diff --git a/chart/templates/velero/values.yaml b/chart/templates/velero/values.yaml
index a54580a98a9758b08086d014905acd045e1c8541..1a4aece449ba0b32ab1c5fba742fe738820deeaf 100644
--- a/chart/templates/velero/values.yaml
+++ b/chart/templates/velero/values.yaml
@@ -34,4 +34,4 @@ initContainers:
 {{- end }}
 {{- end }}
 
-{{- end -}}
\ No newline at end of file
+{{- end -}}
diff --git a/chart/values.yaml b/chart/values.yaml
index a1d691152a1ecb77c4de698fb3f13d23b5f96a73..54563b6f761b0d3ead4a5b02f6cc605089c0aa51 100644
--- a/chart/values.yaml
+++ b/chart/values.yaml
@@ -96,6 +96,10 @@ flux:
 networkPolicies:
   # -- Toggle all package NetworkPolicies, can disable specific packages with `package.networkPolicies.enabled`
   enabled: true
+  # -- Control Plane CIDR, defaults to 0.0.0.0/0, use `kubectl cluster-info` to get the right value
+  # Must be an IP CIDR range (x.x.x.x/x - ideally with /32 for the specific IP)
+  # Used by package NetworkPolicies to allow Kube API access
+  controlPlaneCidr: 0.0.0.0/0
 
 # ----------------------------------------------------------------------------------------------------------------------
 # Istio
@@ -908,7 +912,7 @@ addons:
     git:
       repo: https://repo1.dso.mil/platform-one/big-bang/apps/cluster-utilities/velero.git
       path: "./chart"
-      tag: "2.21.1-bb.3"
+      tag: "2.21.1-bb.4"
 
     # -- Flux reconciliation overrides specifically for the Velero Package
     flux: {}