diff --git a/infrastructure/k8up/kustomization.yaml b/infrastructure/k8up/kustomization.yaml
index a3f14a8c406a477fd9d08f7cba27eaf3a3099741..d8d96baaccc22c1627ab7450eec1142d9a01797e 100644
--- a/infrastructure/k8up/kustomization.yaml
+++ b/infrastructure/k8up/kustomization.yaml
@@ -7,3 +7,6 @@ resources:
   - k8up-crd.yaml
   - release.yaml
   - ../../shared/networkpolicies/allow-from-same-namespace.yaml
+  - ../../shared/networkpolicies/allow-from-monitoring.yaml
+patchesStrategicMerge:
+  - networkpolicy.yaml
diff --git a/infrastructure/k8up/networkpolicy.yaml b/infrastructure/k8up/networkpolicy.yaml
new file mode 100644
index 0000000000000000000000000000000000000000..52b4c948f55b3261f86cb90a4cee9db9dfd08f70
--- /dev/null
+++ b/infrastructure/k8up/networkpolicy.yaml
@@ -0,0 +1,10 @@
+---
+apiVersion: networking.k8s.io/v1
+kind: NetworkPolicy
+metadata:
+  name: allow-from-monitoring
+spec:
+  podSelector:
+    matchLabels:
+      app.kubernetes.io/instance: k8up
+      app.kubernetes.io/name: k8up