From 8d1103572f3ffed77a6bb01a23f188db491e4dcb Mon Sep 17 00:00:00 2001
From: Seth Call <seth@jamkazam.com>
Date: Wed, 3 Dec 2025 20:23:25 -0600
Subject: [PATCH] Add new network policy

---
 k8s/webrtc-be/templates/networkpolicy.yaml | 28 ++++++++++++++++++++++
 1 file changed, 28 insertions(+)
 create mode 100644 k8s/webrtc-be/templates/networkpolicy.yaml

diff --git a/k8s/webrtc-be/templates/networkpolicy.yaml b/k8s/webrtc-be/templates/networkpolicy.yaml
new file mode 100644
index 0000000..2869e5a
--- /dev/null
+++ b/k8s/webrtc-be/templates/networkpolicy.yaml
@@ -0,0 +1,28 @@
+apiVersion: networking.k8s.io/v1
+kind: NetworkPolicy
+metadata:
+  name: {{ .Release.Name }}-allow-coturn
+  namespace: webrtc-be
+spec:
+  podSelector:
+    matchLabels:
+      app: webrtc-be
+  policyTypes:
+  - Ingress
+  - Egress
+  ingress:
+  - from:
+    - namespaceSelector:
+        matchLabels:
+          kubernetes.io/metadata.name: coturn
+      podSelector:
+        matchLabels:
+          app: coturn
+  egress:
+  - to:
+    - namespaceSelector:
+        matchLabels:
+          kubernetes.io/metadata.name: coturn
+      podSelector:
+        matchLabels:
+          app: coturn