diff --git a/staging/src/k8s.io/apiextensions-apiserver/pkg/apis/.import-restrictions b/staging/src/k8s.io/apiextensions-apiserver/pkg/apis/.import-restrictions
new file mode 100644
index 00000000000..788c1125317
--- /dev/null
+++ b/staging/src/k8s.io/apiextensions-apiserver/pkg/apis/.import-restrictions
@@ -0,0 +1,9 @@
+inverseRules:
+  # Allow Internal packages only in apiextensions-apiserver itself, discourage use elsewhere.
+  - selectorRegexp: k8s[.]io/apiextensions-apiserver
+    allowedPrefixes:
+      - ''
+  # Forbid use of this package in other k8s.io packages.
+  - selectorRegexp: k8s[.]io
+    forbiddenPrefixes:
+      - ''
diff --git a/staging/src/k8s.io/apiextensions-apiserver/pkg/apis/apiextensions/v1/.import-restrictions b/staging/src/k8s.io/apiextensions-apiserver/pkg/apis/apiextensions/v1/.import-restrictions
new file mode 100644
index 00000000000..7408dd12124
--- /dev/null
+++ b/staging/src/k8s.io/apiextensions-apiserver/pkg/apis/apiextensions/v1/.import-restrictions
@@ -0,0 +1,5 @@
+inverseRules:
+  # Allow use of this package in all k8s.io packages.
+  - selectorRegexp: k8s[.]io
+    allowedPrefixes:
+      - ''
diff --git a/staging/src/k8s.io/apiextensions-apiserver/pkg/apis/apiextensions/v1beta1/.import-restrictions b/staging/src/k8s.io/apiextensions-apiserver/pkg/apis/apiextensions/v1beta1/.import-restrictions
new file mode 100644
index 00000000000..7408dd12124
--- /dev/null
+++ b/staging/src/k8s.io/apiextensions-apiserver/pkg/apis/apiextensions/v1beta1/.import-restrictions
@@ -0,0 +1,5 @@
+inverseRules:
+  # Allow use of this package in all k8s.io packages.
+  - selectorRegexp: k8s[.]io
+    allowedPrefixes:
+      - ''