diff --git a/config/hubs/pangeo-hubs.cluster.yaml b/config/hubs/pangeo-hubs.cluster.yaml
index 6f0124f865..c18eff7710 100644
--- a/config/hubs/pangeo-hubs.cluster.yaml
+++ b/config/hubs/pangeo-hubs.cluster.yaml
@@ -87,8 +87,6 @@ hubs:
                 scope: &staging_jhub_scope
                   - read:org
           singleuser: &staging_jhub_singleuser
-            networkPolicy:
-              enabled: false
             image:
               name: pangeo/pangeo-notebook
               tag: bcfacc5
diff --git a/deployer/tests/test-notebooks/daskhub/dask_test_notebook.ipynb b/deployer/tests/test-notebooks/daskhub/dask_test_notebook.ipynb
index 38f107a0c6..6fcc20f281 100644
--- a/deployer/tests/test-notebooks/daskhub/dask_test_notebook.ipynb
+++ b/deployer/tests/test-notebooks/daskhub/dask_test_notebook.ipynb
@@ -86,6 +86,15 @@
    "source": [
     "client.wait_for_workers(1)"
    ]
+  },
+  {
+   "cell_type": "code",
+   "execution_count": null,
+   "metadata": {},
+   "outputs": [],
+   "source": [
+    "cluster.scale(0)"
+   ]
   }
  ],
  "metadata": {
diff --git a/hub-templates/basehub/values.yaml b/hub-templates/basehub/values.yaml
index 2145557671..840f70af4f 100644
--- a/hub-templates/basehub/values.yaml
+++ b/hub-templates/basehub/values.yaml
@@ -206,6 +206,11 @@ jupyterhub:
                 matchLabels:
                   app: jupyterhub
                   component: proxy
+        # Allow traffic to the traefik pod from user pods. Needed for daskhubs.
+        - to:
+            - podSelector:
+                matchLabels:
+                  app.kubernetes.io/component: traefik
   hub:
     extraFiles:
       configurator-schema-default: