Fix NetworkPolicy Pod Labels

In namespace network-demo, a frontend, backend, and database Pod are meant to communicate in a chain (frontend → backend → database), but the traffic is currently blocked.

Solve this on a real cluster — free → All CKAD tasks

🗓️ Free Task of the Week: one CKAD task is unlocked free for everyone every week — no card, real cluster, auto-graded (2 tries/week). Create a free account and check whether this one is live now.

The task

Task

In namespace network-demo, a frontend, backend, and database Pod are meant to communicate in a chain (frontend → backend → database), but the traffic is currently blocked.

Three NetworkPolicies are already in place and are correct — you must not change them. The issue is that the Pods' labels don't line up with what the policies select.

Goal

Inspect the NetworkPolicies to see which labels they expect, then relabel the Pods so the intended chain is allowed. Do not modify the NetworkPolicies.

Exam

CKAD

Domain

Services & Networking

Grading

Programmatic · partial credit

Reference

Kubernetes docs ↗

What this tests

Expose workloads with services and ingress, and restrict traffic with network policies. On the CKAD exam, Services & Networking tasks are graded purely on what you build in the cluster — not multiple choice — so the only way to get faster is to do them on a real cluster against a clock.

Practice it for real

prepium.sh drops you into your own isolated Kubernetes cluster in the browser — no install, no credit card. You solve the task in a real terminal, hit validate, and a programmatic checker scores exactly what you got right and wrong (with partial credit). The canonical solution unlocks after you attempt it, so you learn the fast, exam-ready way to do it.

Start free → CKAD overview