From 3fbc268e84e153efd5886e2c63b0f60eda1daa89 Mon Sep 17 00:00:00 2001
From: Thore Cimbal <cfx@riot.8shield.net>
Date: Fri, 21 Aug 2026 12:00:00 +0000
Subject: [PATCH] =?UTF-8?q?Reapply=20"netpol:=20wave=201=20=E2=80=94=20six?=
 =?UTF-8?q?=20deploy=20and=20helper=20workloads=20lose=20their=20outbound?=
 =?UTF-8?q?=20(#0088)"?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

This reverts commit 80cf715e3cda3c3ff36424cbc934c2953e0558eb.
---
 apps/production/networkpolicy.yaml | 14 ++++++++++++++
 1 file changed, 14 insertions(+)

diff --git a/apps/production/networkpolicy.yaml b/apps/production/networkpolicy.yaml
index 995e5ad..a11c781 100644
--- a/apps/production/networkpolicy.yaml
+++ b/apps/production/networkpolicy.yaml
@@ -461,6 +461,13 @@ spec:
           - wikijs-gruppenpruefung
           - haproxy
           - draupnir
+          # Welle 1 (#0088): kein externer Bedarf nachweisbar.
+          - matrix-rtc-authorisation-service
+          - wikijs-config
+          - init-secrets
+          - synapse-check-config
+          - deployment-markers-pre
+          - deployment-markers-post
       - key: app
         operator: NotIn
         values:
@@ -526,6 +533,13 @@ spec:
           - wikijs-gruppenpruefung
           - haproxy
           - draupnir
+          # Welle 1 (#0088): Deploy- und Hilfs-Arbeitslasten.
+          - matrix-rtc-authorisation-service
+          - wikijs-config
+          - init-secrets
+          - synapse-check-config
+          - deployment-markers-pre
+          - deployment-markers-post
   policyTypes:
     - Egress
   egress: