A county platform must allow only Pods labeled role=frontend to connect to Pods labeled app=api on TCP port 8080. Which NetworkPolicy design matches that requirement?
Select an answer to reveal the explanation.
Short Explanation
Want only the front desk to knock on the API door at port 8080? Write an ingress rule with the frontend podSelector and that exact port.
Full Explanation
Ingress NetworkPolicies combine a podSelector for protected Pods with from peer selectors and optional ports to constrain who may connect and on which ports. Matching frontend labels and TCP 8080 implements least-privilege east-west access. LimitRanges and PodDisruptionBudgets do not filter network traffic.