diff --git a/templates/distribution/manifests/auth/policies/kustomization.yaml.tpl b/templates/distribution/manifests/auth/policies/kustomization.yaml.tpl
index b5e04bf4..49e948a8 100644
--- a/templates/distribution/manifests/auth/policies/kustomization.yaml.tpl
+++ b/templates/distribution/manifests/auth/policies/kustomization.yaml.tpl
@@ -6,9 +6,9 @@
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 
+{{- if eq .spec.distribution.modules.auth.provider.type "sso" }}
 resources:
   - common.yaml
-{{- if eq .spec.distribution.modules.auth.provider.type "sso" }}
   - acme-http-solver.yaml
   - pomerium.yaml
   - prometheus-metrics.yaml
diff --git a/templates/distribution/manifests/auth/policies/pomerium.yaml.tpl b/templates/distribution/manifests/auth/policies/pomerium.yaml.tpl
index 9845808e..16c6647c 100644
--- a/templates/distribution/manifests/auth/policies/pomerium.yaml.tpl
+++ b/templates/distribution/manifests/auth/policies/pomerium.yaml.tpl
@@ -198,10 +198,12 @@ spec:
              kubernetes.io/metadata.name: logging
          podSelector:
            matchLabels:
-             app.kubernetes.io/name: opensearch
+             app: opensearch-dashboards
      ports:
        - port: 9200
          protocol: TCP
+       - port: 5601
+         protocol: TCP
 ---
 apiVersion: networking.k8s.io/v1
 kind: NetworkPolicy