diff --git a/calico/reference/resources/networkset.mdx b/calico/reference/resources/networkset.mdx
index 519b8c7ad0..6335ada6a0 100644
--- a/calico/reference/resources/networkset.mdx
+++ b/calico/reference/resources/networkset.mdx
@@ -10,7 +10,7 @@ coming from (or going to) external, non-$[prodname], networks.
 
 `NetworkSet` is a namespaced resource. A `NetworkSet` in a specific namespace
 only applies to [network policies](networkpolicy.mdx)
-in that namespace. Two resources are in the same namespace if the `namespace`
+in that namespace, unless a policy rule uses a `namespaceSelector`. Rules in global network policies can match network sets in any namespace. Two resources are in the same namespace if the `namespace`
 value is set the same on both. (See [GlobalNetworkSet](globalnetworkset.mdx) for non-namespaced network sets.)
 
 For `calicoctl` commands that specify a resource type on the CLI, the following
@@ -53,9 +53,9 @@ spec:
 
 | Field     | Description                                                        | Accepted Values                                   | Schema | Default   |
 | --------- | ------------------------------------------------------------------ | ------------------------------------------------- | ------ | --------- |
-| name      | The name of this network set. Required.                            | Lower-case alphanumeric with optional `_` or `-`. | string |           |
+| name      | The name of this network set. Required.                            | Lower-case alphanumeric with optional `-` or `.`. | string |           |
 | namespace | Namespace provides an additional qualification to a resource name. |                                                   | string | "default" |
-| labels    | A set of labels to apply to this endpoint.                         |                                                   | map    |           |
+| labels    | A set of labels to apply to this network set.                         |                                                   | map    |           |
 
 ### Spec
 
diff --git a/calico_versioned_docs/version-3.31/reference/resources/networkset.mdx b/calico_versioned_docs/version-3.31/reference/resources/networkset.mdx
index 774c8c0409..5b36b6260a 100644
--- a/calico_versioned_docs/version-3.31/reference/resources/networkset.mdx
+++ b/calico_versioned_docs/version-3.31/reference/resources/networkset.mdx
@@ -10,7 +10,7 @@ coming from (or going to) external, non-$[prodname], networks.
 
 `NetworkSet` is a namespaced resource. A `NetworkSet` in a specific namespace
 only applies to [network policies](networkpolicy.mdx)
-in that namespace. Two resources are in the same namespace if the `namespace`
+in that namespace, unless a policy rule uses a `namespaceSelector`. Rules in global network policies can match network sets in any namespace. Two resources are in the same namespace if the `namespace`
 value is set the same on both. (See [GlobalNetworkSet](globalnetworkset.mdx) for non-namespaced network sets.)
 
 For `calicoctl` commands that specify a resource type on the CLI, the following
@@ -53,9 +53,9 @@ spec:
 
 | Field     | Description                                                        | Accepted Values                                   | Schema | Default   |
 | --------- | ------------------------------------------------------------------ | ------------------------------------------------- | ------ | --------- |
-| name      | The name of this network set. Required.                            | Lower-case alphanumeric with optional `_` or `-`. | string |           |
+| name      | The name of this network set. Required.                            | Lower-case alphanumeric with optional `-` or `.`. | string |           |
 | namespace | Namespace provides an additional qualification to a resource name. |                                                   | string | "default" |
-| labels    | A set of labels to apply to this endpoint.                         |                                                   | map    |           |
+| labels    | A set of labels to apply to this network set.                         |                                                   | map    |           |
 
 ### Spec
 
diff --git a/calico_versioned_docs/version-3.32/reference/resources/networkset.mdx b/calico_versioned_docs/version-3.32/reference/resources/networkset.mdx
index 519b8c7ad0..6335ada6a0 100644
--- a/calico_versioned_docs/version-3.32/reference/resources/networkset.mdx
+++ b/calico_versioned_docs/version-3.32/reference/resources/networkset.mdx
@@ -10,7 +10,7 @@ coming from (or going to) external, non-$[prodname], networks.
 
 `NetworkSet` is a namespaced resource. A `NetworkSet` in a specific namespace
 only applies to [network policies](networkpolicy.mdx)
-in that namespace. Two resources are in the same namespace if the `namespace`
+in that namespace, unless a policy rule uses a `namespaceSelector`. Rules in global network policies can match network sets in any namespace. Two resources are in the same namespace if the `namespace`
 value is set the same on both. (See [GlobalNetworkSet](globalnetworkset.mdx) for non-namespaced network sets.)
 
 For `calicoctl` commands that specify a resource type on the CLI, the following
@@ -53,9 +53,9 @@ spec:
 
 | Field     | Description                                                        | Accepted Values                                   | Schema | Default   |
 | --------- | ------------------------------------------------------------------ | ------------------------------------------------- | ------ | --------- |
-| name      | The name of this network set. Required.                            | Lower-case alphanumeric with optional `_` or `-`. | string |           |
+| name      | The name of this network set. Required.                            | Lower-case alphanumeric with optional `-` or `.`. | string |           |
 | namespace | Namespace provides an additional qualification to a resource name. |                                                   | string | "default" |
-| labels    | A set of labels to apply to this endpoint.                         |                                                   | map    |           |
+| labels    | A set of labels to apply to this network set.                         |                                                   | map    |           |
 
 ### Spec
 
diff --git a/calico_versioned_docs/version-3.33/reference/resources/networkset.mdx b/calico_versioned_docs/version-3.33/reference/resources/networkset.mdx
index 519b8c7ad0..6335ada6a0 100644
--- a/calico_versioned_docs/version-3.33/reference/resources/networkset.mdx
+++ b/calico_versioned_docs/version-3.33/reference/resources/networkset.mdx
@@ -10,7 +10,7 @@ coming from (or going to) external, non-$[prodname], networks.
 
 `NetworkSet` is a namespaced resource. A `NetworkSet` in a specific namespace
 only applies to [network policies](networkpolicy.mdx)
-in that namespace. Two resources are in the same namespace if the `namespace`
+in that namespace, unless a policy rule uses a `namespaceSelector`. Rules in global network policies can match network sets in any namespace. Two resources are in the same namespace if the `namespace`
 value is set the same on both. (See [GlobalNetworkSet](globalnetworkset.mdx) for non-namespaced network sets.)
 
 For `calicoctl` commands that specify a resource type on the CLI, the following
@@ -53,9 +53,9 @@ spec:
 
 | Field     | Description                                                        | Accepted Values                                   | Schema | Default   |
 | --------- | ------------------------------------------------------------------ | ------------------------------------------------- | ------ | --------- |
-| name      | The name of this network set. Required.                            | Lower-case alphanumeric with optional `_` or `-`. | string |           |
+| name      | The name of this network set. Required.                            | Lower-case alphanumeric with optional `-` or `.`. | string |           |
 | namespace | Namespace provides an additional qualification to a resource name. |                                                   | string | "default" |
-| labels    | A set of labels to apply to this endpoint.                         |                                                   | map    |           |
+| labels    | A set of labels to apply to this network set.                         |                                                   | map    |           |
 
 ### Spec