diff --git a/infrastructure/cilium/manifests/network-policies/baseline.yaml b/infrastructure/cilium/manifests/network-policies/baseline.yaml
index 24315e7..885e096 100644
--- a/infrastructure/cilium/manifests/network-policies/baseline.yaml
+++ b/infrastructure/cilium/manifests/network-policies/baseline.yaml
@@ -139,10 +139,13 @@ spec:
         - host
         - kube-apiserver
         - remote-node
-    # Istio ingress gateway (Ceph dashboard)
+    # Ingress gateways (Ceph dashboard)
     - fromEndpoints:
         - matchLabels:
             k8s:io.kubernetes.pod.namespace: istio-system
+    - fromEndpoints:
+        - matchLabels:
+            k8s:io.kubernetes.pod.namespace: envoy-gateway-system
     # Internal Ceph traffic
     - fromEndpoints:
         - matchLabels: