---
apiVersion: networking.k8s.io/v1
items:
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    creationTimestamp: "2026-10-31T18:27:19Z"
    generation: 1
    labels:
      app.kubernetes.io/managed-by: cluster-monitoring-operator
      app.kubernetes.io/part-of: openshift-monitoring
    managedFields:
    - apiVersion: networking.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:labels:
            .: {}
            f:app.kubernetes.io/managed-by: {}
            f:app.kubernetes.io/part-of: {}
        f:spec:
          f:egress: {}
          f:ingress: {}
          f:podSelector: {}
          f:policyTypes: {}
      manager: operator
      operation: Update
      time: "2026-10-31T18:27:19Z"
    name: alertmanager
    namespace: openshift-monitoring
    resourceVersion: "7585"
    uid: 2046612d-7061-4531-bb52-59b2d1580c32
  spec:
    egress:
    - {}
    ingress:
    - ports:
      - port: 9092
        protocol: TCP
      - port: 9095
        protocol: TCP
      - port: 9097
        protocol: TCP
      - port: 9094
        protocol: TCP
      - port: 9094
        protocol: UDP
    podSelector:
      matchLabels:
        app.kubernetes.io/name: alertmanager
        app.kubernetes.io/part-of: openshift-monitoring
    policyTypes:
    - Ingress
    - Egress
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    annotations:
      include.release.openshift.io/hypershift: "true"
      include.release.openshift.io/ibm-cloud-managed: "true"
      include.release.openshift.io/self-managed-high-availability: "true"
      include.release.openshift.io/single-node-developer: "true"
    creationTimestamp: "2026-10-31T18:19:02Z"
    generation: 1
    labels:
      app.kubernetes.io/managed-by: cluster-version-operator
      app.kubernetes.io/part-of: openshift-monitoring
    managedFields:
    - apiVersion: networking.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:include.release.openshift.io/hypershift: {}
            f:include.release.openshift.io/ibm-cloud-managed: {}
            f:include.release.openshift.io/self-managed-high-availability: {}
            f:include.release.openshift.io/single-node-developer: {}
          f:labels:
            .: {}
            f:app.kubernetes.io/managed-by: {}
            f:app.kubernetes.io/part-of: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"d1d7e0e1-c685-451a-9eaf-25116fbc8f19"}: {}
        f:spec:
          f:egress: {}
          f:ingress: {}
          f:podSelector: {}
          f:policyTypes: {}
      manager: cluster-version-operator
      operation: Update
      time: "2026-10-31T18:19:02Z"
    name: cluster-monitoring-operator
    namespace: openshift-monitoring
    ownerReferences:
    - apiVersion: config.openshift.io/v1
      controller: true
      kind: ClusterVersion
      name: version
      uid: d1d7e0e1-c685-451a-9eaf-25116fbc8f19
    resourceVersion: "1694"
    uid: c9382032-1852-4a8d-beae-9e37c36fe663
  spec:
    egress:
    - {}
    ingress:
    - ports:
      - port: 8443
        protocol: TCP
    podSelector:
      matchLabels:
        app.kubernetes.io/name: cluster-monitoring-operator
    policyTypes:
    - Ingress
    - Egress
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    creationTimestamp: "2026-10-31T18:29:29Z"
    generation: 1
    labels:
      app.kubernetes.io/managed-by: cluster-monitoring-operator
      app.kubernetes.io/part-of: openshift-monitoring
    managedFields:
    - apiVersion: networking.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:labels:
            .: {}
            f:app.kubernetes.io/managed-by: {}
            f:app.kubernetes.io/part-of: {}
        f:spec:
          f:podSelector: {}
          f:policyTypes: {}
      manager: operator
      operation: Update
      time: "2026-10-31T18:29:29Z"
    name: deny-cluster-monitoring-operator-and-operands
    namespace: openshift-monitoring
    resourceVersion: "9512"
    uid: 1d8cd7a6-8d54-4733-b8e5-1bbfb3327b90
  spec:
    podSelector:
      matchLabels:
        app.kubernetes.io/part-of: openshift-monitoring
    policyTypes:
    - Ingress
    - Egress
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    creationTimestamp: "2026-10-31T18:27:19Z"
    generation: 1
    labels:
      app.kubernetes.io/managed-by: cluster-monitoring-operator
      app.kubernetes.io/part-of: openshift-monitoring
    managedFields:
    - apiVersion: networking.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:labels:
            .: {}
            f:app.kubernetes.io/managed-by: {}
            f:app.kubernetes.io/part-of: {}
        f:spec:
          f:egress: {}
          f:ingress: {}
          f:podSelector: {}
          f:policyTypes: {}
      manager: operator
      operation: Update
      time: "2026-10-31T18:27:19Z"
    name: kube-state-metrics
    namespace: openshift-monitoring
    resourceVersion: "7581"
    uid: 450227fa-9c82-4c2a-947b-6d3770a53dc8
  spec:
    egress:
    - {}
    ingress:
    - ports:
      - port: 8443
        protocol: TCP
      - port: 9443
        protocol: TCP
    podSelector:
      matchLabels:
        app.kubernetes.io/name: kube-state-metrics
        app.kubernetes.io/part-of: openshift-monitoring
    policyTypes:
    - Ingress
    - Egress
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    creationTimestamp: "2026-10-31T18:27:19Z"
    generation: 1
    labels:
      app.kubernetes.io/managed-by: cluster-monitoring-operator
      app.kubernetes.io/part-of: openshift-monitoring
    managedFields:
    - apiVersion: networking.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:labels:
            .: {}
            f:app.kubernetes.io/managed-by: {}
            f:app.kubernetes.io/part-of: {}
        f:spec:
          f:egress: {}
          f:ingress: {}
          f:podSelector: {}
          f:policyTypes: {}
      manager: operator
      operation: Update
      time: "2026-10-31T18:27:19Z"
    name: metrics-server
    namespace: openshift-monitoring
    resourceVersion: "7583"
    uid: d772263e-8a66-4d9b-a078-92ad8db69337
  spec:
    egress:
    - {}
    ingress:
    - ports:
      - port: 10250
        protocol: TCP
    podSelector:
      matchLabels:
        app.kubernetes.io/name: metrics-server
        app.kubernetes.io/part-of: openshift-monitoring
    policyTypes:
    - Ingress
    - Egress
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    creationTimestamp: "2026-10-31T18:27:19Z"
    generation: 1
    labels:
      app.kubernetes.io/managed-by: cluster-monitoring-operator
      app.kubernetes.io/part-of: openshift-monitoring
    managedFields:
    - apiVersion: networking.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:labels:
            .: {}
            f:app.kubernetes.io/managed-by: {}
            f:app.kubernetes.io/part-of: {}
        f:spec:
          f:egress: {}
          f:ingress: {}
          f:podSelector: {}
          f:policyTypes: {}
      manager: operator
      operation: Update
      time: "2026-10-31T18:27:19Z"
    name: monitoring-plugin
    namespace: openshift-monitoring
    resourceVersion: "7584"
    uid: 0b018f24-a3a1-48a7-9bc6-98c115fb8bbf
  spec:
    egress:
    - {}
    ingress:
    - ports:
      - port: 9443
        protocol: TCP
    podSelector:
      matchLabels:
        app.kubernetes.io/name: monitoring-plugin
        app.kubernetes.io/part-of: openshift-monitoring
    policyTypes:
    - Ingress
    - Egress
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    creationTimestamp: "2026-10-31T18:27:19Z"
    generation: 1
    labels:
      app.kubernetes.io/managed-by: cluster-monitoring-operator
      app.kubernetes.io/part-of: openshift-monitoring
    managedFields:
    - apiVersion: networking.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:labels:
            .: {}
            f:app.kubernetes.io/managed-by: {}
            f:app.kubernetes.io/part-of: {}
        f:spec:
          f:egress: {}
          f:ingress: {}
          f:podSelector: {}
          f:policyTypes: {}
      manager: operator
      operation: Update
      time: "2026-10-31T18:27:19Z"
    name: openshift-state-metrics
    namespace: openshift-monitoring
    resourceVersion: "7582"
    uid: fae2eb39-f4af-428f-817f-9ce68f0367d3
  spec:
    egress:
    - {}
    ingress:
    - ports:
      - port: 8443
        protocol: TCP
      - port: 9443
        protocol: TCP
    podSelector:
      matchLabels:
        app.kubernetes.io/name: openshift-state-metrics
        app.kubernetes.io/part-of: openshift-monitoring
    policyTypes:
    - Ingress
    - Egress
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    creationTimestamp: "2026-10-31T18:27:19Z"
    generation: 1
    labels:
      app.kubernetes.io/managed-by: cluster-monitoring-operator
      app.kubernetes.io/part-of: openshift-monitoring
    managedFields:
    - apiVersion: networking.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:labels:
            .: {}
            f:app.kubernetes.io/managed-by: {}
            f:app.kubernetes.io/part-of: {}
        f:spec:
          f:egress: {}
          f:ingress: {}
          f:podSelector: {}
          f:policyTypes: {}
      manager: operator
      operation: Update
      time: "2026-10-31T18:27:19Z"
    name: prometheus
    namespace: openshift-monitoring
    resourceVersion: "7580"
    uid: 8479a8d8-12ce-4929-8dec-ef082eda408f
  spec:
    egress:
    - {}
    ingress:
    - ports:
      - port: 9091
        protocol: TCP
      - port: 9092
        protocol: TCP
      - port: 10901
        protocol: TCP
      - port: 10903
        protocol: TCP
    podSelector:
      matchLabels:
        app.kubernetes.io/name: prometheus
        app.kubernetes.io/part-of: openshift-monitoring
    policyTypes:
    - Ingress
    - Egress
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    creationTimestamp: "2026-10-31T18:27:07Z"
    generation: 1
    labels:
      app.kubernetes.io/managed-by: cluster-monitoring-operator
      app.kubernetes.io/part-of: openshift-monitoring
    managedFields:
    - apiVersion: networking.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:labels:
            .: {}
            f:app.kubernetes.io/managed-by: {}
            f:app.kubernetes.io/part-of: {}
        f:spec:
          f:egress: {}
          f:ingress: {}
          f:podSelector: {}
          f:policyTypes: {}
      manager: operator
      operation: Update
      time: "2026-10-31T18:27:07Z"
    name: prometheus-operator
    namespace: openshift-monitoring
    resourceVersion: "7322"
    uid: 79f4a997-9681-4aa6-802e-fb85777a1dff
  spec:
    egress:
    - {}
    ingress:
    - ports:
      - port: 8443
        protocol: TCP
    podSelector:
      matchLabels:
        app.kubernetes.io/name: prometheus-operator
        app.kubernetes.io/part-of: openshift-monitoring
    policyTypes:
    - Ingress
    - Egress
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    creationTimestamp: "2026-10-31T18:27:08Z"
    generation: 1
    labels:
      app.kubernetes.io/managed-by: cluster-monitoring-operator
      app.kubernetes.io/part-of: openshift-monitoring
    managedFields:
    - apiVersion: networking.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:labels:
            .: {}
            f:app.kubernetes.io/managed-by: {}
            f:app.kubernetes.io/part-of: {}
        f:spec:
          f:egress: {}
          f:ingress: {}
          f:podSelector: {}
          f:policyTypes: {}
      manager: operator
      operation: Update
      time: "2026-10-31T18:27:08Z"
    name: prometheus-operator-admission-webhook
    namespace: openshift-monitoring
    resourceVersion: "7342"
    uid: 315b0a3f-2426-4795-94ba-37e24d269080
  spec:
    egress:
    - {}
    ingress:
    - ports:
      - port: 8443
        protocol: TCP
    podSelector:
      matchLabels:
        app.kubernetes.io/name: prometheus-operator-admission-webhook
        app.kubernetes.io/part-of: openshift-monitoring
    policyTypes:
    - Ingress
    - Egress
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    creationTimestamp: "2026-10-31T18:28:23Z"
    generation: 1
    labels:
      app.kubernetes.io/managed-by: cluster-monitoring-operator
      app.kubernetes.io/part-of: openshift-monitoring
    managedFields:
    - apiVersion: networking.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:labels:
            .: {}
            f:app.kubernetes.io/managed-by: {}
            f:app.kubernetes.io/part-of: {}
        f:spec:
          f:egress: {}
          f:ingress: {}
          f:podSelector: {}
          f:policyTypes: {}
      manager: operator
      operation: Update
      time: "2026-10-31T18:28:23Z"
    name: telemeter-client
    namespace: openshift-monitoring
    resourceVersion: "9343"
    uid: c00701fa-f6c3-49b4-bbfa-f148cc30a3f5
  spec:
    egress:
    - {}
    ingress:
    - ports:
      - port: 8443
        protocol: TCP
    podSelector:
      matchLabels:
        app.kubernetes.io/name: telemeter-client
        app.kubernetes.io/part-of: openshift-monitoring
    policyTypes:
    - Ingress
    - Egress
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    creationTimestamp: "2026-10-31T18:27:19Z"
    generation: 1
    labels:
      app.kubernetes.io/managed-by: cluster-monitoring-operator
      app.kubernetes.io/part-of: openshift-monitoring
    managedFields:
    - apiVersion: networking.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:labels:
            .: {}
            f:app.kubernetes.io/managed-by: {}
            f:app.kubernetes.io/part-of: {}
        f:spec:
          f:egress: {}
          f:ingress: {}
          f:podSelector: {}
          f:policyTypes: {}
      manager: operator
      operation: Update
      time: "2026-10-31T18:27:19Z"
    name: thanos-querier
    namespace: openshift-monitoring
    resourceVersion: "7587"
    uid: d6511bf7-988d-4fb9-911b-ba4de042d318
  spec:
    egress:
    - {}
    ingress:
    - ports:
      - port: 9091
        protocol: TCP
      - port: 9092
        protocol: TCP
      - port: 9093
        protocol: TCP
      - port: 9094
        protocol: TCP
    podSelector:
      matchLabels:
        app.kubernetes.io/name: thanos-query
        app.kubernetes.io/part-of: openshift-monitoring
    policyTypes:
    - Ingress
    - Egress
kind: NetworkPolicyList
metadata:
  resourceVersion: "27831"