diff --git a/apps/k8s01/gitlab-runner/hetzner-runner.yaml b/apps/k8s01/gitlab-runner/hetzner-runner.yaml
index f365c43ebe422b6d9a567f636a7a210da51b3c08..af4252d2d49adec7b4af12c1db81905d9247d334 100644
--- a/apps/k8s01/gitlab-runner/hetzner-runner.yaml
+++ b/apps/k8s01/gitlab-runner/hetzner-runner.yaml
@@ -51,3 +51,23 @@ spec:
   resources:
     requests:
       storage: 1Gi
+---
+apiVersion: networking.k8s.io/v1
+kind: NetworkPolicy
+metadata:
+  name: allow-from-monitoring
+spec:
+  policyTypes:
+  - Ingress
+  ingress:
+  - from:
+    - namespaceSelector:
+        matchLabels:
+          monitoring.shivering-isles.com/network-access-required: "true"
+      podSelector:
+        matchLabels:
+          app.kubernetes.io/name: prometheus
+  podSelector:
+    matchLabels:
+      app: hetzner-runner-gitlab-runner
+      release: hetzner-runner
\ No newline at end of file