diff --git a/clusters/prod/network-policy.yaml b/clusters/prod/network-policy.yaml
new file mode 100644
index 0000000..7410862
--- /dev/null
+++ b/clusters/prod/network-policy.yaml
@@ -0,0 +1,12 @@
+apiVersion: networking.k8s.io/v1
+kind: NetworkPolicy
+metadata:
+  name: allow-all-to-flux
+  namespace: flux-system
+spec:
+  podSelector: {}
+  ingress:
+    - {}
+  policyTypes:
+    - Ingress
+