ingress from workflow allowed

environment-provisioner/workflow-template.yaml

@@ -226,7 +226,7 @@ spec:
             original-owner: "$OWNER"
         EOF
 
-        # Create NetworkPolicy for isolation (allows ingress from same namespace and ingress-nginx)
+        # Create NetworkPolicy for isolation (allows ingress from same namespace, ingress-nginx, and argo-workflows)
         cat > manifests/networkpolicy.yaml <<EOF
         apiVersion: networking.k8s.io/v1
         kind: NetworkPolicy
@@ -246,6 +246,10 @@ spec:
             - namespaceSelector:
                 matchLabels:
                   kubernetes.io/metadata.name: ingress-nginx
+          - from:
+            - namespaceSelector:
+                matchLabels:
+                  kubernetes.io/metadata.name: argo-workflows
         EOF
 
         # Create service manifests