Lab 6.6 - Question 3

adzee95

Question 3 of Lab 6.6 asks: Create a new NetworkPolicy called netblock which blocks all traffic to pods in this deployment only. Test that all traffic is blocked to deployment.

However, no matter what I do, external traffic is always allowed - And this makes sense to me, since I understood that NetworkPolicy resource doesn't involve external traffic. What does the question want then? Test that all traffic from within the cluster to the deployment is blocked, but external connections are still possible? I can achieve this easily using the taught material. However, blocking external traffic on an ingress networkpolicy doesn't seem possible.

How did you guys solve this?