diff --git a/packages/core/installer/values.yaml b/packages/core/installer/values.yaml
index c1bee288..fba95245 100644
--- a/packages/core/installer/values.yaml
+++ b/packages/core/installer/values.yaml
@@ -1,2 +1,2 @@
 cozystack:
-  image: ghcr.io/cozystack/cozystack/installer:v0.29.0@sha256:b7a13290a4b1539ab067ad7f7d56dcc92a9d79e2f1ebf6758c059e904061c930
+  image: ghcr.io/cozystack/cozystack/installer:v0.29.0@sha256:47918fe7da04b8975e590681e11f59fe7f4dd50ec24eb497675fd4c60af2b113
diff --git a/packages/core/platform/bundles/distro-full.yaml b/packages/core/platform/bundles/distro-full.yaml
index 05a23963..5ce0beb4 100644
--- a/packages/core/platform/bundles/distro-full.yaml
+++ b/packages/core/platform/bundles/distro-full.yaml
@@ -31,6 +31,13 @@ releases:
       autoDirectNodeRoutes: true
       routingMode: native
 
+- name: cilium-networkpolicy
+  releaseName: cilium-networkpolicy
+  chart: cozy-cilium-networkpolicy
+  namespace: cozy-cilium
+  privileged: true
+  dependsOn: [cilium]
+
 - name: cozy-proxy
   releaseName: cozystack
   chart: cozy-cozy-proxy
@@ -154,7 +161,7 @@ releases:
   releaseName: piraeus-operator
   chart: cozy-piraeus-operator
   namespace: cozy-linstor
-  dependsOn: [cilium,cert-manager]
+  dependsOn: [cilium,cert-manager,victoria-metrics-operator]
 
 - name: snapshot-controller
   releaseName: snapshot-controller
diff --git a/packages/core/platform/bundles/paas-full.yaml b/packages/core/platform/bundles/paas-full.yaml
index 42133a73..b0dd23c4 100644
--- a/packages/core/platform/bundles/paas-full.yaml
+++ b/packages/core/platform/bundles/paas-full.yaml
@@ -34,6 +34,13 @@ releases:
   - values-talos.yaml
   - values-kubeovn.yaml
 
+- name: cilium-networkpolicy
+  releaseName: cilium-networkpolicy
+  chart: cozy-cilium-networkpolicy
+  namespace: cozy-cilium
+  privileged: true
+  dependsOn: [cilium]
+
 - name: kubeovn
   releaseName: kubeovn
   chart: cozy-kubeovn
diff --git a/packages/system/cilium-networkpolicy/Chart.yaml b/packages/system/cilium-networkpolicy/Chart.yaml
new file mode 100644
index 00000000..49f64878
--- /dev/null
+++ b/packages/system/cilium-networkpolicy/Chart.yaml
@@ -0,0 +1,3 @@
+apiVersion: v2
+name: cozy-cilium-networkpolicy
+version: 0.0.0 # Placeholder, the actual version will be automatically set during the build process
diff --git a/packages/system/cilium-networkpolicy/Makefile b/packages/system/cilium-networkpolicy/Makefile
new file mode 100644
index 00000000..c81b87e9
--- /dev/null
+++ b/packages/system/cilium-networkpolicy/Makefile
@@ -0,0 +1,5 @@
+export NAME=cilium-networkpolicy
+export NAMESPACE=cozy-$(NAME)
+
+include ../../../scripts/common-envs.mk
+include ../../../scripts/package.mk
diff --git a/packages/system/cilium/templates/networkpolicy.yaml b/packages/system/cilium-networkpolicy/templates/networkpolicy.yaml
similarity index 100%
rename from packages/system/cilium/templates/networkpolicy.yaml
rename to packages/system/cilium-networkpolicy/templates/networkpolicy.yaml