diff --git a/hack/import-restrictions.yaml b/hack/import-restrictions.yaml
index 55dfe9b1a72..6bc64e6ea9c 100644
--- a/hack/import-restrictions.yaml
+++ b/hack/import-restrictions.yaml
@@ -126,3 +126,24 @@
   - k8s.io/cli-runtime
   - k8s.io/client-go
   - k8s.io/sample-cli-plugin
+
+- baseImportPath: "./vendor/k8s.io/kube-controller-manager/"
+  allowedImports:
+  - k8s.io/apimachinery
+  - k8s.io/apiserver
+  - k8s.io/utils
+
+- baseImportPath: "./vendor/k8s.io/kube-proxy/"
+  allowedImports:
+  - k8s.io/apimachinery
+
+- baseImportPath: "./vendor/k8s.io/kube-scheduler/"
+  allowedImports:
+  - k8s.io/apimachinery
+  - k8s.io/apiserver
+  - k8s.io/utils
+
+- baseImportPath: "./vendor/k8s.io/kubelet/"
+  allowedImports:
+  - k8s.io/api
+  - k8s.io/apimachinery