From e478266d1342ed1eb6b51cbc4adf0ec1dece693f Mon Sep 17 00:00:00 2001 From: Chris Tauchen Date: Fri, 16 Oct 2026 12:56:13 +0100 Subject: [PATCH 1/4] Fix NetworkSet scope, name rule, and labels text (next) --- calico/reference/resources/networkset.mdx | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/calico/reference/resources/networkset.mdx b/calico/reference/resources/networkset.mdx index 519b8c7ad0..6335ada6a0 100644 --- a/calico/reference/resources/networkset.mdx +++ b/calico/reference/resources/networkset.mdx @@ -10,7 +10,7 @@ coming from (or going to) external, non-$[prodname], networks. `NetworkSet` is a namespaced resource. A `NetworkSet` in a specific namespace only applies to [network policies](networkpolicy.mdx) -in that namespace. Two resources are in the same namespace if the `namespace` +in that namespace, unless a policy rule uses a `namespaceSelector`. Rules in global network policies can match network sets in any namespace. Two resources are in the same namespace if the `namespace` value is set the same on both. (See [GlobalNetworkSet](globalnetworkset.mdx) for non-namespaced network sets.) For `calicoctl` commands that specify a resource type on the CLI, the following @@ -53,9 +53,9 @@ spec: | Field | Description | Accepted Values | Schema | Default | | --------- | ------------------------------------------------------------------ | ------------------------------------------------- | ------ | --------- | -| name | The name of this network set. Required. | Lower-case alphanumeric with optional `_` or `-`. | string | | +| name | The name of this network set. Required. | Lower-case alphanumeric with optional `-` or `.`. | string | | | namespace | Namespace provides an additional qualification to a resource name. | | string | "default" | -| labels | A set of labels to apply to this endpoint. | | map | | +| labels | A set of labels to apply to this network set. | | map | | ### Spec From 161ee7fd96b2e3cd2ed8d1c4b50bcc78b490156b Mon Sep 17 00:00:00 2001 From: Chris Tauchen Date: Fri, 16 Oct 2026 12:56:14 +0100 Subject: [PATCH 2/4] Fix NetworkSet scope, name rule, and labels text (3.33) --- .../version-3.33/reference/resources/networkset.mdx | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/calico_versioned_docs/version-3.33/reference/resources/networkset.mdx b/calico_versioned_docs/version-3.33/reference/resources/networkset.mdx index 519b8c7ad0..6335ada6a0 100644 --- a/calico_versioned_docs/version-3.33/reference/resources/networkset.mdx +++ b/calico_versioned_docs/version-3.33/reference/resources/networkset.mdx @@ -10,7 +10,7 @@ coming from (or going to) external, non-$[prodname], networks. `NetworkSet` is a namespaced resource. A `NetworkSet` in a specific namespace only applies to [network policies](networkpolicy.mdx) -in that namespace. Two resources are in the same namespace if the `namespace` +in that namespace, unless a policy rule uses a `namespaceSelector`. Rules in global network policies can match network sets in any namespace. Two resources are in the same namespace if the `namespace` value is set the same on both. (See [GlobalNetworkSet](globalnetworkset.mdx) for non-namespaced network sets.) For `calicoctl` commands that specify a resource type on the CLI, the following @@ -53,9 +53,9 @@ spec: | Field | Description | Accepted Values | Schema | Default | | --------- | ------------------------------------------------------------------ | ------------------------------------------------- | ------ | --------- | -| name | The name of this network set. Required. | Lower-case alphanumeric with optional `_` or `-`. | string | | +| name | The name of this network set. Required. | Lower-case alphanumeric with optional `-` or `.`. | string | | | namespace | Namespace provides an additional qualification to a resource name. | | string | "default" | -| labels | A set of labels to apply to this endpoint. | | map | | +| labels | A set of labels to apply to this network set. | | map | | ### Spec From 491cf81ae3b11904d7b0e222b0a204a31c2e1f70 Mon Sep 17 00:00:00 2001 From: Chris Tauchen Date: Fri, 16 Oct 2026 12:56:14 +0100 Subject: [PATCH 3/4] Fix NetworkSet scope, name rule, and labels text (3.32) --- .../version-3.32/reference/resources/networkset.mdx | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/calico_versioned_docs/version-3.32/reference/resources/networkset.mdx b/calico_versioned_docs/version-3.32/reference/resources/networkset.mdx index 519b8c7ad0..6335ada6a0 100644 --- a/calico_versioned_docs/version-3.32/reference/resources/networkset.mdx +++ b/calico_versioned_docs/version-3.32/reference/resources/networkset.mdx @@ -10,7 +10,7 @@ coming from (or going to) external, non-$[prodname], networks. `NetworkSet` is a namespaced resource. A `NetworkSet` in a specific namespace only applies to [network policies](networkpolicy.mdx) -in that namespace. Two resources are in the same namespace if the `namespace` +in that namespace, unless a policy rule uses a `namespaceSelector`. Rules in global network policies can match network sets in any namespace. Two resources are in the same namespace if the `namespace` value is set the same on both. (See [GlobalNetworkSet](globalnetworkset.mdx) for non-namespaced network sets.) For `calicoctl` commands that specify a resource type on the CLI, the following @@ -53,9 +53,9 @@ spec: | Field | Description | Accepted Values | Schema | Default | | --------- | ------------------------------------------------------------------ | ------------------------------------------------- | ------ | --------- | -| name | The name of this network set. Required. | Lower-case alphanumeric with optional `_` or `-`. | string | | +| name | The name of this network set. Required. | Lower-case alphanumeric with optional `-` or `.`. | string | | | namespace | Namespace provides an additional qualification to a resource name. | | string | "default" | -| labels | A set of labels to apply to this endpoint. | | map | | +| labels | A set of labels to apply to this network set. | | map | | ### Spec From 86ef5c1d4e8b65ed11d2ed9f4c68bcfb6325de16 Mon Sep 17 00:00:00 2001 From: Chris Tauchen Date: Fri, 16 Oct 2026 12:56:14 +0100 Subject: [PATCH 4/4] Fix NetworkSet scope, name rule, and labels text (3.31) --- .../version-3.31/reference/resources/networkset.mdx | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/calico_versioned_docs/version-3.31/reference/resources/networkset.mdx b/calico_versioned_docs/version-3.31/reference/resources/networkset.mdx index 774c8c0409..5b36b6260a 100644 --- a/calico_versioned_docs/version-3.31/reference/resources/networkset.mdx +++ b/calico_versioned_docs/version-3.31/reference/resources/networkset.mdx @@ -10,7 +10,7 @@ coming from (or going to) external, non-$[prodname], networks. `NetworkSet` is a namespaced resource. A `NetworkSet` in a specific namespace only applies to [network policies](networkpolicy.mdx) -in that namespace. Two resources are in the same namespace if the `namespace` +in that namespace, unless a policy rule uses a `namespaceSelector`. Rules in global network policies can match network sets in any namespace. Two resources are in the same namespace if the `namespace` value is set the same on both. (See [GlobalNetworkSet](globalnetworkset.mdx) for non-namespaced network sets.) For `calicoctl` commands that specify a resource type on the CLI, the following @@ -53,9 +53,9 @@ spec: | Field | Description | Accepted Values | Schema | Default | | --------- | ------------------------------------------------------------------ | ------------------------------------------------- | ------ | --------- | -| name | The name of this network set. Required. | Lower-case alphanumeric with optional `_` or `-`. | string | | +| name | The name of this network set. Required. | Lower-case alphanumeric with optional `-` or `.`. | string | | | namespace | Namespace provides an additional qualification to a resource name. | | string | "default" | -| labels | A set of labels to apply to this endpoint. | | map | | +| labels | A set of labels to apply to this network set. | | map | | ### Spec