---
apiVersion: networking.k8s.io/v1
items:
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    creationTimestamp: "2026-11-01T15:53:37Z"
    generation: 1
    labels:
      ingress.openshift.io/owning-gateway: data-science-gateway
    managedFields:
    - apiVersion: networking.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:labels:
            .: {}
            f:ingress.openshift.io/owning-gateway: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"452e8b05-154f-49d6-9ac3-f590daed4201"}: {}
        f:spec:
          f:egress: {}
          f:ingress: {}
          f:podSelector: {}
          f:policyTypes: {}
      manager: ingress-operator
      operation: Update
      time: "2026-11-01T15:53:37Z"
    name: data-science-gateway-allow
    namespace: openshift-ingress
    ownerReferences:
    - apiVersion: gateway.networking.k8s.io/v1
      kind: Gateway
      name: data-science-gateway
      uid: 452e8b05-154f-49d6-9ac3-f590daed4201
    resourceVersion: "14755"
    uid: c7661656-f1d0-43ba-8e7e-24d61d4d7ab6
  spec:
    egress:
    - {}
    ingress:
    - {}
    podSelector:
      matchLabels:
        gateway.networking.k8s.io/gateway-name: data-science-gateway
    policyTypes:
    - Ingress
    - Egress
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    creationTimestamp: "2026-11-01T15:52:25Z"
    generation: 1
    managedFields:
    - apiVersion: networking.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:spec:
          f:egress: {}
          f:ingress: {}
          f:podSelector: {}
          f:policyTypes: {}
      manager: ingress-operator
      operation: Update
      time: "2026-11-01T15:52:25Z"
    name: istiod-allow
    namespace: openshift-ingress
    resourceVersion: "9768"
    uid: a2e1c3b1-3441-402d-b8f5-6505171565e6
  spec:
    egress:
    - {}
    ingress:
    - ports:
      - port: 8080
        protocol: TCP
      - port: 15010
        protocol: TCP
      - port: 15011
        protocol: TCP
      - port: 15012
        protocol: TCP
      - port: 15014
        protocol: TCP
    - ports:
      - port: 15017
        protocol: TCP
    podSelector:
      matchLabels:
        app: istiod
    policyTypes:
    - Ingress
    - Egress
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    annotations:
      platform.opendatahub.io/instance.generation: "2"
      platform.opendatahub.io/instance.name: default-gateway
      platform.opendatahub.io/instance.uid: f7125d4a-9974-4184-a0c1-8e257d7ea32f
      platform.opendatahub.io/type: Open Data Hub
      platform.opendatahub.io/version: 3.6.0-ea.2
    creationTimestamp: "2026-11-01T15:53:38Z"
    generation: 1
    labels:
      app: kube-auth-proxy
      app.kubernetes.io/component: authentication
      platform.opendatahub.io/part-of: gatewayconfig
    managedFields:
    - apiVersion: networking.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            f:platform.opendatahub.io/instance.generation: {}
            f:platform.opendatahub.io/instance.name: {}
            f:platform.opendatahub.io/instance.uid: {}
            f:platform.opendatahub.io/type: {}
            f:platform.opendatahub.io/version: {}
          f:labels:
            f:app: {}
            f:app.kubernetes.io/component: {}
            f:platform.opendatahub.io/part-of: {}
        f:spec:
          f:egress: {}
          f:ingress: {}
          f:podSelector: {}
          f:policyTypes: {}
      manager: gatewayconfig
      operation: Apply
      time: "2026-11-01T15:53:39Z"
    name: kube-auth-proxy
    namespace: openshift-ingress
    resourceVersion: "15194"
    uid: 5d771fea-7667-4de4-944d-92e84f5090fc
  spec:
    egress:
    - {}
    ingress:
    - from:
      - namespaceSelector:
          matchLabels:
            kubernetes.io/metadata.name: openshift-ingress
        podSelector:
          matchLabels:
            gateway.networking.k8s.io/gateway-name: data-science-gateway
      ports:
      - port: 8443
        protocol: TCP
    - from:
      - namespaceSelector:
          matchLabels:
            kubernetes.io/metadata.name: openshift-monitoring
      ports:
      - port: 9000
        protocol: TCP
    - from:
      - namespaceSelector:
          matchLabels:
            kubernetes.io/metadata.name: openshift-user-workload-monitoring
      ports:
      - port: 9000
        protocol: TCP
    podSelector:
      matchLabels:
        app: kube-auth-proxy
    policyTypes:
    - Ingress
    - Egress
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    creationTimestamp: "2026-11-01T15:52:25Z"
    generation: 1
    labels:
      ingress.openshift.io/owning-gateway: maas-default-gateway
    managedFields:
    - apiVersion: networking.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:labels:
            .: {}
            f:ingress.openshift.io/owning-gateway: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"7d5252e5-f7e7-43e8-b356-6da3056c9dac"}: {}
        f:spec:
          f:egress: {}
          f:ingress: {}
          f:podSelector: {}
          f:policyTypes: {}
      manager: ingress-operator
      operation: Update
      time: "2026-11-01T15:52:25Z"
    name: maas-default-gateway-allow
    namespace: openshift-ingress
    ownerReferences:
    - apiVersion: gateway.networking.k8s.io/v1
      kind: Gateway
      name: maas-default-gateway
      uid: 7d5252e5-f7e7-43e8-b356-6da3056c9dac
    resourceVersion: "9744"
    uid: d2a34d0c-074f-486c-8b89-9e5e7e38bbc0
  spec:
    egress:
    - {}
    ingress:
    - {}
    podSelector:
      matchLabels:
        gateway.networking.k8s.io/gateway-name: maas-default-gateway
    policyTypes:
    - Ingress
    - Egress
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    creationTimestamp: "2026-11-01T15:52:25Z"
    generation: 1
    labels:
      ingress.openshift.io/owning-gateway: openshift-ai-inference
    managedFields:
    - apiVersion: networking.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:labels:
            .: {}
            f:ingress.openshift.io/owning-gateway: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"3fcd91b7-349b-4264-9ff4-1d220c0708d3"}: {}
        f:spec:
          f:egress: {}
          f:ingress: {}
          f:podSelector: {}
          f:policyTypes: {}
      manager: ingress-operator
      operation: Update
      time: "2026-11-01T15:52:25Z"
    name: openshift-ai-inference-allow
    namespace: openshift-ingress
    ownerReferences:
    - apiVersion: gateway.networking.k8s.io/v1
      kind: Gateway
      name: openshift-ai-inference
      uid: 3fcd91b7-349b-4264-9ff4-1d220c0708d3
    resourceVersion: "9731"
    uid: cbcc3728-e1c4-4138-9eae-5bc2e4da0d04
  spec:
    egress:
    - {}
    ingress:
    - {}
    podSelector:
      matchLabels:
        gateway.networking.k8s.io/gateway-name: openshift-ai-inference
    policyTypes:
    - Ingress
    - Egress
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    creationTimestamp: "2026-11-01T15:40:35Z"
    generation: 1
    managedFields:
    - apiVersion: networking.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:spec:
          f:policyTypes: {}
      manager: ingress-operator
      operation: Update
      time: "2026-11-01T15:40:35Z"
    name: openshift-ingress-deny-all
    namespace: openshift-ingress
    resourceVersion: "2186"
    uid: 16f9743d-226a-4dba-afce-643d762ff3c6
  spec:
    podSelector: {}
    policyTypes:
    - Ingress
    - Egress
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    annotations:
      opendatahub.io/managed: "false"
    creationTimestamp: "2026-11-01T15:57:22Z"
    generation: 1
    labels:
      app.kubernetes.io/component: networking
      app.kubernetes.io/managed-by: ai-gateway-controller
      app.kubernetes.io/part-of: maas
      app.opendatahub.io/modelsasservice: "true"
    managedFields:
    - apiVersion: networking.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:labels:
            f:app.kubernetes.io/component: {}
            f:app.kubernetes.io/managed-by: {}
            f:app.kubernetes.io/part-of: {}
            f:app.opendatahub.io/modelsasservice: {}
        f:spec:
          f:egress: {}
          f:ingress: {}
          f:podSelector: {}
          f:policyTypes: {}
      manager: ai-gateway-controller
      operation: Apply
      time: "2026-11-01T15:57:22Z"
    - apiVersion: networking.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:opendatahub.io/managed: {}
      manager: kubectl-annotate
      operation: Update
      time: "2026-11-01T15:57:48Z"
    name: payload-processing
    namespace: openshift-ingress
    resourceVersion: "22043"
    uid: e0e64eea-ee7a-4d3c-85cc-02b2c16dab01
  spec:
    egress:
    - ports:
      - port: 53
        protocol: UDP
      - port: 53
        protocol: TCP
      - port: 5353
        protocol: UDP
      - port: 5353
        protocol: TCP
    - ports:
      - port: 443
        protocol: TCP
      - port: 6443
        protocol: TCP
    ingress:
    - from:
      - namespaceSelector:
          matchLabels:
            kubernetes.io/metadata.name: openshift-ingress
        podSelector:
          matchLabels:
            gateway.istio.io/managed: istio.io-gateway-controller
      ports:
      - port: 9004
        protocol: TCP
    - from:
      - namespaceSelector:
          matchLabels:
            kubernetes.io/metadata.name: openshift-monitoring
      - namespaceSelector:
          matchLabels:
            kubernetes.io/metadata.name: openshift-user-workload-monitoring
      ports:
      - port: 9090
        protocol: TCP
    podSelector:
      matchExpressions:
      - key: maas.opendatahub.io/tenant-instance
        operator: In
        values:
        - payload-processing
        - payload-pre-processing
    policyTypes:
    - Ingress
    - Egress
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    creationTimestamp: "2026-11-01T15:40:35Z"
    generation: 1
    labels:
      ingresscontroller.operator.openshift.io/owning-ingresscontroller: default
    managedFields:
    - apiVersion: networking.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:labels:
            .: {}
            f:ingresscontroller.operator.openshift.io/owning-ingresscontroller: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"4edf9a44-b27c-4301-bdc9-eb360c230514"}: {}
        f:spec:
          f:egress: {}
          f:ingress: {}
          f:podSelector: {}
          f:policyTypes: {}
      manager: ingress-operator
      operation: Update
      time: "2026-11-01T15:40:35Z"
    name: router-default
    namespace: openshift-ingress
    ownerReferences:
    - apiVersion: apps/v1
      controller: true
      kind: Deployment
      name: router-default
      uid: 4edf9a44-b27c-4301-bdc9-eb360c230514
    resourceVersion: "2181"
    uid: c03da015-4d9b-4b73-b2e6-fb4c4a87dc7b
  spec:
    egress:
    - {}
    ingress:
    - ports:
      - port: http
        protocol: TCP
      - port: https
        protocol: TCP
      - port: metrics
        protocol: TCP
    podSelector:
      matchLabels:
        ingresscontroller.operator.openshift.io/deployment-ingresscontroller: default
    policyTypes:
    - Ingress
    - Egress
kind: NetworkPolicyList
metadata:
  resourceVersion: "187845"