diff --git a/cmd/deploy.yaml b/cmd/deploy.yaml
index 07ac0c8..f9d725d 100644
--- a/cmd/deploy.yaml
+++ b/cmd/deploy.yaml
@@ -53,7 +53,6 @@ spec:
   selector:
     app: APP
 ---
-# File autogenerated by ./scripts/gen-certs.sh
 apiVersion: v1
 data:
   cert.pem: CA_BUNDLE
@@ -82,7 +81,7 @@ webhooks:
         path: /
       caBundle: CA_BUNDLE
     rules:
-      - operations: ["CREATE", "UPDATE"]
-        apiGroups: ["*"]
-        apiVersions: ["*"]
-        resources: ["CiliumEnvoyConfig"]
+      - operations: ["UPDATE", "CREATE"]
+        apiGroups: ["cilium.io"]
+        apiVersions: ["v2"]
+        resources: ["ciliumenvoyconfigs"]
\ No newline at end of file
diff --git a/cmd/server.go b/cmd/server.go
index b911989..5c9e8dc 100644
--- a/cmd/server.go
+++ b/cmd/server.go
@@ -97,7 +97,7 @@ var (
 									if filter["name"] == "envoy.filters.network.http_connection_manager" {
 										upgradeConfigs := filter["upgradeConfigs"].([]interface{})
 										upgradeConfigs = append(upgradeConfigs, map[string]interface{}{
-											"upgradeType": "websoctailscale-control-protocolket",
+											"upgradeType": "tailscale-control-protocol",
 										})
 										filter["upgradeConfigs"] = upgradeConfigs
 										filter["useRemoteAddress"] = true