Allow traffic from all the pods in "web" namespace and from pods
with label "type=monitoring" to the pods matching label "app: db"

• A.kubectl create namespace web
  kubectl label namespace/web app=web
  vim web-allow-all-ns-monitoring.yaml
  apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
  name: web-allow-all-ns-monitoring
  namespace: default
  spec:
  podSelector:
  podSelector:
  matchLabels:
  type: monitoring
  k kubectl apply -f web-allow-all-ns-monitoring.yaml
• B.kubectl create namespace web
  kubectl label namespace/web app=web
  vim web-allow-all-ns-monitoring.yaml
  apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
  name: web-allow-all-ns-monitoring
  namespace: default
  spec:
  podSelector:
  matchLabels:
  app: db
  ingress:
  - from:
  - namespaceSelector:
  matchLabels:
  app: web
  podSelector:
  matchLabels:
  type: monitoring
  k kubectl apply -f web-allow-all-ns-monitoring.yaml

Comment: *

Name: *

Email: *

Verification: *

Perform the following tasks:
* Add an init container to hungry-bear (which has been defined in spec file
/opt/KUCC00108/pod-spec-KUCC00108.yaml)
* The init container should create an empty file named/workdir/calm.txt
* If /workdir/calm.txt is not detected, the pod should exit

Correct Answer:

* Once the spec file has been updated with the init container definition, the pod should be created See the solution below.
Explanation
solution

Comment: *

Name: *

Email: *

Verification: *

Create a Kubernetes secret asfollows:
* Name: super-secret
* password: bob
Create a pod namedpod-secrets-via-file Image, which mounts a secret namedsuper-secretat
/secrets.
Create a second pod namedpod-secrets-via-env Image, which exportspasswordas CONFIDENTIAL

Correct Answer:

See the solution below.
Explanation
solution

Comment: *

Name: *

Email: *

Verification: *

Add a taint to node "worker-2" with effect as "NoSchedule" and
list the node with taint effect as "NoSchedule"

• A.// Add taint to node "worker-2"
  kubectl taint nodes worker-2 key=value:NoSchedule
  .items[*]}{.metadata.name} {.spec.taints[?(
  @.effect=='NoSchedule' )].effect}{\"\n\"}{end}" | awk 'NF==2
  {print $0}'
• B.// Add taint to node "worker-2"
  kubectl taint nodes worker-2 key=value:NoSchedule
  // Verify
  // Using "custom-coloumns" , you can customize which coloumn to
  be printed
  kubectl get nodes -o customcolumns=NAME:.metadata.name,TAINTS:.spec.taints --no-headers
  // Using jsonpath
  kubectl get nodes -o jsonpath="{range
  .items[*]}{.metadata.name} {.spec.taints[?(
  @.effect=='NoSchedule' )].effect}{\"\n\"}{end}" | awk 'NF==2
  {print $0}'

Comment: *

Name: *

Email: *

Verification: *

Create a Pod nginx and specify a CPU request and a CPU limit of 0.5 and 1 respectively.

• A.// create a yml file
  kubectl run nginx-pod --image=nginx --restart=Never --dry-run -
  o yaml > nginx-pod.yml
  // add the resources section and create
  vim nginx-pod.yaml
  apiVersion: v1
  kind: Pod
  metadata:
  labels:
  run: nginx
  name: nginx
  spec:
  containers:
  - image: nginx
  name: nginx
  resources:
  requests:
  cpu: "0.4"
  limits:
  cpu: "1"
  restartPolicy: Always
  kubectl apply -f nginx-pod.yaml
  // verify
  kubectl top pod
• B.// create a yml file
  kubectl run nginx-pod --image=nginx --restart=Never --dry-run -
  o yaml > nginx-pod.yml
  // add the resources section and create
  vim nginx-pod.yaml
  apiVersion: v1
  kind: Pod
  metadata:
  labels:
  run: nginx
  name: nginx
  spec:
  containers:
  - image: nginx
  name: nginx
  resources:
  requests:
  cpu: "0.5"
  limits:
  cpu: "1"
  restartPolicy: Always
  kubectl apply -f nginx-pod.yaml
  // verify
  kubectl top pod

Comment: *

Name: *

Email: *

Verification: *