diff --git a/apps/base/customer1/trading-platform/network-policies/trading-network-policies.yaml b/apps/base/customer1/trading-platform/network-policies/trading-network-policies.yaml
index dade3c9..53614a3 100644
--- a/apps/base/customer1/trading-platform/network-policies/trading-network-policies.yaml
+++ b/apps/base/customer1/trading-platform/network-policies/trading-network-policies.yaml
@@ -99,11 +99,19 @@ spec:
       ports:
         - port: 6379
           protocol: TCP
-    # Allow Kafka access
+    # Allow Kafka access (Strimzi labels)
     - to:
         - podSelector:
             matchLabels:
-              app: trading-kafka
+              strimzi.io/name: trading-kafka
+      ports:
+        - port: 9092
+          protocol: TCP
+    # Allow Kafka bootstrap service (fallback)
+    - to:
+        - podSelector:
+            matchLabels:
+              strimzi.io/cluster: trading-kafka
       ports:
         - port: 9092
           protocol: TCP