---
apiVersion: networking.k8s.io/v1
items:
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    creationTimestamp: "2026-11-02T01:31:39Z"
    generation: 1
    labels:
      ingress.openshift.io/owning-gateway: data-science-gateway
    managedFields:
    - apiVersion: networking.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:labels:
            .: {}
            f:ingress.openshift.io/owning-gateway: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"87dd2f84-8957-4f4c-907a-721e262bca78"}: {}
        f:spec:
          f:egress: {}
          f:ingress: {}
          f:podSelector: {}
          f:policyTypes: {}
      manager: ingress-operator
      operation: Update
      time: "2026-11-02T01:31:39Z"
    name: data-science-gateway-allow
    namespace: openshift-ingress
    ownerReferences:
    - apiVersion: gateway.networking.k8s.io/v1
      kind: Gateway
      name: data-science-gateway
      uid: 87dd2f84-8957-4f4c-907a-721e262bca78
    resourceVersion: "15358"
    uid: 68604e97-0119-4fd6-b7d5-0c37e7b33654
  spec:
    egress:
    - {}
    ingress:
    - {}
    podSelector:
      matchLabels:
        gateway.networking.k8s.io/gateway-name: data-science-gateway
    policyTypes:
    - Ingress
    - Egress
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    creationTimestamp: "2026-11-02T01:30:10Z"
    generation: 1
    managedFields:
    - apiVersion: networking.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:spec:
          f:egress: {}
          f:ingress: {}
          f:podSelector: {}
          f:policyTypes: {}
      manager: ingress-operator
      operation: Update
      time: "2026-11-02T01:30:10Z"
    name: istiod-allow
    namespace: openshift-ingress
    resourceVersion: "9952"
    uid: 758413fa-a4f3-4d40-b9ed-0c8063ddde15
  spec:
    egress:
    - {}
    ingress:
    - ports:
      - port: 8080
        protocol: TCP
      - port: 15010
        protocol: TCP
      - port: 15011
        protocol: TCP
      - port: 15012
        protocol: TCP
      - port: 15014
        protocol: TCP
    - ports:
      - port: 15017
        protocol: TCP
    podSelector:
      matchLabels:
        app: istiod
    policyTypes:
    - Ingress
    - Egress
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    annotations:
      platform.opendatahub.io/instance.generation: "2"
      platform.opendatahub.io/instance.name: default-gateway
      platform.opendatahub.io/instance.uid: 543e9ecd-768c-4f89-a1c4-844148ea066e
      platform.opendatahub.io/type: Open Data Hub
      platform.opendatahub.io/version: 3.6.0-ea.2
    creationTimestamp: "2026-11-02T01:31:40Z"
    generation: 1
    labels:
      app: kube-auth-proxy
      app.kubernetes.io/component: authentication
      platform.opendatahub.io/part-of: gatewayconfig
    managedFields:
    - apiVersion: networking.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            f:platform.opendatahub.io/instance.generation: {}
            f:platform.opendatahub.io/instance.name: {}
            f:platform.opendatahub.io/instance.uid: {}
            f:platform.opendatahub.io/type: {}
            f:platform.opendatahub.io/version: {}
          f:labels:
            f:app: {}
            f:app.kubernetes.io/component: {}
            f:platform.opendatahub.io/part-of: {}
        f:spec:
          f:egress: {}
          f:ingress: {}
          f:podSelector: {}
          f:policyTypes: {}
      manager: gatewayconfig
      operation: Apply
      time: "2026-11-02T01:31:47Z"
    name: kube-auth-proxy
    namespace: openshift-ingress
    resourceVersion: "15980"
    uid: 87ce8cf2-4aac-42de-b752-c98a14284233
  spec:
    egress:
    - {}
    ingress:
    - from:
      - namespaceSelector:
          matchLabels:
            kubernetes.io/metadata.name: openshift-ingress
        podSelector:
          matchLabels:
            gateway.networking.k8s.io/gateway-name: data-science-gateway
      ports:
      - port: 8443
        protocol: TCP
    - from:
      - namespaceSelector:
          matchLabels:
            kubernetes.io/metadata.name: openshift-monitoring
      ports:
      - port: 9000
        protocol: TCP
    - from:
      - namespaceSelector:
          matchLabels:
            kubernetes.io/metadata.name: openshift-user-workload-monitoring
      ports:
      - port: 9000
        protocol: TCP
    podSelector:
      matchLabels:
        app: kube-auth-proxy
    policyTypes:
    - Ingress
    - Egress
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    creationTimestamp: "2026-11-02T01:30:10Z"
    generation: 1
    labels:
      ingress.openshift.io/owning-gateway: maas-default-gateway
    managedFields:
    - apiVersion: networking.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:labels:
            .: {}
            f:ingress.openshift.io/owning-gateway: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"56b1a01f-0aa8-48f6-ab83-73d48b59810c"}: {}
        f:spec:
          f:egress: {}
          f:ingress: {}
          f:podSelector: {}
          f:policyTypes: {}
      manager: ingress-operator
      operation: Update
      time: "2026-11-02T01:30:10Z"
    name: maas-default-gateway-allow
    namespace: openshift-ingress
    ownerReferences:
    - apiVersion: gateway.networking.k8s.io/v1
      kind: Gateway
      name: maas-default-gateway
      uid: 56b1a01f-0aa8-48f6-ab83-73d48b59810c
    resourceVersion: "9930"
    uid: 12ed6123-00db-42cc-ba76-b690ddf6a884
  spec:
    egress:
    - {}
    ingress:
    - {}
    podSelector:
      matchLabels:
        gateway.networking.k8s.io/gateway-name: maas-default-gateway
    policyTypes:
    - Ingress
    - Egress
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    creationTimestamp: "2026-11-02T01:30:10Z"
    generation: 1
    labels:
      ingress.openshift.io/owning-gateway: openshift-ai-inference
    managedFields:
    - apiVersion: networking.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:labels:
            .: {}
            f:ingress.openshift.io/owning-gateway: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"020aae5c-8929-444f-ae5b-3a4914820ddc"}: {}
        f:spec:
          f:egress: {}
          f:ingress: {}
          f:podSelector: {}
          f:policyTypes: {}
      manager: ingress-operator
      operation: Update
      time: "2026-11-02T01:30:10Z"
    name: openshift-ai-inference-allow
    namespace: openshift-ingress
    ownerReferences:
    - apiVersion: gateway.networking.k8s.io/v1
      kind: Gateway
      name: openshift-ai-inference
      uid: 020aae5c-8929-444f-ae5b-3a4914820ddc
    resourceVersion: "9915"
    uid: 48e02536-f752-4ff4-8828-401bee834551
  spec:
    egress:
    - {}
    ingress:
    - {}
    podSelector:
      matchLabels:
        gateway.networking.k8s.io/gateway-name: openshift-ai-inference
    policyTypes:
    - Ingress
    - Egress
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    creationTimestamp: "2026-11-02T01:18:09Z"
    generation: 1
    managedFields:
    - apiVersion: networking.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:spec:
          f:policyTypes: {}
      manager: ingress-operator
      operation: Update
      time: "2026-11-02T01:18:09Z"
    name: openshift-ingress-deny-all
    namespace: openshift-ingress
    resourceVersion: "2177"
    uid: e50d5ab0-2884-4e2a-ad8e-97bfcc1d90a0
  spec:
    podSelector: {}
    policyTypes:
    - Ingress
    - Egress
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    annotations:
      opendatahub.io/managed: "false"
    creationTimestamp: "2026-11-02T01:36:37Z"
    generation: 1
    labels:
      app.kubernetes.io/component: networking
      app.kubernetes.io/managed-by: ai-gateway-controller
      app.kubernetes.io/part-of: maas
      app.opendatahub.io/modelsasservice: "true"
    managedFields:
    - apiVersion: networking.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:labels:
            f:app.kubernetes.io/component: {}
            f:app.kubernetes.io/managed-by: {}
            f:app.kubernetes.io/part-of: {}
            f:app.opendatahub.io/modelsasservice: {}
        f:spec:
          f:egress: {}
          f:ingress: {}
          f:podSelector: {}
          f:policyTypes: {}
      manager: ai-gateway-controller
      operation: Apply
      time: "2026-11-02T01:36:37Z"
    - apiVersion: networking.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:opendatahub.io/managed: {}
      manager: kubectl-annotate
      operation: Update
      time: "2026-11-02T01:37:01Z"
    name: payload-processing
    namespace: openshift-ingress
    resourceVersion: "22002"
    uid: 4928573b-1da4-4dd0-bdc4-a98402e6d0ed
  spec:
    egress:
    - ports:
      - port: 53
        protocol: UDP
      - port: 53
        protocol: TCP
      - port: 5353
        protocol: UDP
      - port: 5353
        protocol: TCP
    - ports:
      - port: 443
        protocol: TCP
      - port: 6443
        protocol: TCP
    ingress:
    - from:
      - namespaceSelector:
          matchLabels:
            kubernetes.io/metadata.name: openshift-ingress
        podSelector:
          matchLabels:
            gateway.istio.io/managed: istio.io-gateway-controller
      ports:
      - port: 9004
        protocol: TCP
    - from:
      - namespaceSelector:
          matchLabels:
            kubernetes.io/metadata.name: openshift-monitoring
      - namespaceSelector:
          matchLabels:
            kubernetes.io/metadata.name: openshift-user-workload-monitoring
      ports:
      - port: 9090
        protocol: TCP
    podSelector:
      matchExpressions:
      - key: maas.opendatahub.io/tenant-instance
        operator: In
        values:
        - payload-processing
        - payload-pre-processing
    policyTypes:
    - Ingress
    - Egress
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    creationTimestamp: "2026-11-02T01:18:09Z"
    generation: 1
    labels:
      ingresscontroller.operator.openshift.io/owning-ingresscontroller: default
    managedFields:
    - apiVersion: networking.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:labels:
            .: {}
            f:ingresscontroller.operator.openshift.io/owning-ingresscontroller: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"37f0e64d-6bc4-47a4-bfb6-5beb5dcf75fa"}: {}
        f:spec:
          f:egress: {}
          f:ingress: {}
          f:podSelector: {}
          f:policyTypes: {}
      manager: ingress-operator
      operation: Update
      time: "2026-11-02T01:18:09Z"
    name: router-default
    namespace: openshift-ingress
    ownerReferences:
    - apiVersion: apps/v1
      controller: true
      kind: Deployment
      name: router-default
      uid: 37f0e64d-6bc4-47a4-bfb6-5beb5dcf75fa
    resourceVersion: "2172"
    uid: 2b2d013e-ed1c-4fc4-a918-02070d4f559e
  spec:
    egress:
    - {}
    ingress:
    - ports:
      - port: http
        protocol: TCP
      - port: https
        protocol: TCP
      - port: metrics
        protocol: TCP
    podSelector:
      matchLabels:
        ingresscontroller.operator.openshift.io/deployment-ingresscontroller: default
    policyTypes:
    - Ingress
    - Egress
kind: NetworkPolicyList
metadata:
  resourceVersion: "110608"