A school-district admin proposes using a NetworkPolicy to stop developers from listing Secrets via kubectl. What misconception should the CKA candidate correct?
Select an answer to reveal the explanation.
Short Explanation
NetworkPolicy is a traffic cop between Pods, not the badge checker at the API desk — kubectl Secret access is an RBAC problem.
Full Explanation
NetworkPolicies constrain L3/L4 connectivity to and from Pods when the CNI enforces them. Kubernetes API authorization is evaluated by RBAC (and related admission controls), independent of Pod network rules. Preventing kubectl get secrets requires adjusting Roles/RoleBindings or equivalent API controls, not NetworkPolicy.