We want to create an Ingress network policy for a given port on pod that receives admission webhooks from kubernetes. We do not want to allow any other pod on the cluster to connect to this port.

Therefore, we have to know from which pod the webhooks originate? Is it kube-apiserver?