diff --git a/helm/cluster_setup/templates/kubelet-clusterwide-networkpolicy.yaml b/helm/cluster_setup/templates/kubelet-clusterwide-networkpolicy.yaml
index 7d58dde..3a878fd 100644
--- a/helm/cluster_setup/templates/kubelet-clusterwide-networkpolicy.yaml
+++ b/helm/cluster_setup/templates/kubelet-clusterwide-networkpolicy.yaml
@@ -10,7 +10,8 @@ spec:
     # prometheus -> kubelet
     - fromEndpoints:
         - matchLabels:
-            app: kube-prometheus-stack-prometheus
+            io.cilium.k8s.policy.serviceaccount: prometheus-kube-prometheus-prometheus
+            io.kubernetes.pod.namespace: observability
       toPorts:
         - ports:
             - port: '10250'