--- apiVersion: networking.k8s.io/v1 items: - apiVersion: networking.k8s.io/v1 kind: NetworkPolicy metadata: annotations: platform.opendatahub.io/instance.generation: "2" platform.opendatahub.io/instance.name: default-gateway platform.opendatahub.io/instance.uid: f1bd3cff-731a-41b1-835d-0624a1ca8913 platform.opendatahub.io/type: Open Data Hub platform.opendatahub.io/version: 3.5.0-ea.2 creationTimestamp: "2026-07-15T15:31:02Z" generation: 1 labels: app: kube-auth-proxy app.kubernetes.io/component: authentication platform.opendatahub.io/part-of: gatewayconfig managedFields: - apiVersion: networking.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: f:platform.opendatahub.io/instance.generation: {} f:platform.opendatahub.io/instance.name: {} f:platform.opendatahub.io/instance.uid: {} f:platform.opendatahub.io/type: {} f:platform.opendatahub.io/version: {} f:labels: f:app: {} f:app.kubernetes.io/component: {} f:platform.opendatahub.io/part-of: {} f:spec: f:ingress: {} f:podSelector: {} f:policyTypes: {} manager: gatewayconfig operation: Apply time: "2026-07-15T15:31:10Z" name: kube-auth-proxy namespace: openshift-ingress resourceVersion: "15148" uid: d3555525-9749-44be-865a-8d17331a2e87 spec: ingress: - from: - namespaceSelector: matchLabels: kubernetes.io/metadata.name: openshift-ingress podSelector: matchLabels: gateway.networking.k8s.io/gateway-name: data-science-gateway ports: - port: 8443 protocol: TCP - from: - namespaceSelector: matchLabels: kubernetes.io/metadata.name: openshift-monitoring ports: - port: 9000 protocol: TCP - from: - namespaceSelector: matchLabels: kubernetes.io/metadata.name: openshift-user-workload-monitoring ports: - port: 9000 protocol: TCP podSelector: matchLabels: app: kube-auth-proxy policyTypes: - Ingress - apiVersion: networking.k8s.io/v1 kind: NetworkPolicy metadata: creationTimestamp: "2026-07-15T15:34:57Z" generation: 1 labels: app.kubernetes.io/component: api app.kubernetes.io/name: maas-api app.kubernetes.io/part-of: models-as-a-service app.opendatahub.io/modelsasservice: "true" maas.opendatahub.io/tenant-name: e2e-shared-b-bcb615 maas.opendatahub.io/tenant-namespace: ai-tenant-e2e-shared-b-bcb615 managedFields: - apiVersion: networking.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:labels: f:app.kubernetes.io/component: {} f:app.kubernetes.io/name: {} f:app.kubernetes.io/part-of: {} f:app.opendatahub.io/modelsasservice: {} f:maas.opendatahub.io/tenant-name: {} f:maas.opendatahub.io/tenant-namespace: {} f:ownerReferences: k:{"uid":"967cd321-223c-4c26-8bb2-5278a63be77a"}: {} f:spec: f:egress: {} f:ingress: {} f:podSelector: {} f:policyTypes: {} manager: maas-controller operation: Apply time: "2026-07-15T16:11:47Z" name: payload-processing namespace: openshift-ingress ownerReferences: - apiVersion: maas.opendatahub.io/v1alpha1 blockOwnerDeletion: true controller: true kind: Config name: default uid: 967cd321-223c-4c26-8bb2-5278a63be77a resourceVersion: "61898" uid: 9a84d6e6-99c2-45d4-a77b-281e2e54dca3 spec: egress: - ports: - port: 53 protocol: UDP - port: 53 protocol: TCP - port: 5353 protocol: UDP - port: 5353 protocol: TCP - ports: - port: 443 protocol: TCP - port: 6443 protocol: TCP ingress: - from: - namespaceSelector: matchLabels: kubernetes.io/metadata.name: openshift-ingress podSelector: matchLabels: gateway.istio.io/managed: istio.io-gateway-controller ports: - port: 9004 protocol: TCP - from: - namespaceSelector: matchLabels: kubernetes.io/metadata.name: openshift-monitoring - namespaceSelector: matchLabels: kubernetes.io/metadata.name: openshift-user-workload-monitoring ports: - port: 9005 protocol: TCP - port: 9090 protocol: TCP podSelector: matchExpressions: - key: app operator: In values: - payload-processing - payload-pre-processing policyTypes: - Ingress - Egress kind: NetworkPolicyList metadata: resourceVersion: "62786"