From 183c5a0a5a0a4f72c8e9468e17f386bbcf52b360 Mon Sep 17 00:00:00 2001
From: Hussein Galal <hussein.galal.ahmed.11@gmail.com>
Date: Fri, 3 Apr 2026 15:32:32 +0200
Subject: [PATCH] Fix networkpolicy for kube-ovn network (#691)

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>
---
 pkg/controller/cluster/cluster.go | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/pkg/controller/cluster/cluster.go b/pkg/controller/cluster/cluster.go
index 749fa3c9..b1728589 100644
--- a/pkg/controller/cluster/cluster.go
+++ b/pkg/controller/cluster/cluster.go
@@ -595,6 +595,10 @@ func (c *ClusterReconciler) ensureNetworkPolicy(ctx context.Context, cluster *v1
 								Except: []string{cluster.Status.ClusterCIDR},
 							},
 						},
+					},
+				},
+				{
+					To: []networkingv1.NetworkPolicyPeer{
 						{
 							NamespaceSelector: &metav1.LabelSelector{
 								MatchLabels: map[string]string{
@@ -602,6 +606,10 @@ func (c *ClusterReconciler) ensureNetworkPolicy(ctx context.Context, cluster *v1
 								},
 							},
 						},
+					},
+				},
+				{
+					To: []networkingv1.NetworkPolicyPeer{
 						{
 							NamespaceSelector: &metav1.LabelSelector{
 								MatchLabels: map[string]string{