diff --git a/kubernetes/apps/adguard-home/app/deployment.yaml b/kubernetes/apps/adguard-home/app/deployment.yaml
index 3624a04..b83dcb0 100644
--- a/kubernetes/apps/adguard-home/app/deployment.yaml
+++ b/kubernetes/apps/adguard-home/app/deployment.yaml
@@ -13,6 +13,10 @@ spec:
     metadata:
       labels:
         app.kubernetes.io/name: adguard-home
+        rpi5.cluster.policy/egress-kubeapi: "true"
+        rpi5.cluster.policy/egress-namespace: "true"
+        rpi5.cluster.policy/egress-world: "true"
+        rpi5.cluster.policy/ingress-nodes: "true"
     spec:
       containers:
         - name: adguard-home
diff --git a/kubernetes/apps/capacitor/app/manifest.yaml b/kubernetes/apps/capacitor/app/manifest.yaml
index 66a83df..6d2d80a 100644
--- a/kubernetes/apps/capacitor/app/manifest.yaml
+++ b/kubernetes/apps/capacitor/app/manifest.yaml
@@ -47,6 +47,10 @@ spec:
       labels:
         app.kubernetes.io/name: onechart
         app.kubernetes.io/instance: capacitor
+        rpi5.cluster.policy/egress-kubeapi: "true"
+        rpi5.cluster.policy/egress-namespace: "true"
+        rpi5.cluster.policy/egress-world: "true"
+        rpi5.cluster.policy/ingress-nodes: "true"
     spec:
       containers:
         - image: ghcr.io/gimlet-io/capacitor:v0.4.2