diff --git a/helm/argocd/Chart.yaml b/helm/argocd/Chart.yaml
index 1c086c8..a4d7eb2 100644
--- a/helm/argocd/Chart.yaml
+++ b/helm/argocd/Chart.yaml
@@ -1,6 +1,6 @@
 apiVersion: v2
 name: argocd-configuration
-version: 0.2.0
+version: 0.2.1
 type: application
 description: "ArgoCD configuration which requires Argo CD to be installed separately."
 maintainers:
@@ -8,8 +8,8 @@ maintainers:
     url: https://2martens.de
 annotations:
   artifacthub.io/changes: |
-    - kind: added
-      description: Added cilium network policy
+    - kind: fixed
+      description: Added missing namespace labels
   artifacthub.io/signKey: |
     fingerprint: F0F153B65BAD467201D7544E47393ABD1F96B7C8
     url: https://mafiasi.de/pks/key/47393ABD1F96B7C8.asc
diff --git a/helm/argocd/templates/network-policy.yaml b/helm/argocd/templates/network-policy.yaml
index 522cc40..f5f92d1 100644
--- a/helm/argocd/templates/network-policy.yaml
+++ b/helm/argocd/templates/network-policy.yaml
@@ -13,6 +13,7 @@ specs:
       - toEndpoints:
           - matchLabels:
               k8s:app.kubernetes.io/name: argocd-server
+              k8s:io.kubernetes.pod.namespace: argocd
         toPorts:
           - ports:
               - port: '8080'
@@ -20,6 +21,7 @@ specs:
       - toEndpoints:
           - matchLabels:
               k8s:app.kubernetes.io/name: argocd-application-controller
+              k8s:io.kubernetes.pod.namespace: argocd
         toPorts:
           - ports:
               - port: '8082'
@@ -27,6 +29,7 @@ specs:
       - toEndpoints:
           - matchLabels:
               k8s:app.kubernetes.io/name: argocd-repo-server
+              k8s:io.kubernetes.pod.namespace: argocd
         toPorts:
           - ports:
               - port: '8084'
@@ -61,6 +64,15 @@ specs:
           - ports:
               - port: '8083'
                 protocol: TCP
+    egress:
+      - toEndpoints:
+          - matchLabels:
+              io.cilium.k8s.policy.serviceaccount: coredns
+              k8s:io.kubernetes.pod.namespace: kube-system
+        toPorts:
+          - ports:
+              - port: '53'
+                protocol: UDP
   - endpointSelector:
       # apply to core dns pods
       matchLabels: