From 4c29110a7e65a1bd8bf2458fe8f256ed264b94e7 Mon Sep 17 00:00:00 2001
From: Florian <flo@meergans.org>
Date: Wed, 14 Oct 2026 16:31:54 +0200
Subject: [PATCH] Added restrictive network policy

---
 ...end-pull-notifications-network-policy.yaml | 26 +++++++++++++++++++
 1 file changed, 26 insertions(+)
 create mode 100644 backend-pull-notifications/backend-pull-notifications-network-policy.yaml

diff --git a/backend-pull-notifications/backend-pull-notifications-network-policy.yaml b/backend-pull-notifications/backend-pull-notifications-network-policy.yaml
new file mode 100644
index 0000000..5fd8c37
--- /dev/null
+++ b/backend-pull-notifications/backend-pull-notifications-network-policy.yaml
@@ -0,0 +1,26 @@
+apiVersion: networking.k8s.io/v1
+kind: NetworkPolicy
+metadata:
+  name: backend-pull-notifications-access
+  namespace: app-notifications
+spec:
+  podSelector:
+    matchLabels:
+      app: backend-pull-notifications
+  policyTypes:
+    - Ingress
+  ingress:
+    - from:
+        - podSelector:
+            matchLabels:
+              app: backend-api-internal
+      ports:
+        - protocol: TCP
+          port: 8101
+
+    - from:
+        - ipBlock:
+            cidr: 193.24.210.114/32
+      ports:
+        - protocol: TCP
+          port: 9000