diff --git a/hack/prepare-for-integration-tests.sh b/hack/prepare-for-integration-tests.sh
index 88ee3f90c..ce7464f87 100755
--- a/hack/prepare-for-integration-tests.sh
+++ b/hack/prepare-for-integration-tests.sh
@@ -1,6 +1,6 @@
 #!/usr/bin/env bash
 
-# Copyright 2020-2025 the Pinniped contributors. All Rights Reserved.
+# Copyright 2020-2026 the Pinniped contributors. All Rights Reserved.
 # SPDX-License-Identifier: Apache-2.0
 
 #
@@ -431,6 +431,10 @@ spec:
       podSelector:
         matchLabels:
           app: proxy
+  # Allowed to talk to the API Server (and other kube-system pods) which Kind puts in this IP range.
+  - to:
+    - ipBlock:
+        cidr: 172.18.0.0/16 # Default internal KIND Docker bridge network
 ---
 apiVersion: networking.k8s.io/v1
 kind: NetworkPolicy
@@ -457,6 +461,10 @@ spec:
       podSelector:
         matchLabels:
           app: proxy
+  # Allowed to talk to the API Server (and other kube-system pods) which Kind puts in this IP range.
+  - to:
+    - ipBlock:
+        cidr: 172.18.0.0/16 # Default internal KIND Docker bridge network
 EOF
 fi