diff --git a/doc/source/cluster/kubernetes/user-guides/k8s-events.md b/doc/source/cluster/kubernetes/user-guides/k8s-events.md
index a9067fa8b6f..fb89ab4dfc7 100644
--- a/doc/source/cluster/kubernetes/user-guides/k8s-events.md
+++ b/doc/source/cluster/kubernetes/user-guides/k8s-events.md
@@ -13,7 +13,7 @@ This guide describes how to enable and use platform events in the Ray Dashboard
 ## Prerequisites
 
 * **Ray version**: Ray 2.56.0 or later.
-* **Kubernetes Python client**: Install the `kubernetes` Python package in the Ray head pod's Python environment. The official `rayproject/ray` images include it. Add it to custom images.
+* **Kubernetes Python client**: Install the `kubernetes` Python package (`pip install kubernetes`) in the Ray head pod's Python environment. The official `rayproject/ray` images don't include it.
 * **Kubernetes cluster**: A Kubernetes cluster where you can deploy Ray workloads.
 
 ## Configure RBAC permissions
diff --git a/doc/source/cluster/kubernetes/user-guides/network-policy.md b/doc/source/cluster/kubernetes/user-guides/network-policy.md
index 8e84ac7a72a..a2c7771fb01 100644
--- a/doc/source/cluster/kubernetes/user-guides/network-policy.md
+++ b/doc/source/cluster/kubernetes/user-guides/network-policy.md
@@ -202,18 +202,21 @@ For `HTTPMode` and `SidecarMode`, there is no standalone submitter pod, so no ad
 
 When a `RayJob` targets a pre-existing cluster with `clusterSelector`, the cluster has no `RayJob` owner reference. The operator can't automatically add a submitter ingress rule. To allow the submitter pod to reach the head dashboard port, add an opt-in label to both the `RayCluster` ingress rule and the `RayJob` submitter pod template.
 
-On the `RayCluster`, add an ingress rule under `networkIsolation` that matches the opt-in label:
+On the `RayCluster`, add an ingress rule under `head.ingressRules` that matches the opt-in label:
 
 ```yaml
 spec:
-  networkIsolation:
+  networkPolicy:
     mode: DenyAll
-    ingressRules:
-    - from:
-      - podSelector:
-          matchLabels:
-            ray.io/allow-head-access: "true"
-      ports: [ { protocol: TCP, port: 8265 } ]
+    head:
+      ingressRules:
+      - from:
+        - podSelector:
+            matchLabels:
+              ray.io/allow-head-access: "true"
+        ports:
+        - port: 8265
+          protocol: TCP
 ```
 
 On the `RayJob`, set the same label on the submitter pod via `submitterPodTemplate`: