diff --git a/resources/oceanbox-cluster/network-policies/csi-addons-controller/allow-9070-host.yaml b/resources/oceanbox-cluster/network-policies/csi-addons-controller/allow-9070-host.yaml
new file mode 100644
index 00000000..49af9d1c
--- /dev/null
+++ b/resources/oceanbox-cluster/network-policies/csi-addons-controller/allow-9070-host.yaml
@@ -0,0 +1,16 @@
+apiVersion: "cilium.io/v2"
+kind: CiliumNetworkPolicy
+metadata:
+  name: allow-host-port-9070
+  namespace: csi-addons-system
+spec:
+  endpointSelector:
+    matchLabels:
+      app.kubernetes.io/name: csi-addons
+  egress:
+  - toEntities:
+    - host
+    toPorts:
+    - ports:
+      - port: "9070"
+        protocol: TCP