Network Policies, Ingress, and the Gateway API

Introduction

This lesson finishes the Services & Networking domain (20% of the CKA, Kubernetes v1.35). The official curriculum lists: define and enforce Network Policies, use ingress controllers and Ingress resources, and use the Gateway API to manage ingress traffic. In the exam, tasks look like "allow only Pods labelled role=frontend to reach the database on port 5432", "expose /api and /web of two Services through one hostname", or "create an HTTPRoute that sends 20% of traffic to a canary Service".