diff --git a/contrib/networkpolicies/kustomization.yaml b/contrib/networkpolicies/kustomization.yaml
index 290d6f23d3..f150120d75 100644
--- a/contrib/networkpolicies/kustomization.yaml
+++ b/contrib/networkpolicies/kustomization.yaml
@@ -19,3 +19,4 @@ resources:
   - poddefaults.yaml
   - seldon.yaml
   - volumes-web-app.yaml
+  - tensorboards-web-app.yaml
diff --git a/contrib/networkpolicies/tensorboards-web-app.yaml b/contrib/networkpolicies/tensorboards-web-app.yaml
new file mode 100644
index 0000000000..54f912916f
--- /dev/null
+++ b/contrib/networkpolicies/tensorboards-web-app.yaml
@@ -0,0 +1,25 @@
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+  name: tensorboards-web-app
+  namespace: kubeflow
+spec:
+  podSelector:
+    matchExpressions:
+      - key: app
+        operator: In
+        values:
+          - tensorboards-web-app
+  ingress:
+    - from:
+        - namespaceSelector:
+            matchExpressions:
+              - key: kubernetes.io/metadata.name
+                operator: In
+                values:
+                  - istio-system
+      ports:
+        - protocol: TCP
+          port: 5000
+  policyTypes:
+    - Ingress