diff --git a/containers/kubernetes/how-to/manage-allowed-ips.mdx b/containers/kubernetes/how-to/manage-allowed-ips.mdx
new file mode 100644
index 0000000000..e9b10a1f84
--- /dev/null
+++ b/containers/kubernetes/how-to/manage-allowed-ips.mdx
@@ -0,0 +1,50 @@
+---
+meta:
+ title: Managing allowed IP addresses for Kubernetes products
+ description: Learn how to manage allowed IP addresses for your Kubernetes Kapsule and Kosmos clusters. Configure access restrictions with our step-by-step guide.
+content:
+ h1: Managing allowed IP addresses for Kubernetes products
+ paragraph: Learn how to manage allowed IP addresses for your Kubernetes Kapsule and Kosmos clusters. Configure access restrictions with our step-by-step guide.
+tags: kubernetes kapsule kosmos
+dates:
+ validation: 2024-12-24
+ posted: 2024-12-24
+categories:
+ - containers
+---
+
+Restricting IPs on Kubernetes Kapsule or Kosmos clusters enhances security by limiting access to only trusted sources. Since only IP addresses and networks specified by you can interact with your clusters, you reduce the risk of unauthorized access and potential attacks.
+
+The default entry `0.0.0.0/0` enables any host to establish a connection.
+
+
+
+- A Scaleway account logged into the [Scaleway console](https://console.scaleway.com)
+- [Owner](/identity-and-access-management/iam/concepts/#owner) status or [IAM permissions](/identity-and-access-management/iam/concepts/#permission) allowing actions in the intended Organization
+- [Created](/containers/kubernetes/how-to/create-cluster) a Kubernetes Kapsule or Kosmos cluster
+
+
+ Allowed IP configuration is available for public networks only.
+
+
+## How to add an IP address
+
+1. Click **Kubernetes** in the **Containers** section of the [Scaleway console](https://console.scaleway.com). The **Kubernetes dashboard** appears.
+2. Select the cluster you wish to configure. The **Cluster information** page opens.
+3. Click the **Network** tab to display your cluster's network information. Your access control list appears in the **Allowed IPs for control plane** section.
+4. Click **Add allowed IP**. Enter the IP address or IP block in [CIDR notation](/network/ipam/concepts/#cidr-notation) (e.g., `198.51.100.135/32` for a single IP, `198.51.100.0/24` for an IP block), then click **Add IP(s)**.
+
+ To restore default settings and allow connections from all IPs, add `0.0.0.0/0` to the list.
+
+
+
+ For **Kosmos** multi-cloud clusters, allow connections from all Scaleway IP subnets to ensure proper functionality. Access from these IPs cannot be restricted. Refer to our [peering information](https://www.scaleway.com/en/peering/) for details on all Scaleway IP prefixes.
+
+
+## How to delete an IP address
+
+1. Click **Kubernetes** in the **Containers** section of the [Scaleway console](https://console.scaleway.com). The **Kubernetes dashboard** appears.
+2. Select the cluster you wish to configure. The **Cluster information** page opens.
+3. Click the **Network** tab to display your cluster's network information. Your access control list appears in the **Allowed IPs for control plane** section.
+4. Locate the IP address in your allowed list.
+5. Click next to the IP you want to delete. Confirm by typing **DELETE** in the pop-up, then click **Delete allowed IP** to confirm deletion.
\ No newline at end of file
diff --git a/menu/navigation.json b/menu/navigation.json
index 7a2adedaa9..0673f58955 100644
--- a/menu/navigation.json
+++ b/menu/navigation.json
@@ -1348,6 +1348,10 @@
"label": "Manage a Kosmos cluster",
"slug": "edit-kosmos-cluster"
},
+ {
+ "label": "Manage allowed IPs",
+ "slug": "manage-allowed-ips"
+ },
{
"label": "Connect to a cluster with kubectl",
"slug": "connect-cluster-kubectl"
@@ -4885,4 +4889,4 @@
],
"label": "Additional Services"
}
-]
\ No newline at end of file
+]