diff --git a/headlamp-governance/networkpolicy.yaml b/headlamp-governance/networkpolicy.yaml
new file mode 100644
index 0000000..9e1209a
--- /dev/null
+++ b/headlamp-governance/networkpolicy.yaml
@@ -0,0 +1,18 @@
+apiVersion: networking.k8s.io/v1
+kind: NetworkPolicy
+metadata:
+  name: allow-traefik-headlamp
+spec:
+  podSelector:
+    matchLabels:
+      k8s-app: headlamp # Label oficial que usa el deployment de Headlamp
+  policyTypes:
+  - Ingress
+  ingress:
+  - from:
+    - namespaceSelector: {}
+    ports:
+    - protocol: TCP
+      port: 80 # Puerto estándar interno
+    - protocol: TCP
+      port: 3128 # Puerto alternativo que suele usar headlamp