diff --git a/kube/3-deploy/1-core/db/pg/app/netpol.yaml b/kube/3-deploy/1-core/db/pg/app/netpol.yaml
index c6249eb5..06930530 100644
--- a/kube/3-deploy/1-core/db/pg/app/netpol.yaml
+++ b/kube/3-deploy/1-core/db/pg/app/netpol.yaml
@@ -24,6 +24,8 @@ spec:
         - matchExpressions:
             - key: cnpg.io/cluster
               operator: Exists
+            - key: io.kubernetes.pod.namespace
+              operator: Exists
     # allow access to apiserver
     - toEntities:
         - kube-apiserver