DevOpsInterviewPrep logo
← Containers & Kubernetes / 13
hardNewRed HatGoldman SachsDatabricks

Lock down a namespace so pods can talk only to their own dependencies. Why does DNS break first, and how do you get it right?

Default-deny egress breaks name resolution before it breaks anything else, and every connection times out confusingly. The practitioners are the ones who test with positive AND negative probes and know their CNI's fine print.

Updated Sep 2026 · Grounded in researched DevOps, SRE and platform engineering interview loops, written to a senior-engineer editorial bar, and never padded to hit a word count.

Default-deny egress breaks name resolution before it breaks anything else, and every connection times out confusingly. The practitioners are the ones who test with positive AND negative probes and know their CNI's fine print.

an account raises the per-topic limit · no card
UP NEXT ON YOUR JOURNEY
Next in this trackWhat does a PodDisruptionBudget actually protect against, and why did your zero-downtime deployment drop requests anyway?Next in this trackDatabases will be provisioned by a Kubernetes Operator. What must the reconcile loop get right, and what when it cannot reach the API?Next in this trackYou need one log collector on every node, including nodes that join later. Which workload object do you reach for?
DISCUSSION · 0

Nothing here yet. Say how you would answer it.