diff --git a/infrastructure/postgres/user-namespace-network-policy.yaml b/infrastructure/postgres/user-namespace-network-policy.yaml
index 29097298b710f7f8533c33f2a6f0a43039bf4953..8f628e76770afd514b2badd47632659e4fccaead 100644
--- a/infrastructure/postgres/user-namespace-network-policy.yaml
+++ b/infrastructure/postgres/user-namespace-network-policy.yaml
@@ -20,15 +20,15 @@ spec:
             - namespaceSelector:
                 matchLabels:
                   name: zalando-postgres
+            ports:
+            - containerPort: 8008
+              protocol: TCP
+            - containerPort: 5432
+              protocol: TCP
+            - containerPort: 8080
+              protocol: TCP
           podSelector:
             matchLabels:
               application: spilo
           policyTypes:
           - Ingress
-          ports:
-          - containerPort: 8008
-            protocol: TCP
-          - containerPort: 5432
-            protocol: TCP
-          - containerPort: 8080
-            protocol: TCP