diff --git a/charts/orchestrator/CHANGELOG.md b/charts/orchestrator/CHANGELOG.md
index c3e8e4f5..ef8fdf78 100644
--- a/charts/orchestrator/CHANGELOG.md
+++ b/charts/orchestrator/CHANGELOG.md
@@ -7,6 +7,14 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 <!-- towncrier release notes start -->
 
+## [8.7.0] - 2024-05-21
+
+### Added
+
+- Network policies that:
+  -  Limit connection from pods to the DB (except from server and migrations) 
+  -  Allow server pod to communicate with internet (outside of cluster) and pods that have the label `role-orchestrator-client: 'true'`
+
 ## [8.6.0] - 2024-04-15
 
 ### Changed
diff --git a/charts/orchestrator/Chart.yaml b/charts/orchestrator/Chart.yaml
index 72a2ffb8..ad88457c 100644
--- a/charts/orchestrator/Chart.yaml
+++ b/charts/orchestrator/Chart.yaml
@@ -2,7 +2,7 @@ apiVersion: v2
 name: orchestrator
 description: substra orchestration
 type: application
-version: 8.6.0
+version: 8.7.0
 appVersion: 0.40.0
 kubeVersion: ">= 1.19.0-0"
 icon: https://avatars.githubusercontent.com/u/84009910?s=400