apiVersion: networking.k8s.io/v1
kind: NetworkPolicy
metadata:
  name: allow-traefik-headlamp
spec:
  podSelector:
    matchLabels:
      k8s-app: headlamp # Label oficial que usa el deployment de Headlamp
  policyTypes:
  - Ingress
  ingress:
  - from:
    - namespaceSelector: {}
    ports:
    - protocol: TCP
      port: 80 # Puerto estándar interno
    - protocol: TCP
      port: 3128 # Puerto alternativo que suele usar headlamp