diff --git a/pkg/utils/apiresources.go b/pkg/utils/apiresources.go
index 4ad69df54..bfb37c180 100644
--- a/pkg/utils/apiresources.go
+++ b/pkg/utils/apiresources.go
@@ -40,6 +40,18 @@ var (
 		Kind:    "ServiceImport",
 	}
 
+	trafficManagerProfileGVK = schema.GroupVersionKind{
+		Group:   NetworkingGroupName,
+		Version: "v1alpha1",
+		Kind:    "TrafficManagerProfile",
+	}
+
+	trafficManagerBackendGVK = schema.GroupVersionKind{
+		Group:   NetworkingGroupName,
+		Version: "v1alpha1",
+		Kind:    "TrafficManagerBackend",
+	}
+
 	// we use `;` to separate the different api groups
 	apiGroupSepToken = ";"
 )
@@ -81,7 +93,10 @@ func NewResourceConfig(isAllowList bool) *ResourceConfig {
 	r.AddGroup(metricsV1beta1.GroupName)
 	r.AddGroupVersionKind(corev1PodGVK)
 	r.AddGroupVersionKind(corev1NodeGVK)
+	// disable networking resources
 	r.AddGroupVersionKind(serviceImportGVK)
+	r.AddGroupVersionKind(trafficManagerProfileGVK)
+	r.AddGroupVersionKind(trafficManagerBackendGVK)
 	return r
 }
 
diff --git a/pkg/utils/apiresources_test.go b/pkg/utils/apiresources_test.go
index 9457f62b8..329b5eec5 100644
--- a/pkg/utils/apiresources_test.go
+++ b/pkg/utils/apiresources_test.go
@@ -288,6 +288,21 @@ func TestDefaultResourceConfigGroupVersionKindParse(t *testing.T) {
 			Version: "v1beta1",
 			Kind:    "Event",
 		},
+		{
+			Group:   "networking.fleet.azure.com",
+			Version: "v1alpha1",
+			Kind:    "ServiceImport",
+		},
+		{
+			Group:   "networking.fleet.azure.com",
+			Version: "v1alpha1",
+			Kind:    "TrafficManagerProfile",
+		},
+		{
+			Group:   "networking.fleet.azure.com",
+			Version: "v1alpha1",
+			Kind:    "TrafficManagerBackend",
+		},
 	}
 
 	resourcesNotInDefaultResourcesList := []schema.GroupVersionKind{
@@ -306,6 +321,11 @@ func TestDefaultResourceConfigGroupVersionKindParse(t *testing.T) {
 			Version: "v1",
 			Kind:    "Event",
 		},
+		{
+			Group:   "networking.fleet.azure.com",
+			Version: "v1alpha1",
+			Kind:    "ServiceExport",
+		},
 	}
 
 	tests := map[string]struct {