diff --git a/kubernetes/infrastructure/network-policies/coder-ns.yaml b/kubernetes/infrastructure/network-policies/coder-ns.yaml
index ae5729ca..52a0036c 100644
--- a/kubernetes/infrastructure/network-policies/coder-ns.yaml
+++ b/kubernetes/infrastructure/network-policies/coder-ns.yaml
@@ -24,6 +24,11 @@ spec:
     - toEndpoints:
         - matchLabels:
             "k8s:io.kubernetes.pod.namespace": coder
+    # Coder reaches auth.renner.uno (OIDC discovery) via ingress-nginx.
+    - toEndpoints:
+        - matchLabels:
+            "k8s:io.kubernetes.pod.namespace": ingress
+            app.kubernetes.io/name: ingress-nginx
     - toEndpoints:
         - matchLabels:
             "k8s:io.kubernetes.pod.namespace": rook-ceph