From 89bd139ba918d0bd8273bb25525c7ac6def95d6c Mon Sep 17 00:00:00 2001
From: Hermes Agent <hermes-agent@sirius0xdev.com>
Date: Wed, 27 May 2026 19:34:04 +0000
Subject: [PATCH] fix(netpol): allow external egress (ports 80/443) for API
 websockets
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Data service needs to reach Helius WSS, Solana RPC, Jupiter API,
Hyperliquid — all external. Network policy had no egress rule for
external traffic, so all API/websocket connections were blocked.
---
 .../network-policies/trading-network-policies.yaml         | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/apps/base/customer1/trading-platform/network-policies/trading-network-policies.yaml b/apps/base/customer1/trading-platform/network-policies/trading-network-policies.yaml
index 53614a3..683a1bd 100644
--- a/apps/base/customer1/trading-platform/network-policies/trading-network-policies.yaml
+++ b/apps/base/customer1/trading-platform/network-policies/trading-network-policies.yaml
@@ -135,3 +135,10 @@ spec:
           protocol: TCP
         - port: 8003
           protocol: TCP
+    # Allow external HTTPS/WSS (Helius, Solana, Jupiter, Hyperliquid APIs)
+    - to: []
+      ports:
+        - port: 443
+          protocol: TCP
+        - port: 80
+          protocol: TCP