diff --git a/k8s/network-policy.yaml b/k8s/network-policy.yaml
index b893680..1c1ecdc 100644
--- a/k8s/network-policy.yaml
+++ b/k8s/network-policy.yaml
@@ -30,6 +30,13 @@ spec:
     - protocol: TCP
       port: 8080
   egress:
+  # Allow Kubernetes API server (ServiceAdapter CRD loader)
+  - to:
+    - ipBlock:
+        cidr: 10.96.0.1/32
+    ports:
+    - protocol: TCP
+      port: 443
   # Allow DNS
   - to:
     - namespaceSelector: