diff --git a/.github/workflows/pull-request-test.yml b/.github/workflows/pull-request-test.yml
index af65b70750..6709dd4569 100644
--- a/.github/workflows/pull-request-test.yml
+++ b/.github/workflows/pull-request-test.yml
@@ -137,7 +137,7 @@ jobs:
           DOCKER_PASSWORD: ${{ secrets.RENKU_DOCKER_PASSWORD }}
           DOCKER_USERNAME: ${{ secrets.RENKU_DOCKER_USERNAME }}
           KUBECONFIG: "${{ github.workspace }}/renkubot-kube.config"
-          RENKU_RELEASE: ci-renku-${{ github.event.number }}
+          RENKU_RELEASE: "staging" # TODO: undo at the end of the build
           RENKU_VALUES_FILE: "${{ github.workspace }}/values.yaml"
           RENKU_VALUES: minimal-deployment/minimal-deployment-values.yaml
           TEST_ARTIFACTS_PATH: "tests-artifacts-${{ github.sha }}"
@@ -181,7 +181,7 @@ jobs:
           e2e-target: ${{ matrix.tests }}
           kubernetes-cluster-fqdn: ${{ needs.check-deploy.outputs.deploy == 'true' && 'dev.renku.ch' }}
           renku-reference: ${{ github.ref }}
-          renku-release: ci-renku-${{ github.event.number }}
+          renku-release: "staging" # TODO: undo at the end of the build
           test-user-password: ${{ secrets.RENKU_BOT_DEV_PASSWORD }}
 
   cypress-acceptance-tests-slow:
diff --git a/README.md b/README.md
index ad8e2f3bf2..3eee8941b0 100644
--- a/README.md
+++ b/README.md
@@ -109,3 +109,4 @@ If you use the Renku platform for your research, please do cite our [paper](http
 }
 ```
 
+#FakeChange
diff --git a/helm-chart/renku/templates/network-policies.yaml b/helm-chart/renku/templates/network-policies.yaml
index 45281fe47a..22d22fafcf 100644
--- a/helm-chart/renku/templates/network-policies.yaml
+++ b/helm-chart/renku/templates/network-policies.yaml
@@ -156,6 +156,33 @@ spec:
 ---
 apiVersion: networking.k8s.io/v1
 kind: NetworkPolicy
+metadata:
+  name: {{ template "renku.notebooks.fullname" . }}-sessions-v2-tunnel
+  labels:
+    app: {{ template "renku.name" . }}
+    chart: {{ template "renku.chart" . }}
+    release: {{ .Release.Name }}
+    heritage: {{ .Release.Service }}
+spec:
+  podSelector:
+    matchLabels:
+      app.kubernetes.io/name: AmaltheaSession
+      app.kubernetes.io/part-of: amaltheasession-operator
+      # Allow remote access to amalthea's session reverse tunnel
+      renku.io/remote-tunnel: allow
+  policyTypes:
+    - Ingress
+  ingress:
+    - from:
+        - ipBlock:
+            cidr: 0.0.0.0/0
+      ports:
+        - protocol: TCP
+          # This port is hardcoded in Amalthea as the port for the reverse tunnel endpoint
+          port: 65531
+---
+apiVersion: networking.k8s.io/v1
+kind: NetworkPolicy
 metadata:
   name: {{ template "renku.fullname" . }}-secrets-storage
   labels: