Network-policy zero-downtime transition possible?

[r-chris]

I have deployed nginx as it's own CloudFoundry app to front another web app (as a reverse proxy). I am connecting nginx via the "internal" network-policy to an internal route like this:

cf add-network-policy my-nginx-app --destination-app my-app -s my-space -o my-org --protocol tcp --port 8080

During the zero-downtime deployment of my-app it appears the network-policy is lost and I have to manually recreate it, which results in downtime during deployment.

I am using legacy-push like this:

cf zero-downtime-push -f cf/my-app.yml --legacy-push

To fix it I have to call cf add-network-policy ... again after every deployment.

Is there any way for "cf-puppeteer" to automatically map the internal network policy?