diff --git a/src/main/helm/templates/network_policy.yaml b/src/main/helm/templates/network_policy.yaml
index f79c861df6bbba4c29ed3f7c79c579b86ee0b4a5..fb20373df7e5cf5c1045657b25fb3df4057f48cc 100644
--- a/src/main/helm/templates/network_policy.yaml
+++ b/src/main/helm/templates/network_policy.yaml
@@ -78,7 +78,7 @@ spec:
     - podSelector: 
         matchLabels:
           component: bayernid-proxy
-    - namespaceSelector:
+      namespaceSelector:
         matchLabels:
           kubernetes.io/metadata.name: {{ required "ozgcloud.bayernid.proxy.namespace must be set if bayernid is enabled" (((.Values.ozgcloud).bayernid).proxy).namespace }}
     ports:
diff --git a/src/test/helm/network_policy_test.yaml b/src/test/helm/network_policy_test.yaml
index 8328e0e7a06f805c964c5fbf7a7ab26c9805aaa9..16661a34b0b43473c82029e7496f2867220dd785 100644
--- a/src/test/helm/network_policy_test.yaml
+++ b/src/test/helm/network_policy_test.yaml
@@ -194,7 +194,7 @@ tests:
             - podSelector: 
                 matchLabels:
                   component: bayernid-proxy
-            - namespaceSelector:
+              namespaceSelector:
                 matchLabels:
                   kubernetes.io/metadata.name: bayernidProxyNamespace
             ports:
@@ -216,6 +216,9 @@ tests:
             - podSelector: 
                 matchLabels:
                   component: bayernid-proxy
+              namespaceSelector:
+                matchLabels:
+                      kubernetes.io/metadata.name: bayernidProxyNamespace
             ports:
             - port: 9090
               protocol: TCP