---
title: "Profile"
description: "Reference for the Profile resource in Calico Enterprise that groups labels and rules applied to endpoints."
product: "Calico Enterprise"
version: "3.23 (latest)"
section: "Reference"
canonical_url: "https://docs.tigera.io/calico-enterprise/latest/reference/resources/profile"
---

# Profile

A profile resource (`Profile`) represents a set of rules which are applied to the individual endpoints to which this profile has been assigned.

Each Calico Enterprise endpoint or host endpoint can be assigned to zero or more profiles.

This resource is not supported in `kubectl`.

## Sample YAML

The following sample profile applies the label `stage: development` to any endpoint that includes `dev-apps` in its list of profiles.

```yaml
apiVersion: projectcalico.org/v3
kind: Profile
metadata:
  name: dev-apps
spec:
  labelsToApply:
    stage: development
```

## Definition

### Metadata

| Field  | Description                        | Accepted Values                                     | Schema                             | Default |
| ------ | ---------------------------------- | --------------------------------------------------- | ---------------------------------- | ------- |
| name   | The name of the profile. Required. | Alphanumeric string with optional `.`, `_`, or `-`. | string                             |         |
| labels | A set of labels for this profile.  |                                                     | map of string key to string values |         |

### Spec

| Field                | Description                                                                                                    | Accepted Values | Schema                                                                                                 | Default |
| -------------------- | -------------------------------------------------------------------------------------------------------------- | --------------- | ------------------------------------------------------------------------------------------------------ | ------- |
| ingress (deprecated) | The ingress rules belonging to this profile.                                                                   |                 | List of [Rule](https://docs.tigera.io/calico-enterprise/latest/reference/resources/networkpolicy.md#rule) |         |
| egress (deprecated)  | The egress rules belonging to this profile.                                                                    |                 | List of [Rule](https://docs.tigera.io/calico-enterprise/latest/reference/resources/networkpolicy.md#rule) |         |
| labelsToApply        | An optional set of labels to apply to each endpoint in this profile (in addition to the endpoint's own labels) |                 | map                                                                                                    |         |

For `Rule` details please see the [NetworkPolicy](https://docs.tigera.io/calico-enterprise/latest/reference/resources/networkpolicy.md) or [GlobalNetworkPolicy](https://docs.tigera.io/calico-enterprise/latest/reference/resources/globalnetworkpolicy.md) resource.

## Supported operations

| Datastore type        | Create/Delete | Update | Get/List | Notes                                                                               |
| --------------------- | ------------- | ------ | -------- | ----------------------------------------------------------------------------------- |
| Kubernetes API server | No            | No     | Yes      | Calico Enterprise profiles are pre-assigned for each Namespace and Service Account. |