diff --git a/charts/gardener-extension-shoot-kubecost/templates/deployment.yaml b/charts/gardener-extension-shoot-kubecost/templates/deployment.yaml
index 705df2e7..a1475f12 100644
--- a/charts/gardener-extension-shoot-kubecost/templates/deployment.yaml
+++ b/charts/gardener-extension-shoot-kubecost/templates/deployment.yaml
@@ -28,6 +28,8 @@ spec:
       labels:
         app.kubernetes.io/name: gardener-extension-{{ .Values.serviceName }}
         app.kubernetes.io/instance: {{ .Release.Name }}
+        networking.gardener.cloud/to-dns: allowed                                                                                                                                              │
+        networking.gardener.cloud/to-runtime-apiserver: allowed
     spec:
       {{- if gt (int .Values.replicaCount) 1 }}
       affinity: