---
apiVersion: networking.k8s.io/v1
items:
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    annotations:
      capability.openshift.io/name: CloudCredential
      include.release.openshift.io/ibm-cloud-managed: "true"
      include.release.openshift.io/self-managed-high-availability: "true"
    creationTimestamp: "2026-11-02T01:17:58Z"
    generation: 1
    managedFields:
    - apiVersion: networking.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:capability.openshift.io/name: {}
            f:include.release.openshift.io/ibm-cloud-managed: {}
            f:include.release.openshift.io/self-managed-high-availability: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"cb0cfe9b-1cce-474e-ac94-29f358f06bf7"}: {}
        f:spec:
          f:egress: {}
          f:podSelector: {}
          f:policyTypes: {}
      manager: cluster-version-operator
      operation: Update
      time: "2026-11-02T01:17:58Z"
    name: allow-egress
    namespace: openshift-cloud-credential-operator
    ownerReferences:
    - apiVersion: config.openshift.io/v1
      controller: true
      kind: ClusterVersion
      name: version
      uid: cb0cfe9b-1cce-474e-ac94-29f358f06bf7
    resourceVersion: "1285"
    uid: a9deca01-9890-489a-9574-5d58f6703035
  spec:
    egress:
    - ports:
      - endPort: 65535
        port: 1
        protocol: TCP
    - ports:
      - endPort: 65535
        port: 1
        protocol: UDP
    podSelector:
      matchExpressions:
      - key: app
        operator: In
        values:
        - cloud-credential-operator
        - pod-identity-webhook
    policyTypes:
    - Egress
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    annotations:
      capability.openshift.io/name: CloudCredential
      include.release.openshift.io/ibm-cloud-managed: "true"
      include.release.openshift.io/self-managed-high-availability: "true"
    creationTimestamp: "2026-11-02T01:17:59Z"
    generation: 1
    managedFields:
    - apiVersion: networking.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:capability.openshift.io/name: {}
            f:include.release.openshift.io/ibm-cloud-managed: {}
            f:include.release.openshift.io/self-managed-high-availability: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"cb0cfe9b-1cce-474e-ac94-29f358f06bf7"}: {}
        f:spec:
          f:ingress: {}
          f:podSelector: {}
          f:policyTypes: {}
      manager: cluster-version-operator
      operation: Update
      time: "2026-11-02T01:17:59Z"
    name: allow-ingress-metrics
    namespace: openshift-cloud-credential-operator
    ownerReferences:
    - apiVersion: config.openshift.io/v1
      controller: true
      kind: ClusterVersion
      name: version
      uid: cb0cfe9b-1cce-474e-ac94-29f358f06bf7
    resourceVersion: "1321"
    uid: ed451eca-74bb-4fae-a33d-e9c5475bea03
  spec:
    ingress:
    - ports:
      - port: 8443
        protocol: TCP
    podSelector:
      matchExpressions:
      - key: app
        operator: In
        values:
        - cloud-credential-operator
    policyTypes:
    - Ingress
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    annotations:
      capability.openshift.io/name: CloudCredential
      include.release.openshift.io/ibm-cloud-managed: "true"
      include.release.openshift.io/self-managed-high-availability: "true"
    creationTimestamp: "2026-11-02T01:18:00Z"
    generation: 1
    managedFields:
    - apiVersion: networking.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:capability.openshift.io/name: {}
            f:include.release.openshift.io/ibm-cloud-managed: {}
            f:include.release.openshift.io/self-managed-high-availability: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"cb0cfe9b-1cce-474e-ac94-29f358f06bf7"}: {}
        f:spec:
          f:ingress: {}
          f:podSelector: {}
          f:policyTypes: {}
      manager: cluster-version-operator
      operation: Update
      time: "2026-11-02T01:18:00Z"
    name: allow-ingress-pprof
    namespace: openshift-cloud-credential-operator
    ownerReferences:
    - apiVersion: config.openshift.io/v1
      controller: true
      kind: ClusterVersion
      name: version
      uid: cb0cfe9b-1cce-474e-ac94-29f358f06bf7
    resourceVersion: "1356"
    uid: 6085e83e-b49b-4d02-b6a0-8abb7ba71ea9
  spec:
    ingress:
    - ports:
      - port: 6060
        protocol: TCP
    podSelector:
      matchExpressions:
      - key: app
        operator: In
        values:
        - cloud-credential-operator
    policyTypes:
    - Ingress
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    annotations:
      capability.openshift.io/name: CloudCredential
      include.release.openshift.io/ibm-cloud-managed: "true"
      include.release.openshift.io/self-managed-high-availability: "true"
    creationTimestamp: "2026-11-02T01:18:01Z"
    generation: 1
    managedFields:
    - apiVersion: networking.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:capability.openshift.io/name: {}
            f:include.release.openshift.io/ibm-cloud-managed: {}
            f:include.release.openshift.io/self-managed-high-availability: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"cb0cfe9b-1cce-474e-ac94-29f358f06bf7"}: {}
        f:spec:
          f:ingress: {}
          f:podSelector: {}
          f:policyTypes: {}
      manager: cluster-version-operator
      operation: Update
      time: "2026-11-02T01:18:01Z"
    name: allow-ingress-webhook
    namespace: openshift-cloud-credential-operator
    ownerReferences:
    - apiVersion: config.openshift.io/v1
      controller: true
      kind: ClusterVersion
      name: version
      uid: cb0cfe9b-1cce-474e-ac94-29f358f06bf7
    resourceVersion: "1384"
    uid: e5be280c-aa3e-4e53-9309-ef0e2399533b
  spec:
    ingress:
    - ports:
      - port: 9443
        protocol: TCP
    podSelector:
      matchExpressions:
      - key: app
        operator: In
        values:
        - pod-identity-webhook
    policyTypes:
    - Ingress
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    annotations:
      capability.openshift.io/name: CloudCredential
      include.release.openshift.io/ibm-cloud-managed: "true"
      include.release.openshift.io/self-managed-high-availability: "true"
    creationTimestamp: "2026-11-02T01:18:02Z"
    generation: 1
    managedFields:
    - apiVersion: networking.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:capability.openshift.io/name: {}
            f:include.release.openshift.io/ibm-cloud-managed: {}
            f:include.release.openshift.io/self-managed-high-availability: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"cb0cfe9b-1cce-474e-ac94-29f358f06bf7"}: {}
        f:spec:
          f:policyTypes: {}
      manager: cluster-version-operator
      operation: Update
      time: "2026-11-02T01:18:02Z"
    name: default-deny
    namespace: openshift-cloud-credential-operator
    ownerReferences:
    - apiVersion: config.openshift.io/v1
      controller: true
      kind: ClusterVersion
      name: version
      uid: cb0cfe9b-1cce-474e-ac94-29f358f06bf7
    resourceVersion: "1435"
    uid: f8c4e2f3-2569-4c87-825c-605dfc9976f5
  spec:
    podSelector: {}
    policyTypes:
    - Ingress
    - Egress
kind: NetworkPolicyList
metadata:
  resourceVersion: "110197"