diff --git a/kube/deploy/core/db/emqx/cluster/netpol.yaml b/kube/deploy/core/db/emqx/cluster/netpol.yaml
index d4ed0e2b..7fedc13e 100644
--- a/kube/deploy/core/db/emqx/cluster/netpol.yaml
+++ b/kube/deploy/core/db/emqx/cluster/netpol.yaml
@@ -57,7 +57,7 @@ spec:
             io.kubernetes.pod.namespace: emqx
             app.kubernetes.io/name: emqx-operator
     - fromCIDRSet:
-        - cidr: "${IP_ROBOROCK}"
+        - cidr: "${IP_ROBOROCK}/32"
       toPorts: *ports
   egress:
     # same cluster