From 38897e474f4e2abb90a7fab27ea0e00f5d95b846 Mon Sep 17 00:00:00 2001
From: Vaibhav Pathak <vaibhav.pathak@Vaibhavs-MacBook-Air.local>
Date: Mon, 19 Jan 2026 16:02:18 +0530
Subject: [PATCH] ingress from workflow allowed

---
 environment-provisioner/workflow-template.yaml | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/environment-provisioner/workflow-template.yaml b/environment-provisioner/workflow-template.yaml
index 31e5aa9..657bcf7 100644
--- a/environment-provisioner/workflow-template.yaml
+++ b/environment-provisioner/workflow-template.yaml
@@ -226,7 +226,7 @@ spec:
             original-owner: "$OWNER"
         EOF
 
-        # Create NetworkPolicy for isolation (allows ingress from same namespace and ingress-nginx)
+        # Create NetworkPolicy for isolation (allows ingress from same namespace, ingress-nginx, and argo-workflows)
         cat > manifests/networkpolicy.yaml <<EOF
         apiVersion: networking.k8s.io/v1
         kind: NetworkPolicy
@@ -246,6 +246,10 @@ spec:
             - namespaceSelector:
                 matchLabels:
                   kubernetes.io/metadata.name: ingress-nginx
+          - from:
+            - namespaceSelector:
+                matchLabels:
+                  kubernetes.io/metadata.name: argo-workflows
         EOF
 
         # Create service manifests