StudyToCert

All certifications / CKAD / Lessons

Certified Kubernetes Application Developer CKAD (Kubernetes v1.35 curriculum) · Domain 5: Services and Networking

NetworkPolicy basics: podSelector, policyTypes, ingress and egress rules, default deny

▶ Watch the overview video

Last reviewed September 25, 2026 · Leer en español

By default, every Pod in a Kubernetes cluster can talk to every other Pod, in every namespace. That makes things easy but means a single compromised Pod can reach databases and internal APIs it has no business touching. A NetworkPolicy is a namespaced object that restricts which traffic is allowed to and from selected Pods, acting like a firewall defined by labels.

Free account

Keep reading for free

Create a free StudyToCert account to read the rest of this lesson: 6 more sections, 5 key terms, a real-world example, an exam tip and self-check questions. Every lesson, lab and practice test is free with an account.

Sign up free Log in

Study CKAD for free
A week-by-week plan with every lesson, quizzes, checkpoint tests, a practice exam and hands-on labs.
Open the CKAD study plan