From 8ba4e0facc53d28a910d9f6fa1eea5c9cd017f73 Mon Sep 17 00:00:00 2001
From: Admin Bot <admin@riotpiao.com>
Date: Tue, 1 Sep 2026 11:15:23 -0700
Subject: [PATCH] fix: allow portfolio namespace to reach api-gateway for LLM
 chat

---
 k8s/network-policy.yaml | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/k8s/network-policy.yaml b/k8s/network-policy.yaml
index 0a7cdb1..9373e16 100644
--- a/k8s/network-policy.yaml
+++ b/k8s/network-policy.yaml
@@ -38,6 +38,14 @@ spec:
     ports:
     - protocol: TCP
       port: 8080
+  # Allow from portfolio namespace (riotpiao.com chat terminal)
+  - from:
+    - namespaceSelector:
+        matchLabels:
+          kubernetes.io/metadata.name: portfolio
+    ports:
+    - protocol: TCP
+      port: 8080
   egress:
   # Allow DNS
   - to: