diff --git a/roles/base/templates/iptables/iptables.kojibuilder b/roles/base/templates/iptables/iptables.kojibuilder
index 4d8d0036ea..def2052dbd 100644
--- a/roles/base/templates/iptables/iptables.kojibuilder
+++ b/roles/base/templates/iptables/iptables.kojibuilder
@@ -27,8 +27,10 @@
 {% endfor %}
 {% endif %}
 
+{% if host in groups['staging'] %}
 # osbuild api for osbuild koji plugin
 -A OUTPUT -p tcp --dport 443 -m set --match-set osbuildapi dst -j ACCEPT
+{% endif %}
 
 # kojipkgs
 {% if host in groups['buildvm_s390x'] %}