---
apiVersion: networking.k8s.io/v1
items:
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    annotations:
      internal.config.kubernetes.io/previousKinds: NetworkPolicy
      internal.config.kubernetes.io/previousNames: kserve-controller-manager
      internal.config.kubernetes.io/previousNamespaces: opendatahub
      platform.opendatahub.io/instance.generation: "1"
      platform.opendatahub.io/instance.name: default-kserve
      platform.opendatahub.io/instance.uid: 66cb13ee-111c-4209-aa8d-7d133277803c
      platform.opendatahub.io/type: Open Data Hub
      platform.opendatahub.io/version: 3.5.0-ea.2
    creationTimestamp: "2026-07-07T17:32:14Z"
    generation: 1
    labels:
      app.kubernetes.io/part-of: kserve
      app.opendatahub.io/kserve: "true"
      platform.opendatahub.io/part-of: kserve
    managedFields:
    - apiVersion: networking.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            f:internal.config.kubernetes.io/previousKinds: {}
            f:internal.config.kubernetes.io/previousNames: {}
            f:internal.config.kubernetes.io/previousNamespaces: {}
            f:platform.opendatahub.io/instance.generation: {}
            f:platform.opendatahub.io/instance.name: {}
            f:platform.opendatahub.io/instance.uid: {}
            f:platform.opendatahub.io/type: {}
            f:platform.opendatahub.io/version: {}
          f:labels:
            f:app.kubernetes.io/part-of: {}
            f:app.opendatahub.io/kserve: {}
            f:platform.opendatahub.io/part-of: {}
          f:ownerReferences:
            k:{"uid":"66cb13ee-111c-4209-aa8d-7d133277803c"}: {}
        f:spec:
          f:ingress: {}
          f:podSelector: {}
      manager: kserve
      operation: Apply
      time: "2026-07-07T17:32:14Z"
    name: kserve-controller-manager
    namespace: opendatahub
    ownerReferences:
    - apiVersion: components.platform.opendatahub.io/v1alpha1
      blockOwnerDeletion: true
      controller: true
      kind: Kserve
      name: default-kserve
      uid: 66cb13ee-111c-4209-aa8d-7d133277803c
    resourceVersion: "15852"
    uid: eb68cc5c-4a49-49be-8272-c1582b5a2781
  spec:
    ingress:
    - {}
    podSelector:
      matchLabels:
        control-plane: kserve-controller-manager
    policyTypes:
    - Ingress
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    creationTimestamp: "2026-07-07T17:35:56Z"
    generation: 1
    labels:
      app.kubernetes.io/component: api
      app.kubernetes.io/name: maas-api
      app.kubernetes.io/part-of: models-as-a-service
      app.opendatahub.io/modelsasservice: "true"
      maas.opendatahub.io/tenant-name: e2e-shared-b-df746e
      maas.opendatahub.io/tenant-namespace: ai-tenant-e2e-shared-b-df746e
    managedFields:
    - apiVersion: networking.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:labels:
            f:app.kubernetes.io/component: {}
            f:app.kubernetes.io/name: {}
            f:app.kubernetes.io/part-of: {}
            f:app.opendatahub.io/modelsasservice: {}
            f:maas.opendatahub.io/tenant-name: {}
            f:maas.opendatahub.io/tenant-namespace: {}
          f:ownerReferences:
            k:{"uid":"df7f7ae1-4c1f-475b-8d2c-bbb1422d2363"}: {}
        f:spec:
          f:ingress: {}
          f:podSelector: {}
          f:policyTypes: {}
      manager: maas-controller
      operation: Apply
      time: "2026-07-07T18:08:32Z"
    name: maas-api-allow-gateway
    namespace: opendatahub
    ownerReferences:
    - apiVersion: maas.opendatahub.io/v1alpha1
      blockOwnerDeletion: true
      controller: true
      kind: Config
      name: default
      uid: df7f7ae1-4c1f-475b-8d2c-bbb1422d2363
    resourceVersion: "58560"
    uid: f0af062c-5aae-4f0f-ac62-58e62b947723
  spec:
    ingress:
    - from:
      - namespaceSelector:
          matchLabels:
            kubernetes.io/metadata.name: openshift-ingress
        podSelector:
          matchLabels:
            app.kubernetes.io/component: api
            app.kubernetes.io/name: maas-api
            app.kubernetes.io/part-of: models-as-a-service
      ports:
      - port: 8443
        protocol: TCP
    podSelector:
      matchLabels:
        app.kubernetes.io/component: api
        app.kubernetes.io/name: maas-api
        app.kubernetes.io/part-of: models-as-a-service
    policyTypes:
    - Ingress
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    creationTimestamp: "2026-07-07T17:35:56Z"
    generation: 1
    labels:
      app.kubernetes.io/component: api
      app.kubernetes.io/name: maas-api
      app.kubernetes.io/part-of: models-as-a-service
      app.opendatahub.io/modelsasservice: "true"
      maas.opendatahub.io/tenant-name: e2e-shared-b-df746e
      maas.opendatahub.io/tenant-namespace: ai-tenant-e2e-shared-b-df746e
    managedFields:
    - apiVersion: networking.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:labels:
            f:app.kubernetes.io/component: {}
            f:app.kubernetes.io/name: {}
            f:app.kubernetes.io/part-of: {}
            f:app.opendatahub.io/modelsasservice: {}
            f:maas.opendatahub.io/tenant-name: {}
            f:maas.opendatahub.io/tenant-namespace: {}
          f:ownerReferences:
            k:{"uid":"df7f7ae1-4c1f-475b-8d2c-bbb1422d2363"}: {}
        f:spec:
          f:ingress: {}
          f:podSelector: {}
          f:policyTypes: {}
      manager: maas-controller
      operation: Apply
      time: "2026-07-07T18:08:32Z"
    name: maas-api-allow-monitoring
    namespace: opendatahub
    ownerReferences:
    - apiVersion: maas.opendatahub.io/v1alpha1
      blockOwnerDeletion: true
      controller: true
      kind: Config
      name: default
      uid: df7f7ae1-4c1f-475b-8d2c-bbb1422d2363
    resourceVersion: "58562"
    uid: b63ed6aa-0f2f-4042-b689-a8badc1d91b6
  spec:
    ingress:
    - from:
      - namespaceSelector:
          matchLabels:
            kubernetes.io/metadata.name: redhat-ods-monitoring
      ports:
      - port: 9090
        protocol: TCP
    podSelector:
      matchLabels:
        app.kubernetes.io/component: api
        app.kubernetes.io/name: maas-api
        app.kubernetes.io/part-of: models-as-a-service
    policyTypes:
    - Ingress
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    creationTimestamp: "2026-07-07T17:35:56Z"
    generation: 75
    labels:
      app.kubernetes.io/component: api
      app.kubernetes.io/name: maas-api
      app.kubernetes.io/part-of: models-as-a-service
      app.opendatahub.io/modelsasservice: "true"
      maas.opendatahub.io/tenant-name: e2e-shared-b-df746e
      maas.opendatahub.io/tenant-namespace: ai-tenant-e2e-shared-b-df746e
    managedFields:
    - apiVersion: networking.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:labels:
            f:app.kubernetes.io/component: {}
            f:app.kubernetes.io/name: {}
            f:app.kubernetes.io/part-of: {}
            f:app.opendatahub.io/modelsasservice: {}
            f:maas.opendatahub.io/tenant-name: {}
            f:maas.opendatahub.io/tenant-namespace: {}
          f:ownerReferences:
            k:{"uid":"df7f7ae1-4c1f-475b-8d2c-bbb1422d2363"}: {}
        f:spec:
          f:egress: {}
          f:ingress: {}
          f:podSelector: {}
          f:policyTypes: {}
      manager: maas-controller
      operation: Apply
      time: "2026-07-07T18:08:32Z"
    name: maas-api-cleanup-restrict
    namespace: opendatahub
    ownerReferences:
    - apiVersion: maas.opendatahub.io/v1alpha1
      blockOwnerDeletion: true
      controller: true
      kind: Config
      name: default
      uid: df7f7ae1-4c1f-475b-8d2c-bbb1422d2363
    resourceVersion: "58549"
    uid: 28699332-517b-47b0-9220-4496961891f1
  spec:
    egress:
    - ports:
      - port: 8443
        protocol: TCP
      to:
      - podSelector:
          matchLabels:
            app.kubernetes.io/component: api
            app.kubernetes.io/name: maas-api
            app.kubernetes.io/part-of: models-as-a-service
    - ports:
      - port: 53
        protocol: UDP
      - port: 53
        protocol: TCP
      - port: 5353
        protocol: UDP
      - port: 5353
        protocol: TCP
    podSelector:
      matchLabels:
        app: maas-api-cleanup
        app.kubernetes.io/component: api
        app.kubernetes.io/name: maas-api
        app.kubernetes.io/part-of: models-as-a-service
    policyTypes:
    - Egress
    - Ingress
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    creationTimestamp: "2026-07-07T17:35:56Z"
    generation: 1
    labels:
      app.kubernetes.io/component: api
      app.kubernetes.io/name: maas-api
      app.kubernetes.io/part-of: models-as-a-service
      app.opendatahub.io/modelsasservice: "true"
      maas.opendatahub.io/tenant-name: e2e-shared-b-df746e
      maas.opendatahub.io/tenant-namespace: ai-tenant-e2e-shared-b-df746e
    managedFields:
    - apiVersion: networking.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:labels:
            f:app.kubernetes.io/component: {}
            f:app.kubernetes.io/name: {}
            f:app.kubernetes.io/part-of: {}
            f:app.opendatahub.io/modelsasservice: {}
            f:maas.opendatahub.io/tenant-name: {}
            f:maas.opendatahub.io/tenant-namespace: {}
          f:ownerReferences:
            k:{"uid":"df7f7ae1-4c1f-475b-8d2c-bbb1422d2363"}: {}
        f:spec:
          f:ingress: {}
          f:podSelector: {}
          f:policyTypes: {}
      manager: maas-controller
      operation: Apply
      time: "2026-07-07T18:08:32Z"
    name: maas-authorino-allow
    namespace: opendatahub
    ownerReferences:
    - apiVersion: maas.opendatahub.io/v1alpha1
      blockOwnerDeletion: true
      controller: true
      kind: Config
      name: default
      uid: df7f7ae1-4c1f-475b-8d2c-bbb1422d2363
    resourceVersion: "58559"
    uid: c33a0f74-d49e-4617-9eb7-ecbdebf218a7
  spec:
    ingress:
    - from:
      - namespaceSelector:
          matchExpressions:
          - key: kubernetes.io/metadata.name
            operator: In
            values:
            - kuadrant-system
            - openshift-operators
        podSelector:
          matchLabels:
            authorino-resource: authorino
    podSelector:
      matchLabels:
        app.kubernetes.io/component: api
        app.kubernetes.io/name: maas-api
        app.kubernetes.io/part-of: models-as-a-service
    policyTypes:
    - Ingress
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    annotations:
      kubectl.kubernetes.io/last-applied-configuration: |
        {"apiVersion":"networking.k8s.io/v1","kind":"NetworkPolicy","metadata":{"annotations":{},"labels":{"app.kubernetes.io/component":"monitoring","app.kubernetes.io/part-of":"maas","app.opendatahub.io/modelsasservice":"true"},"name":"maas-controller-allow-monitoring","namespace":"opendatahub"},"spec":{"ingress":[{"from":[{"namespaceSelector":{"matchLabels":{"kubernetes.io/metadata.name":"redhat-ods-monitoring"}}}],"ports":[{"port":8080,"protocol":"TCP"}]}],"podSelector":{"matchLabels":{"control-plane":"maas-controller"}},"policyTypes":["Ingress"]}}
    creationTimestamp: "2026-07-07T17:35:20Z"
    generation: 1
    labels:
      app.kubernetes.io/component: monitoring
      app.kubernetes.io/part-of: maas
      app.opendatahub.io/modelsasservice: "true"
    managedFields:
    - apiVersion: networking.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:kubectl.kubernetes.io/last-applied-configuration: {}
          f:labels:
            .: {}
            f:app.kubernetes.io/component: {}
            f:app.kubernetes.io/part-of: {}
            f:app.opendatahub.io/modelsasservice: {}
        f:spec:
          f:ingress: {}
          f:podSelector: {}
          f:policyTypes: {}
      manager: kubectl-client-side-apply
      operation: Update
      time: "2026-07-07T17:35:20Z"
    name: maas-controller-allow-monitoring
    namespace: opendatahub
    resourceVersion: "21507"
    uid: 7ce78151-34ac-4453-8b39-ff819d9d2759
  spec:
    ingress:
    - from:
      - namespaceSelector:
          matchLabels:
            kubernetes.io/metadata.name: redhat-ods-monitoring
      ports:
      - port: 8080
        protocol: TCP
    podSelector:
      matchLabels:
        control-plane: maas-controller
    policyTypes:
    - Ingress
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    creationTimestamp: "2026-07-07T17:31:59Z"
    generation: 1
    managedFields:
    - apiVersion: networking.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:ownerReferences:
            k:{"uid":"666568ac-2654-4c04-bc2b-42bf95624e73"}: {}
        f:spec:
          f:ingress: {}
          f:podSelector: {}
          f:policyTypes: {}
      manager: dscinitialization.opendatahub.io
      operation: Apply
      time: "2026-07-07T17:31:59Z"
    name: opendatahub
    namespace: opendatahub
    ownerReferences:
    - apiVersion: dscinitialization.opendatahub.io/v2
      blockOwnerDeletion: true
      controller: true
      kind: DSCInitialization
      name: default-dsci
      uid: 666568ac-2654-4c04-bc2b-42bf95624e73
    resourceVersion: "14776"
    uid: cee6676b-47c4-40db-a1eb-ef3a00eb0824
  spec:
    ingress:
    - from:
      - namespaceSelector:
          matchLabels:
            opendatahub.io/generated-namespace: "true"
    - from:
      - namespaceSelector:
          matchLabels:
            opendatahub.io/application-namespace: "true"
    - from:
      - namespaceSelector:
          matchLabels:
            network.openshift.io/policy-group: ingress
    - from:
      - namespaceSelector:
          matchLabels:
            kubernetes.io/metadata.name: openshift-host-network
    - from:
      - namespaceSelector:
          matchLabels:
            kubernetes.io/metadata.name: openshift-monitoring
    - from:
      - namespaceSelector:
          matchLabels:
            kubernetes.io/metadata.name: openshift-cluster-observability-operator
    podSelector: {}
    policyTypes:
    - Ingress
kind: NetworkPolicyList
metadata:
  resourceVersion: "59341"