny, ingress and egress rules, podSelector, namespaceSelector (kubernetes.io/metadata.name), ipBlock, ports

▶ Watch the overview video

Last reviewed September 25, 2026 · Leer en español

By default, every Pod can talk to every other Pod. NetworkPolicies let you restrict that, like a firewall defined with labels. They are enforced by the CNI plugin, so a plugin without policy support (plain Flannel, for example) silently ignores them.

Free account

Keep reading for free

Create a free StudyToCert account to read the rest of this lesson: 7 more sections, 4 key terms, a real-world example, an exam tip and self-check questions. Every lesson, lab and practice test is free with an account.

Sign up free Log in

Study CKA for free
A week-by-week plan with every lesson, quizzes, checkpoint tests, a practice exam and hands-on labs.
Open the CKA study plan