diff --git a/infra/k8s/argo/refresh-deps-cache-template.yaml b/infra/k8s/argo/refresh-deps-cache-template.yaml
index 3bcc33218..309553a8b 100644
--- a/infra/k8s/argo/refresh-deps-cache-template.yaml
+++ b/infra/k8s/argo/refresh-deps-cache-template.yaml
@@ -25,11 +25,10 @@ spec:
   entrypoint: build
   podMetadata:
     labels:
-      # Reuse compile-and-deploy's egress allow-list (gitlab-shell:2222 for
+      # Reuse ci-pipeline label so the pod inherits argo-ci-pipeline netpol egress
       # clone, gitlab-registry:5000 for image push, crates.io HTTPS for cargo
-      # fetch). A dedicated `deps-cache-build` label would need a separate
       # NetworkPolicy clone — same egress targets, no functional difference.
-      app.kubernetes.io/component: compile-and-deploy
+      app.kubernetes.io/component: ci-pipeline
       app.kubernetes.io/part-of: foxhunt
   ttlStrategy:
     secondsAfterCompletion: 7200