diff --git a/components/manifests/base/runner-networkpolicy.yaml b/components/manifests/base/runner-networkpolicy.yaml
index a873bd697..5b9e19485 100644
--- a/components/manifests/base/runner-networkpolicy.yaml
+++ b/components/manifests/base/runner-networkpolicy.yaml
@@ -1,15 +1,20 @@
 apiVersion: networking.k8s.io/v1
 kind: NetworkPolicy
 metadata:
-  name: allow-from-runner-namespaces
+  name: allow-platform-ingress
 spec:
   podSelector: {}
   policyTypes:
-  - Ingress
+    - Ingress
   ingress:
-  - {}
-  - from:
-    - namespaceSelector: {}
-      podSelector:
-        matchLabels:
-          app: ambient-code-runner
+    - from:
+        - namespaceSelector:
+            matchLabels:
+              policy-group.network.openshift.io/ingress: ""
+    - from:
+        - podSelector: {}
+    - from:
+        - namespaceSelector: {}
+          podSelector:
+            matchLabels:
+              app: ambient-code-runner