Nginx ingress rule setup timeout with firewall

I am setting up a Kubernetes cluster with Nginx ingress. Install was ok. but after I set up firewall I start having issue with adding ingress rule.
This is post I used.
(https://www.linode.com/community/questions/19155/securing-k8s-cluster#answer-81275)

If I try to create a rule it fails with timeout. It works with firewall off, so I am pretty sure it is something to do with firewall.
Does anyone know which port or ip should I open?

--- push.yaml

apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
  name: ingress-pushserver
spec:
  rules:
  - host: mypush.server.com
    http:
      paths:
      - path: /subpath
        pathType: Prefix
        backend:
          service:
            name: svc-push
            port:
              number: 80
  ingressClassName: nginx
---

and this is error output.

$>kube$ kubectl create -f push.yaml
Error from server (InternalError): error when creating "push.yaml": Internal error occurred: failed calling webhook "validate.nginx.ingress.kubernetes.io": failed to call webhook: Post "https://ingress-nginx-controller-admission.default.svc:443/networking/v1/ingresses?timeout=10s": context deadline exceeded