diff --git a/amethyst/kubernetes/grafana/deps/grafana-postgres-networkpolicy.yaml b/amethyst/kubernetes/grafana/deps/grafana-postgres-networkpolicy.yaml
index 6ede316d..5049209a 100644
--- a/amethyst/kubernetes/grafana/deps/grafana-postgres-networkpolicy.yaml
+++ b/amethyst/kubernetes/grafana/deps/grafana-postgres-networkpolicy.yaml
@@ -25,6 +25,15 @@ spec:
         - ports:
             - protocol: TCP
               port: "5432"
+    - # connection from cnpg
+      fromEndpoints:
+        - matchLabels:
+            k8s:io.kubernetes.pod.namespace: cnpg
+            app.kubernetes.io/instance: cnpg
+      toPorts:
+        - ports:
+            - protocol: TCP
+              port: "8000"
   egress:
     - # dns resolution
       toEndpoints: