From 18678e988ee01bab56a024ed0bc82a5674bece5f Mon Sep 17 00:00:00 2001
From: Admin Bot <admin@riotpiao.com>
Date: Wed, 26 Aug 2026 16:16:09 -0700
Subject: [PATCH] fix: allow egress to k8s API server in network policy

---
 k8s/network-policy.yaml | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/k8s/network-policy.yaml b/k8s/network-policy.yaml
index b893680..1c1ecdc 100644
--- a/k8s/network-policy.yaml
+++ b/k8s/network-policy.yaml
@@ -30,6 +30,13 @@ spec:
     - protocol: TCP
       port: 8080
   egress:
+  # Allow Kubernetes API server (ServiceAdapter CRD loader)
+  - to:
+    - ipBlock:
+        cidr: 10.96.0.1/32
+    ports:
+    - protocol: TCP
+      port: 443
   # Allow DNS
   - to:
     - namespaceSelector: