redesign fully scaffolded and web login works

deploy/k8s/base/network-policies.yaml

@@ -28,10 +28,7 @@ spec:
     - Ingress
   ingress:
     - from:
-        - namespaceSelector:
-            matchLabels:
-              dexorder.io/type: system
-          podSelector:
+        - podSelector:
             matchLabels:
               app: gateway
       ports:
@@ -64,17 +61,14 @@ spec:
           port: 53
         - protocol: TCP
           port: 53
-    # Gateway in system namespace (for callbacks)
+    # Gateway (for callbacks)
     - to:
-        - namespaceSelector:
-            matchLabels:
-              dexorder.io/type: system
-          podSelector:
+        - podSelector:
             matchLabels:
               app: gateway
       ports:
         - protocol: TCP
-          port: 8080
+          port: 3000
     # Kafka/Redpanda for data subscriptions
     - to:
         - namespaceSelector:
@@ -99,12 +93,11 @@ spec:
         - protocol: TCP
           port: 443
 ---
-# System namespace: allow ingress from agents
+# Default namespace: allow ingress from agents to gateway
 apiVersion: networking.k8s.io/v1
 kind: NetworkPolicy
 metadata:
   name: allow-agent-callbacks
-  namespace: dexorder-system
 spec:
   podSelector:
     matchLabels:
@@ -118,4 +111,4 @@ spec:
               dexorder.io/type: agents
       ports:
         - protocol: TCP
-          port: 8080
+          port: 3000