diff --git a/values/system/ekman/kyverno/add-ingress-whitelist.yaml b/values/system/ekman/kyverno/add-ingress-whitelist.yaml
index 20c32017..bc686640 100644
--- a/values/system/ekman/kyverno/add-ingress-whitelist.yaml
+++ b/values/system/ekman/kyverno/add-ingress-whitelist.yaml
@@ -11,7 +11,7 @@ spec:
       patchStrategicMerge:
         metadata:
           annotations:
-            nginx.ingress.kubernetes.io/whitelist-source-range: 10.0.0.0/8,172.16.0.0/12,192.168.0.0/16
+            nginx.ingress.kubernetes.io/whitelist-source-range: 10.0.0.0/8,172.16.0.0/12,192.168.0.0/16,100.64.0.0/12
     match:
       resources:
         kinds:
diff --git a/values/system/rossby/kyverno/add-ingress-whitelist.yaml b/values/system/rossby/kyverno/add-ingress-whitelist.yaml
index 20c32017..bc686640 100644
--- a/values/system/rossby/kyverno/add-ingress-whitelist.yaml
+++ b/values/system/rossby/kyverno/add-ingress-whitelist.yaml
@@ -11,7 +11,7 @@ spec:
       patchStrategicMerge:
         metadata:
           annotations:
-            nginx.ingress.kubernetes.io/whitelist-source-range: 10.0.0.0/8,172.16.0.0/12,192.168.0.0/16
+            nginx.ingress.kubernetes.io/whitelist-source-range: 10.0.0.0/8,172.16.0.0/12,192.168.0.0/16,100.64.0.0/12
     match:
       resources:
         kinds: