Hints: networkpolicy-block¶
Hint 1¶
Traffic between pods is being blocked. Check for NetworkPolicies:
- kubectl get networkpolicy -n grokdevops
Hint 2¶
A NetworkPolicy is restricting traffic. Check its rules:
- kubectl describe networkpolicy -n grokdevops
- Is there a default-deny policy? What ingress/egress rules exist?
Hint 3¶
Check if pod labels match the policy's allowed selectors:
- kubectl get pods -n grokdevops --show-labels
- Compare with the NetworkPolicy's spec.ingress[].from[].podSelector
- Also check if egress to DNS (port 53) is allowed
Hint 4¶
Fix: either remove the restrictive policy, add the correct labels to allow traffic, or add an egress rule for DNS. The chaos script toggle_networkpolicy.sh has a built-in restore.