diff --git a/CHANGELOG.md b/CHANGELOG.md
index 6043e196..d27eb3f2 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -7,6 +7,10 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+### Fixed
+
+- Correct `CiliumNetworkPolicy` spec.
+
 ## [0.8.0] - 2023-12-19
 
 ### Added
diff --git a/helm/teleport-operator/templates/networkpolicy.yaml b/helm/teleport-operator/templates/networkpolicy.yaml
index cc19219c..967c8174 100644
--- a/helm/teleport-operator/templates/networkpolicy.yaml
+++ b/helm/teleport-operator/templates/networkpolicy.yaml
@@ -12,7 +12,8 @@ spec:
     - kube-apiserver
   ingress:
   - toPorts:
-    - 8080/tcp
+    - port: "8080"
+      protocol: "tcp"
   endpointSelector:
     matchLabels:
       {{- include "labels.selector" . | nindent 6 }}