diff --git a/kuryr_kubernetes/controller/drivers/namespace_security_groups.py b/kuryr_kubernetes/controller/drivers/namespace_security_groups.py
index e4e2b87d9..2684b7541 100644
--- a/kuryr_kubernetes/controller/drivers/namespace_security_groups.py
+++ b/kuryr_kubernetes/controller/drivers/namespace_security_groups.py
@@ -99,7 +99,7 @@ def _parse_rules(direction, crd, namespace):
         crd_rules = crd['spec'].get('egressSgRules')
 
     matched = False
-    rule_list = policy.get(direction, None)
+    rule_list = policy.get(direction, [])
     for rule_block in rule_list:
         for rule in rule_block.get(rule_direction, []):
             pod_selector = rule.get('podSelector')
diff --git a/kuryr_kubernetes/controller/drivers/network_policy_security_groups.py b/kuryr_kubernetes/controller/drivers/network_policy_security_groups.py
index 69fda9c75..a6e11e79c 100644
--- a/kuryr_kubernetes/controller/drivers/network_policy_security_groups.py
+++ b/kuryr_kubernetes/controller/drivers/network_policy_security_groups.py
@@ -92,7 +92,7 @@ def _parse_rules(direction, crd, pod):
         crd_rules = crd['spec'].get('egressSgRules')
 
     matched = False
-    rule_list = policy.get(direction, None)
+    rule_list = policy.get(direction, [])
     for rule_block in rule_list:
         for rule in rule_block.get(rule_direction, []):
             namespace_selector = rule.get('namespaceSelector')