diff --git a/pkg/gardenlet/controller/networkpolicy/reconciler.go b/pkg/gardenlet/controller/networkpolicy/reconciler.go
index 49ac1266c87..c7a19447c63 100644
--- a/pkg/gardenlet/controller/networkpolicy/reconciler.go
+++ b/pkg/gardenlet/controller/networkpolicy/reconciler.go
@@ -207,6 +207,7 @@ func (r *Reconciler) networkPolicyConfigs() []networkPolicyConfig {
 				labels.SelectorFromSet(labels.Set{v1beta1constants.GardenRole: v1beta1constants.GardenRoleShoot}),
 				labels.SelectorFromSet(labels.Set{v1beta1constants.GardenRole: v1beta1constants.GardenRoleIstioSystem}),
 				labels.SelectorFromSet(labels.Set{v1beta1constants.GardenRole: v1beta1constants.GardenRoleIstioIngress}),
+				labels.SelectorFromSet(labels.Set{v1beta1constants.GardenRole: v1beta1constants.GardenRoleExposureClassHandler}),
 			},
 		},
 	}