From 89e6bd7d99648e9954c72464f855b25f229e9f33 Mon Sep 17 00:00:00 2001
From: Chris Farhood <chris@farhood.org>
Date: Tue, 10 Feb 2026 12:31:11 -0500
Subject: [PATCH] fix: allow all ingress traffic to IRC apps

---
 thelounge/networkpolicy.yaml | 13 ++-----------
 znc/networkpolicy.yaml       | 13 ++-----------
 2 files changed, 4 insertions(+), 22 deletions(-)

diff --git a/thelounge/networkpolicy.yaml b/thelounge/networkpolicy.yaml
index 7253c04..547c368 100644
--- a/thelounge/networkpolicy.yaml
+++ b/thelounge/networkpolicy.yaml
@@ -11,17 +11,8 @@ spec:
     - Egress
 
   ingress:
-  ### Allow intra-namespace communication
-    - from:
-        - namespaceSelector:
-            matchLabels:
-              kubernetes.io/metadata.name: irc
-  ###
-  ### Allow traffic from gateways
-    - from:
-        - namespaceSelector:
-            matchLabels:
-              kubernetes.io/metadata.name: istio-system
+  ### Allow all ingress traffic (web app needs external access via gateway)
+    - {}
   ###
   egress:
   ### Allow DNS resolution
diff --git a/znc/networkpolicy.yaml b/znc/networkpolicy.yaml
index dade4c2..f6a6a90 100644
--- a/znc/networkpolicy.yaml
+++ b/znc/networkpolicy.yaml
@@ -11,17 +11,8 @@ spec:
     - Egress
 
   ingress:
-  ### Allow intra-namespace communication
-    - from:
-        - namespaceSelector:
-            matchLabels:
-              kubernetes.io/metadata.name: irc
-  ###
-  ### Allow traffic from gateways
-    - from:
-        - namespaceSelector:
-            matchLabels:
-              kubernetes.io/metadata.name: istio-system
+  ### Allow all ingress traffic (IRC bouncer needs external connections)
+    - {}
   ###
   egress:
   ### Allow DNS resolution