This is an automated email from the ASF dual-hosted git repository.
shreemaan-abhishek pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/apisix-ingress-controller.git
The following commit(s) were added to refs/heads/master by this push:
new ac4e6195 fix: allow webhook NetworkPolicy traffic on pod port 9443
(#2812)
ac4e6195 is described below
commit ac4e61951d36200634a7d49ee3d04685476a63d6
Author: Shreemaan Abhishek <[email protected]>
AuthorDate: Fri Jul 24 16:40:35 2026 +0800
fix: allow webhook NetworkPolicy traffic on pod port 9443 (#2812)
---
config/network-policy/allow-webhook-traffic.yaml | 4 +++-
1 file changed, 3 insertions(+), 1 deletion(-)
diff --git a/config/network-policy/allow-webhook-traffic.yaml
b/config/network-policy/allow-webhook-traffic.yaml
index e3f2f408..a1fd69b5 100644
--- a/config/network-policy/allow-webhook-traffic.yaml
+++ b/config/network-policy/allow-webhook-traffic.yaml
@@ -23,5 +23,7 @@ spec:
matchLabels:
webhook: enabled # Only from namespaces with this label
ports:
- - port: 443
+ # Match the webhook-server containerPort; NetworkPolicy evaluates the
+ # pod's destination port (post-Service DNAT), not the Service port.
+ - port: 9443
protocol: TCP
