diff --git a/kube/deploy/core/_networking/cilium/netpols/labelled-allow-egress.yaml b/kube/deploy/core/_networking/cilium/netpols/labelled-allow-egress.yaml
index 247396fb..13f61cca 100644
--- a/kube/deploy/core/_networking/cilium/netpols/labelled-allow-egress.yaml
+++ b/kube/deploy/core/_networking/cilium/netpols/labelled-allow-egress.yaml
@@ -343,7 +343,8 @@ spec:
       egress.home.arpa/pypi: allow
   egress:
     - toFQDNs: &dns
-        - matchPattern: "pypi.org"
+        - matchName: "pypi.org"
+        - matchName: "files.pythonhosted.org"
       toPorts:
         - ports:
             - port: "443"