diff --git a/api/v1beta1/service_options.go b/api/v1beta1/service_options.go
index 885efb6b..dfdcc265 100644
--- a/api/v1beta1/service_options.go
+++ b/api/v1beta1/service_options.go
@@ -8,6 +8,6 @@ type ServiceOptions struct {
 	AdditionalMetadata *AdditionalMetadataSpec `json:"additionalMetadata,omitempty"`
 	// Block or deny certain type of Services. Optional.
 	AllowedServices *AllowedServices `json:"allowedServices,omitempty"`
-	// Specifies the external IPs that can be used in Services with type ClusterIP. An empty list means all the IPs are allowed. Optional.
+	// Specifies the external IPs that can be used in Services with type ClusterIP. An empty list means no IPs are allowed. Optional.
 	ExternalServiceIPs *ExternalServiceIPsSpec `json:"externalIPs,omitempty"`
 }
diff --git a/charts/capsule/crds/tenant-crd.yaml b/charts/capsule/crds/tenant-crd.yaml
index cbb07f71..5e578775 100644
--- a/charts/capsule/crds/tenant-crd.yaml
+++ b/charts/capsule/crds/tenant-crd.yaml
@@ -1143,7 +1143,7 @@ spec:
                           type: object
                       type: object
                     externalIPs:
-                      description: Specifies the external IPs that can be used in Services with type ClusterIP. An empty list means all the IPs are allowed. Optional.
+                      description: Specifies the external IPs that can be used in Services with type ClusterIP. An empty list means no IPs are allowed. Optional.
                       properties:
                         allowed:
                           items:
diff --git a/config/crd/bases/capsule.clastix.io_tenants.yaml b/config/crd/bases/capsule.clastix.io_tenants.yaml
index e6250698..edcf0931 100644
--- a/config/crd/bases/capsule.clastix.io_tenants.yaml
+++ b/config/crd/bases/capsule.clastix.io_tenants.yaml
@@ -1155,7 +1155,7 @@ spec:
                         type: boolean
                     type: object
                   externalIPs:
-                    description: Specifies the external IPs that can be used in Services with type ClusterIP. An empty list means all the IPs are allowed. Optional.
+                    description: Specifies the external IPs that can be used in Services with type ClusterIP. An empty list means no IPs are allowed. Optional.
                     properties:
                       allowed:
                         items:
diff --git a/config/install.yaml b/config/install.yaml
index b63973fb..aa571daa 100644
--- a/config/install.yaml
+++ b/config/install.yaml
@@ -1234,7 +1234,7 @@ spec:
                         type: boolean
                     type: object
                   externalIPs:
-                    description: Specifies the external IPs that can be used in Services with type ClusterIP. An empty list means all the IPs are allowed. Optional.
+                    description: Specifies the external IPs that can be used in Services with type ClusterIP. An empty list means no IPs are allowed. Optional.
                     properties:
                       allowed:
                         items: