diff --git a/manifests/policies/allow-acme.yaml b/manifests/policies/allow-acme.yaml
new file mode 100644
index 00000000..11e6a349
--- /dev/null
+++ b/manifests/policies/allow-acme.yaml
@@ -0,0 +1,16 @@
+apiVersion: networking.k8s.io/v1
+kind: NetworkPolicy
+metadata:
+  name: allow-acme
+spec:
+  ingress:
+  - from:
+    - namespaceSelector: {}
+    ports:
+      - protocol: TCP
+        port: 8089
+  podSelector:
+    matchLabels:
+      acme.cert-manager.io/http01-solver: 'true'
+  policyTypes:
+  - Ingress
\ No newline at end of file