From 96db9b351119867c82185e900f5362db1516da9c Mon Sep 17 00:00:00 2001
From: Karan Parashar <whyredfire@gmail.com>
Date: Sat, 26 Sep 2026 11:49:21 +0530
Subject: [PATCH] feat(apps): Enable network policies for redoost

---
 argocd-apps/services/redoost.yaml | 13 +++++++++++++
 1 file changed, 13 insertions(+)

diff --git a/argocd-apps/services/redoost.yaml b/argocd-apps/services/redoost.yaml
index cdb3d58..546f784 100644
--- a/argocd-apps/services/redoost.yaml
+++ b/argocd-apps/services/redoost.yaml
@@ -39,6 +39,19 @@ spec:
             websiteUpstream: garage.garage.svc.cluster.local:3902
             bucket: redoost-sites
             existingSecret: redoost-s3
+          networkPolicy:
+            enabled: true
+            gateway:
+              - namespaceSelector:
+                  matchLabels:
+                    kubernetes.io/metadata.name: traefik
+            s3:
+              - namespaceSelector:
+                  matchLabels:
+                    kubernetes.io/metadata.name: garage
+                podSelector:
+                  matchLabels:
+                    app.kubernetes.io/name: garage
     - path: apps/redoost
       repoURL: https://gitea.whyredfire.dev/whyredfire/gitops.git
       targetRevision: main