diff --git a/src/main/helm/templates/deployment.yaml b/src/main/helm/templates/deployment.yaml
index 7962926bad3084bd5537279b6c4fdc166e046db6..cf4720b88a773d2153428371fc018d1d8638e72d 100644
--- a/src/main/helm/templates/deployment.yaml
+++ b/src/main/helm/templates/deployment.yaml
@@ -104,6 +104,10 @@ spec:
           - name: ozgcloud_administration_sync_organisationseinheiten_cron
             value: {{ .Values.ozgcloud.sync.organisationseinheiten.cron | quote }}
           {{- end }}
+          - name: grpc_client_zufi-manager_address
+            value: {{ .Values.zufiManager.address }}
+          - name: grpc_client_zufi-manager_negotiationType
+            value: {{ (.Values.zufiManager).grpcClientNegotiationType | default "TLS" }}
         envFrom:
           {{- if (.Values.database).useExternal }}
           - secretRef:
diff --git a/src/main/helm/templates/network_policy.yaml b/src/main/helm/templates/network_policy.yaml
index a86717297700f48a3f27349e17b24fbb4638fa8d..ba64d59e4918597d31d38d4598d5309a9287e3ff 100644
--- a/src/main/helm/templates/network_policy.yaml
+++ b/src/main/helm/templates/network_policy.yaml
@@ -29,9 +29,12 @@ spec:
 {{- end }}
   egress:
     - to:
-        - podSelector:
+        - namespaceSelector:
             matchLabels:
-              component: zufi-server
+              kubernetes.io/metadata.name: "zufi"
+          podSelector:
+            matchLabels:
+              component: "zufi-server"
       ports:
         - port: 9090
           protocol: TCP
diff --git a/src/main/helm/values.yaml b/src/main/helm/values.yaml
index 65c0a551f00d862d2432233e89c37a7051d3ee1d..6d9f58a3cdce518e86f0bca90594972ee87f2fd9 100644
--- a/src/main/helm/values.yaml
+++ b/src/main/helm/values.yaml
@@ -33,6 +33,9 @@ ozgcloud:
     api:
       user: administrationApiUser
 
+zufiManager:
+  address: zufi-server.zufi:9090
+
 image:
   repo: docker.ozg-sh.de
   name: administration
diff --git a/src/main/resources/application.yaml b/src/main/resources/application.yaml
index af6a93ebdb869b45fc3c0be85fa38dbe821a0683..ddb50199effa7b74f3825194c43a5780fc4706e7 100644
--- a/src/main/resources/application.yaml
+++ b/src/main/resources/application.yaml
@@ -88,5 +88,5 @@ ozgcloud:
 grpc:
   client:
     zufi-manager:
-      address: static://127.0.0.1:9190
+      address: static://127.0.0.1:9090
       negotiationType: TLS
\ No newline at end of file
diff --git a/src/test/helm/network_policy_test.yaml b/src/test/helm/network_policy_test.yaml
index ccd95833d7420217c7cbefde549ebf7683b6c731..6db0ccf63232ae8e01f74badd5c11f29245c5f70 100644
--- a/src/test/helm/network_policy_test.yaml
+++ b/src/test/helm/network_policy_test.yaml
@@ -84,16 +84,19 @@ tests:
                   port: 8081
             egress:
               - to:
-                  - podSelector:
+                  - namespaceSelector:
+                      matchLabels:
+                        kubernetes.io/metadata.name: "zufi"
+                    podSelector:
                       matchLabels:
-                        component: zufi-server
+                        component: "zufi-server"
                 ports:
                   - port: 9090
                     protocol: TCP
               - to:
                   - podSelector:
                       matchLabels:
-                        component: ozgcloud-mongodb
+                        component: "ozgcloud-mongodb"
                 ports:
                   - port: 27017
                     protocol: TCP