---
apiVersion: networking.k8s.io/v1
items:
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    creationTimestamp: "2026-10-30T11:54:29Z"
    generation: 1
    labels:
      app.kubernetes.io/managed-by: cluster-monitoring-operator
      app.kubernetes.io/part-of: openshift-monitoring
    managedFields:
    - apiVersion: networking.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:labels:
            .: {}
            f:app.kubernetes.io/managed-by: {}
            f:app.kubernetes.io/part-of: {}
        f:spec:
          f:egress: {}
          f:ingress: {}
          f:podSelector: {}
          f:policyTypes: {}
      manager: operator
      operation: Update
      time: "2026-10-30T11:54:29Z"
    name: alertmanager
    namespace: openshift-monitoring
    resourceVersion: "7257"
    uid: 1d1c1bfb-bf15-4fed-aa0d-a19357a84423
  spec:
    egress:
    - {}
    ingress:
    - ports:
      - port: 9092
        protocol: TCP
      - port: 9095
        protocol: TCP
      - port: 9097
        protocol: TCP
      - port: 9094
        protocol: TCP
      - port: 9094
        protocol: UDP
    podSelector:
      matchLabels:
        app.kubernetes.io/name: alertmanager
        app.kubernetes.io/part-of: openshift-monitoring
    policyTypes:
    - Ingress
    - Egress
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    annotations:
      include.release.openshift.io/hypershift: "true"
      include.release.openshift.io/ibm-cloud-managed: "true"
      include.release.openshift.io/self-managed-high-availability: "true"
      include.release.openshift.io/single-node-developer: "true"
    creationTimestamp: "2026-10-30T11:46:55Z"
    generation: 1
    labels:
      app.kubernetes.io/managed-by: cluster-version-operator
      app.kubernetes.io/part-of: openshift-monitoring
    managedFields:
    - apiVersion: networking.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:include.release.openshift.io/hypershift: {}
            f:include.release.openshift.io/ibm-cloud-managed: {}
            f:include.release.openshift.io/self-managed-high-availability: {}
            f:include.release.openshift.io/single-node-developer: {}
          f:labels:
            .: {}
            f:app.kubernetes.io/managed-by: {}
            f:app.kubernetes.io/part-of: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"d0a712ad-f36a-4e90-94a7-9641b7fd71ca"}: {}
        f:spec:
          f:egress: {}
          f:ingress: {}
          f:podSelector: {}
          f:policyTypes: {}
      manager: cluster-version-operator
      operation: Update
      time: "2026-10-30T11:46:55Z"
    name: cluster-monitoring-operator
    namespace: openshift-monitoring
    ownerReferences:
    - apiVersion: config.openshift.io/v1
      controller: true
      kind: ClusterVersion
      name: version
      uid: d0a712ad-f36a-4e90-94a7-9641b7fd71ca
    resourceVersion: "1853"
    uid: 91489b6f-bf0a-493f-9ba2-63540ddd826b
  spec:
    egress:
    - {}
    ingress:
    - ports:
      - port: 8443
        protocol: TCP
    podSelector:
      matchLabels:
        app.kubernetes.io/name: cluster-monitoring-operator
    policyTypes:
    - Ingress
    - Egress
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    creationTimestamp: "2026-10-30T11:55:16Z"
    generation: 1
    labels:
      app.kubernetes.io/managed-by: cluster-monitoring-operator
      app.kubernetes.io/part-of: openshift-monitoring
    managedFields:
    - apiVersion: networking.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:labels:
            .: {}
            f:app.kubernetes.io/managed-by: {}
            f:app.kubernetes.io/part-of: {}
        f:spec:
          f:podSelector: {}
          f:policyTypes: {}
      manager: operator
      operation: Update
      time: "2026-10-30T11:55:16Z"
    name: deny-cluster-monitoring-operator-and-operands
    namespace: openshift-monitoring
    resourceVersion: "8953"
    uid: f4ad9686-c9ad-4526-be1e-79e27faa00be
  spec:
    podSelector:
      matchLabels:
        app.kubernetes.io/part-of: openshift-monitoring
    policyTypes:
    - Ingress
    - Egress
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    creationTimestamp: "2026-10-30T11:54:29Z"
    generation: 1
    labels:
      app.kubernetes.io/managed-by: cluster-monitoring-operator
      app.kubernetes.io/part-of: openshift-monitoring
    managedFields:
    - apiVersion: networking.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:labels:
            .: {}
            f:app.kubernetes.io/managed-by: {}
            f:app.kubernetes.io/part-of: {}
        f:spec:
          f:egress: {}
          f:ingress: {}
          f:podSelector: {}
          f:policyTypes: {}
      manager: operator
      operation: Update
      time: "2026-10-30T11:54:29Z"
    name: kube-state-metrics
    namespace: openshift-monitoring
    resourceVersion: "7262"
    uid: 846231af-f22f-4090-a29f-9ce4c343bd49
  spec:
    egress:
    - {}
    ingress:
    - ports:
      - port: 8443
        protocol: TCP
      - port: 9443
        protocol: TCP
    podSelector:
      matchLabels:
        app.kubernetes.io/name: kube-state-metrics
        app.kubernetes.io/part-of: openshift-monitoring
    policyTypes:
    - Ingress
    - Egress
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    creationTimestamp: "2026-10-30T11:54:29Z"
    generation: 1
    labels:
      app.kubernetes.io/managed-by: cluster-monitoring-operator
      app.kubernetes.io/part-of: openshift-monitoring
    managedFields:
    - apiVersion: networking.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:labels:
            .: {}
            f:app.kubernetes.io/managed-by: {}
            f:app.kubernetes.io/part-of: {}
        f:spec:
          f:egress: {}
          f:ingress: {}
          f:podSelector: {}
          f:policyTypes: {}
      manager: operator
      operation: Update
      time: "2026-10-30T11:54:29Z"
    name: metrics-server
    namespace: openshift-monitoring
    resourceVersion: "7259"
    uid: b0b8e485-b34e-4a1d-bf45-b7a1b01c11a7
  spec:
    egress:
    - {}
    ingress:
    - ports:
      - port: 10250
        protocol: TCP
    podSelector:
      matchLabels:
        app.kubernetes.io/name: metrics-server
        app.kubernetes.io/part-of: openshift-monitoring
    policyTypes:
    - Ingress
    - Egress
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    creationTimestamp: "2026-10-30T11:54:29Z"
    generation: 1
    labels:
      app.kubernetes.io/managed-by: cluster-monitoring-operator
      app.kubernetes.io/part-of: openshift-monitoring
    managedFields:
    - apiVersion: networking.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:labels:
            .: {}
            f:app.kubernetes.io/managed-by: {}
            f:app.kubernetes.io/part-of: {}
        f:spec:
          f:egress: {}
          f:ingress: {}
          f:podSelector: {}
          f:policyTypes: {}
      manager: operator
      operation: Update
      time: "2026-10-30T11:54:29Z"
    name: monitoring-plugin
    namespace: openshift-monitoring
    resourceVersion: "7260"
    uid: a79b7b79-9b92-4050-b24f-af1979f122d1
  spec:
    egress:
    - {}
    ingress:
    - ports:
      - port: 9443
        protocol: TCP
    podSelector:
      matchLabels:
        app.kubernetes.io/name: monitoring-plugin
        app.kubernetes.io/part-of: openshift-monitoring
    policyTypes:
    - Ingress
    - Egress
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    creationTimestamp: "2026-10-30T11:54:29Z"
    generation: 1
    labels:
      app.kubernetes.io/managed-by: cluster-monitoring-operator
      app.kubernetes.io/part-of: openshift-monitoring
    managedFields:
    - apiVersion: networking.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:labels:
            .: {}
            f:app.kubernetes.io/managed-by: {}
            f:app.kubernetes.io/part-of: {}
        f:spec:
          f:egress: {}
          f:ingress: {}
          f:podSelector: {}
          f:policyTypes: {}
      manager: operator
      operation: Update
      time: "2026-10-30T11:54:29Z"
    name: openshift-state-metrics
    namespace: openshift-monitoring
    resourceVersion: "7261"
    uid: 1fa3f1ef-4558-4448-a6fc-afdfe5a49f71
  spec:
    egress:
    - {}
    ingress:
    - ports:
      - port: 8443
        protocol: TCP
      - port: 9443
        protocol: TCP
    podSelector:
      matchLabels:
        app.kubernetes.io/name: openshift-state-metrics
        app.kubernetes.io/part-of: openshift-monitoring
    policyTypes:
    - Ingress
    - Egress
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    creationTimestamp: "2026-10-30T11:54:29Z"
    generation: 1
    labels:
      app.kubernetes.io/managed-by: cluster-monitoring-operator
      app.kubernetes.io/part-of: openshift-monitoring
    managedFields:
    - apiVersion: networking.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:labels:
            .: {}
            f:app.kubernetes.io/managed-by: {}
            f:app.kubernetes.io/part-of: {}
        f:spec:
          f:egress: {}
          f:ingress: {}
          f:podSelector: {}
          f:policyTypes: {}
      manager: operator
      operation: Update
      time: "2026-10-30T11:54:29Z"
    name: prometheus
    namespace: openshift-monitoring
    resourceVersion: "7263"
    uid: 33991e5a-51fa-4e96-bf92-ec2cef13865d
  spec:
    egress:
    - {}
    ingress:
    - ports:
      - port: 9091
        protocol: TCP
      - port: 9092
        protocol: TCP
      - port: 10901
        protocol: TCP
      - port: 10903
        protocol: TCP
    podSelector:
      matchLabels:
        app.kubernetes.io/name: prometheus
        app.kubernetes.io/part-of: openshift-monitoring
    policyTypes:
    - Ingress
    - Egress
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    creationTimestamp: "2026-10-30T11:54:08Z"
    generation: 1
    labels:
      app.kubernetes.io/managed-by: cluster-monitoring-operator
      app.kubernetes.io/part-of: openshift-monitoring
    managedFields:
    - apiVersion: networking.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:labels:
            .: {}
            f:app.kubernetes.io/managed-by: {}
            f:app.kubernetes.io/part-of: {}
        f:spec:
          f:egress: {}
          f:ingress: {}
          f:podSelector: {}
          f:policyTypes: {}
      manager: operator
      operation: Update
      time: "2026-10-30T11:54:08Z"
    name: prometheus-operator
    namespace: openshift-monitoring
    resourceVersion: "6708"
    uid: 92ff9b41-925f-43df-958e-87d2556379f7
  spec:
    egress:
    - {}
    ingress:
    - ports:
      - port: 8443
        protocol: TCP
    podSelector:
      matchLabels:
        app.kubernetes.io/name: prometheus-operator
        app.kubernetes.io/part-of: openshift-monitoring
    policyTypes:
    - Ingress
    - Egress
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    creationTimestamp: "2026-10-30T11:54:09Z"
    generation: 1
    labels:
      app.kubernetes.io/managed-by: cluster-monitoring-operator
      app.kubernetes.io/part-of: openshift-monitoring
    managedFields:
    - apiVersion: networking.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:labels:
            .: {}
            f:app.kubernetes.io/managed-by: {}
            f:app.kubernetes.io/part-of: {}
        f:spec:
          f:egress: {}
          f:ingress: {}
          f:podSelector: {}
          f:policyTypes: {}
      manager: operator
      operation: Update
      time: "2026-10-30T11:54:09Z"
    name: prometheus-operator-admission-webhook
    namespace: openshift-monitoring
    resourceVersion: "6730"
    uid: 525d7d54-800c-491e-b636-5433370ecfe1
  spec:
    egress:
    - {}
    ingress:
    - ports:
      - port: 8443
        protocol: TCP
    podSelector:
      matchLabels:
        app.kubernetes.io/name: prometheus-operator-admission-webhook
        app.kubernetes.io/part-of: openshift-monitoring
    policyTypes:
    - Ingress
    - Egress
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    creationTimestamp: "2026-10-30T11:54:38Z"
    generation: 1
    labels:
      app.kubernetes.io/managed-by: cluster-monitoring-operator
      app.kubernetes.io/part-of: openshift-monitoring
    managedFields:
    - apiVersion: networking.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:labels:
            .: {}
            f:app.kubernetes.io/managed-by: {}
            f:app.kubernetes.io/part-of: {}
        f:spec:
          f:egress: {}
          f:ingress: {}
          f:podSelector: {}
          f:policyTypes: {}
      manager: operator
      operation: Update
      time: "2026-10-30T11:54:38Z"
    name: telemeter-client
    namespace: openshift-monitoring
    resourceVersion: "7928"
    uid: cd453559-d98d-4b77-9fd5-95bdada46352
  spec:
    egress:
    - {}
    ingress:
    - ports:
      - port: 8443
        protocol: TCP
    podSelector:
      matchLabels:
        app.kubernetes.io/name: telemeter-client
        app.kubernetes.io/part-of: openshift-monitoring
    policyTypes:
    - Ingress
    - Egress
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    creationTimestamp: "2026-10-30T11:54:29Z"
    generation: 1
    labels:
      app.kubernetes.io/managed-by: cluster-monitoring-operator
      app.kubernetes.io/part-of: openshift-monitoring
    managedFields:
    - apiVersion: networking.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:labels:
            .: {}
            f:app.kubernetes.io/managed-by: {}
            f:app.kubernetes.io/part-of: {}
        f:spec:
          f:egress: {}
          f:ingress: {}
          f:podSelector: {}
          f:policyTypes: {}
      manager: operator
      operation: Update
      time: "2026-10-30T11:54:29Z"
    name: thanos-querier
    namespace: openshift-monitoring
    resourceVersion: "7264"
    uid: 1c3bc751-3c54-4499-b32d-45a0f917fb7d
  spec:
    egress:
    - {}
    ingress:
    - ports:
      - port: 9091
        protocol: TCP
      - port: 9092
        protocol: TCP
      - port: 9093
        protocol: TCP
      - port: 9094
        protocol: TCP
    podSelector:
      matchLabels:
        app.kubernetes.io/name: thanos-query
        app.kubernetes.io/part-of: openshift-monitoring
    policyTypes:
    - Ingress
    - Egress
kind: NetworkPolicyList
metadata:
  resourceVersion: "170584"