One pod with two containers (fronted, backend) and two exposed ports.
One Service with with named ports.
Two Routes, with the same hostname, but routing based on path: / to fronted, /render to backend.
One NetworkPolicy allowing access to both ports.