CKA Mock Exam 2 — Networking & Triage
The services-and-networking and troubleshooting half of CKA, scored as one timed paper: expose a Deployment, restrict it with a NetworkPolicy, route with an Ingress, then diagnose and repair a Service with no endpoints, a Pod that won't schedule, a crash-looping container, and a denied ServiceAccount.
Your mission
A timed administration paper covering the two halves of CKA that pure build drills skip: services & networking and troubleshooting. Seven tasks on one cluster, 70 minutes, one score, 66% to pass. Hints and solutions are locked while the clock runs.
The first three are build tasks — expose a workload, lock it down, publish it. The last four are tickets: a workload is running but misbehaving, and the cause is yours to find. Points are awarded per task, so bank the ones you know and come back to the rest.
Diagnose fast
alias k=kubectl
k get deploy,svc,ingress -o wide # what's running and what fronts it
k get endpoints <svc> # a Service with none is misrouted
k get pods --show-labels # label vs selector mismatches
k describe pod <pod> # scheduling + restart events
k get pods # Pending / CrashLoopBackOff at a glanceMost fixes are a single kubectl apply, patch, or create away.