---
apiVersion: networking.k8s.io/v1
items:
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    creationTimestamp: "2026-11-03T20:08:35Z"
    generation: 1
    labels:
      app.kubernetes.io/managed-by: cluster-monitoring-operator
      app.kubernetes.io/part-of: openshift-monitoring
    managedFields:
    - apiVersion: networking.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:labels:
            .: {}
            f:app.kubernetes.io/managed-by: {}
            f:app.kubernetes.io/part-of: {}
        f:spec:
          f:egress: {}
          f:ingress: {}
          f:podSelector: {}
          f:policyTypes: {}
      manager: operator
      operation: Update
      time: "2026-11-03T20:08:35Z"
    name: alertmanager
    namespace: openshift-monitoring
    resourceVersion: "7321"
    uid: 94be2658-ab30-4848-b697-d87466d933bf
  spec:
    egress:
    - {}
    ingress:
    - ports:
      - port: 9092
        protocol: TCP
      - port: 9095
        protocol: TCP
      - port: 9097
        protocol: TCP
      - port: 9094
        protocol: TCP
      - port: 9094
        protocol: UDP
    podSelector:
      matchLabels:
        app.kubernetes.io/name: alertmanager
        app.kubernetes.io/part-of: openshift-monitoring
    policyTypes:
    - Ingress
    - Egress
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    annotations:
      include.release.openshift.io/hypershift: "true"
      include.release.openshift.io/ibm-cloud-managed: "true"
      include.release.openshift.io/self-managed-high-availability: "true"
      include.release.openshift.io/single-node-developer: "true"
    creationTimestamp: "2026-11-03T20:01:31Z"
    generation: 1
    labels:
      app.kubernetes.io/managed-by: cluster-version-operator
      app.kubernetes.io/part-of: openshift-monitoring
    managedFields:
    - apiVersion: networking.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:include.release.openshift.io/hypershift: {}
            f:include.release.openshift.io/ibm-cloud-managed: {}
            f:include.release.openshift.io/self-managed-high-availability: {}
            f:include.release.openshift.io/single-node-developer: {}
          f:labels:
            .: {}
            f:app.kubernetes.io/managed-by: {}
            f:app.kubernetes.io/part-of: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"91e7e918-a28d-40b5-9bec-4ce292393b8f"}: {}
        f:spec:
          f:egress: {}
          f:ingress: {}
          f:podSelector: {}
          f:policyTypes: {}
      manager: cluster-version-operator
      operation: Update
      time: "2026-11-03T20:01:31Z"
    name: cluster-monitoring-operator
    namespace: openshift-monitoring
    ownerReferences:
    - apiVersion: config.openshift.io/v1
      controller: true
      kind: ClusterVersion
      name: version
      uid: 91e7e918-a28d-40b5-9bec-4ce292393b8f
    resourceVersion: "1759"
    uid: ed0fba4a-af9a-4b81-99c5-921a6483e91b
  spec:
    egress:
    - {}
    ingress:
    - ports:
      - port: 8443
        protocol: TCP
    podSelector:
      matchLabels:
        app.kubernetes.io/name: cluster-monitoring-operator
    policyTypes:
    - Ingress
    - Egress
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    creationTimestamp: "2026-11-03T20:09:19Z"
    generation: 1
    labels:
      app.kubernetes.io/managed-by: cluster-monitoring-operator
      app.kubernetes.io/part-of: openshift-monitoring
    managedFields:
    - apiVersion: networking.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:labels:
            .: {}
            f:app.kubernetes.io/managed-by: {}
            f:app.kubernetes.io/part-of: {}
        f:spec:
          f:podSelector: {}
          f:policyTypes: {}
      manager: operator
      operation: Update
      time: "2026-11-03T20:09:19Z"
    name: deny-cluster-monitoring-operator-and-operands
    namespace: openshift-monitoring
    resourceVersion: "9049"
    uid: 25b3950c-89da-41f0-926b-8f7ef5d7b438
  spec:
    podSelector:
      matchLabels:
        app.kubernetes.io/part-of: openshift-monitoring
    policyTypes:
    - Ingress
    - Egress
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    creationTimestamp: "2026-11-03T20:08:35Z"
    generation: 1
    labels:
      app.kubernetes.io/managed-by: cluster-monitoring-operator
      app.kubernetes.io/part-of: openshift-monitoring
    managedFields:
    - apiVersion: networking.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:labels:
            .: {}
            f:app.kubernetes.io/managed-by: {}
            f:app.kubernetes.io/part-of: {}
        f:spec:
          f:egress: {}
          f:ingress: {}
          f:podSelector: {}
          f:policyTypes: {}
      manager: operator
      operation: Update
      time: "2026-11-03T20:08:35Z"
    name: kube-state-metrics
    namespace: openshift-monitoring
    resourceVersion: "7320"
    uid: beaf9b9b-29aa-46af-9dbd-6a8dfb3262a3
  spec:
    egress:
    - {}
    ingress:
    - ports:
      - port: 8443
        protocol: TCP
      - port: 9443
        protocol: TCP
    podSelector:
      matchLabels:
        app.kubernetes.io/name: kube-state-metrics
        app.kubernetes.io/part-of: openshift-monitoring
    policyTypes:
    - Ingress
    - Egress
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    creationTimestamp: "2026-11-03T20:08:35Z"
    generation: 1
    labels:
      app.kubernetes.io/managed-by: cluster-monitoring-operator
      app.kubernetes.io/part-of: openshift-monitoring
    managedFields:
    - apiVersion: networking.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:labels:
            .: {}
            f:app.kubernetes.io/managed-by: {}
            f:app.kubernetes.io/part-of: {}
        f:spec:
          f:egress: {}
          f:ingress: {}
          f:podSelector: {}
          f:policyTypes: {}
      manager: operator
      operation: Update
      time: "2026-11-03T20:08:35Z"
    name: metrics-server
    namespace: openshift-monitoring
    resourceVersion: "7322"
    uid: 23535ac0-5a6c-44d0-9690-a393c2d6c5d1
  spec:
    egress:
    - {}
    ingress:
    - ports:
      - port: 10250
        protocol: TCP
    podSelector:
      matchLabels:
        app.kubernetes.io/name: metrics-server
        app.kubernetes.io/part-of: openshift-monitoring
    policyTypes:
    - Ingress
    - Egress
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    creationTimestamp: "2026-11-03T20:08:35Z"
    generation: 1
    labels:
      app.kubernetes.io/managed-by: cluster-monitoring-operator
      app.kubernetes.io/part-of: openshift-monitoring
    managedFields:
    - apiVersion: networking.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:labels:
            .: {}
            f:app.kubernetes.io/managed-by: {}
            f:app.kubernetes.io/part-of: {}
        f:spec:
          f:egress: {}
          f:ingress: {}
          f:podSelector: {}
          f:policyTypes: {}
      manager: operator
      operation: Update
      time: "2026-11-03T20:08:35Z"
    name: monitoring-plugin
    namespace: openshift-monitoring
    resourceVersion: "7327"
    uid: e8ef257a-0feb-4e3e-b0cb-a639c1d7d15c
  spec:
    egress:
    - {}
    ingress:
    - ports:
      - port: 9443
        protocol: TCP
    podSelector:
      matchLabels:
        app.kubernetes.io/name: monitoring-plugin
        app.kubernetes.io/part-of: openshift-monitoring
    policyTypes:
    - Ingress
    - Egress
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    creationTimestamp: "2026-11-03T20:08:35Z"
    generation: 1
    labels:
      app.kubernetes.io/managed-by: cluster-monitoring-operator
      app.kubernetes.io/part-of: openshift-monitoring
    managedFields:
    - apiVersion: networking.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:labels:
            .: {}
            f:app.kubernetes.io/managed-by: {}
            f:app.kubernetes.io/part-of: {}
        f:spec:
          f:egress: {}
          f:ingress: {}
          f:podSelector: {}
          f:policyTypes: {}
      manager: operator
      operation: Update
      time: "2026-11-03T20:08:35Z"
    name: openshift-state-metrics
    namespace: openshift-monitoring
    resourceVersion: "7324"
    uid: 2053e36c-0463-4061-97cc-573fa2ef9405
  spec:
    egress:
    - {}
    ingress:
    - ports:
      - port: 8443
        protocol: TCP
      - port: 9443
        protocol: TCP
    podSelector:
      matchLabels:
        app.kubernetes.io/name: openshift-state-metrics
        app.kubernetes.io/part-of: openshift-monitoring
    policyTypes:
    - Ingress
    - Egress
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    creationTimestamp: "2026-11-03T20:08:35Z"
    generation: 1
    labels:
      app.kubernetes.io/managed-by: cluster-monitoring-operator
      app.kubernetes.io/part-of: openshift-monitoring
    managedFields:
    - apiVersion: networking.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:labels:
            .: {}
            f:app.kubernetes.io/managed-by: {}
            f:app.kubernetes.io/part-of: {}
        f:spec:
          f:egress: {}
          f:ingress: {}
          f:podSelector: {}
          f:policyTypes: {}
      manager: operator
      operation: Update
      time: "2026-11-03T20:08:35Z"
    name: prometheus
    namespace: openshift-monitoring
    resourceVersion: "7319"
    uid: 4f1090f0-9617-4f47-a2d8-d557c72a55c8
  spec:
    egress:
    - {}
    ingress:
    - ports:
      - port: 9091
        protocol: TCP
      - port: 9092
        protocol: TCP
      - port: 10901
        protocol: TCP
      - port: 10903
        protocol: TCP
    podSelector:
      matchLabels:
        app.kubernetes.io/name: prometheus
        app.kubernetes.io/part-of: openshift-monitoring
    policyTypes:
    - Ingress
    - Egress
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    creationTimestamp: "2026-11-03T20:08:16Z"
    generation: 1
    labels:
      app.kubernetes.io/managed-by: cluster-monitoring-operator
      app.kubernetes.io/part-of: openshift-monitoring
    managedFields:
    - apiVersion: networking.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:labels:
            .: {}
            f:app.kubernetes.io/managed-by: {}
            f:app.kubernetes.io/part-of: {}
        f:spec:
          f:egress: {}
          f:ingress: {}
          f:podSelector: {}
          f:policyTypes: {}
      manager: operator
      operation: Update
      time: "2026-11-03T20:08:16Z"
    name: prometheus-operator
    namespace: openshift-monitoring
    resourceVersion: "6579"
    uid: 87d89eb1-01ad-4158-a16a-0ec74e402d07
  spec:
    egress:
    - {}
    ingress:
    - ports:
      - port: 8443
        protocol: TCP
    podSelector:
      matchLabels:
        app.kubernetes.io/name: prometheus-operator
        app.kubernetes.io/part-of: openshift-monitoring
    policyTypes:
    - Ingress
    - Egress
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    creationTimestamp: "2026-11-03T20:08:16Z"
    generation: 1
    labels:
      app.kubernetes.io/managed-by: cluster-monitoring-operator
      app.kubernetes.io/part-of: openshift-monitoring
    managedFields:
    - apiVersion: networking.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:labels:
            .: {}
            f:app.kubernetes.io/managed-by: {}
            f:app.kubernetes.io/part-of: {}
        f:spec:
          f:egress: {}
          f:ingress: {}
          f:podSelector: {}
          f:policyTypes: {}
      manager: operator
      operation: Update
      time: "2026-11-03T20:08:16Z"
    name: prometheus-operator-admission-webhook
    namespace: openshift-monitoring
    resourceVersion: "6600"
    uid: be10171a-df60-4853-a9f6-d9ad047158b0
  spec:
    egress:
    - {}
    ingress:
    - ports:
      - port: 8443
        protocol: TCP
    podSelector:
      matchLabels:
        app.kubernetes.io/name: prometheus-operator-admission-webhook
        app.kubernetes.io/part-of: openshift-monitoring
    policyTypes:
    - Ingress
    - Egress
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    creationTimestamp: "2026-11-03T20:08:43Z"
    generation: 1
    labels:
      app.kubernetes.io/managed-by: cluster-monitoring-operator
      app.kubernetes.io/part-of: openshift-monitoring
    managedFields:
    - apiVersion: networking.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:labels:
            .: {}
            f:app.kubernetes.io/managed-by: {}
            f:app.kubernetes.io/part-of: {}
        f:spec:
          f:egress: {}
          f:ingress: {}
          f:podSelector: {}
          f:policyTypes: {}
      manager: operator
      operation: Update
      time: "2026-11-03T20:08:43Z"
    name: telemeter-client
    namespace: openshift-monitoring
    resourceVersion: "8146"
    uid: aac33563-404c-4335-adcc-5ab23acbdd6d
  spec:
    egress:
    - {}
    ingress:
    - ports:
      - port: 8443
        protocol: TCP
    podSelector:
      matchLabels:
        app.kubernetes.io/name: telemeter-client
        app.kubernetes.io/part-of: openshift-monitoring
    policyTypes:
    - Ingress
    - Egress
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    creationTimestamp: "2026-11-03T20:08:35Z"
    generation: 1
    labels:
      app.kubernetes.io/managed-by: cluster-monitoring-operator
      app.kubernetes.io/part-of: openshift-monitoring
    managedFields:
    - apiVersion: networking.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:labels:
            .: {}
            f:app.kubernetes.io/managed-by: {}
            f:app.kubernetes.io/part-of: {}
        f:spec:
          f:egress: {}
          f:ingress: {}
          f:podSelector: {}
          f:policyTypes: {}
      manager: operator
      operation: Update
      time: "2026-11-03T20:08:35Z"
    name: thanos-querier
    namespace: openshift-monitoring
    resourceVersion: "7323"
    uid: 09b7983e-9dbf-4b1e-9e63-0699de278a24
  spec:
    egress:
    - {}
    ingress:
    - ports:
      - port: 9091
        protocol: TCP
      - port: 9092
        protocol: TCP
      - port: 9093
        protocol: TCP
      - port: 9094
        protocol: TCP
    podSelector:
      matchLabels:
        app.kubernetes.io/name: thanos-query
        app.kubernetes.io/part-of: openshift-monitoring
    policyTypes:
    - Ingress
    - Egress
kind: NetworkPolicyList
metadata:
  resourceVersion: "12305"