diff --git a/infrastructure/istio/manifests/mesh/authorization-policies.yaml b/infrastructure/istio/manifests/mesh/authorization-policies.yaml
index 9252818..eabe042 100644
--- a/infrastructure/istio/manifests/mesh/authorization-policies.yaml
+++ b/infrastructure/istio/manifests/mesh/authorization-policies.yaml
@@ -280,6 +280,11 @@ spec:
         - source:
             namespaces:
               - prometheus
+    # kube-apiserver webhook calls to netbird-operator webhook service (node IPs)
+    - from:
+        - source:
+            ipBlocks:
+              - "172.28.101.0/24"
 
 ---
 # --- Netbird Operator: Allow intra-namespace + Prometheus ---