--- apiVersion: networking.k8s.io/v1 items: - apiVersion: networking.k8s.io/v1 kind: NetworkPolicy metadata: annotations: platform.opendatahub.io/instance.generation: "2" platform.opendatahub.io/instance.name: default-gateway platform.opendatahub.io/instance.uid: 27ce8a01-4ed0-4b57-bda9-7ba9b69457a2 platform.opendatahub.io/type: Open Data Hub platform.opendatahub.io/version: 3.5.0-ea.2 creationTimestamp: "2026-07-16T20:39:12Z" generation: 1 labels: app: kube-auth-proxy app.kubernetes.io/component: authentication platform.opendatahub.io/part-of: gatewayconfig managedFields: - apiVersion: networking.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: f:platform.opendatahub.io/instance.generation: {} f:platform.opendatahub.io/instance.name: {} f:platform.opendatahub.io/instance.uid: {} f:platform.opendatahub.io/type: {} f:platform.opendatahub.io/version: {} f:labels: f:app: {} f:app.kubernetes.io/component: {} f:platform.opendatahub.io/part-of: {} f:spec: f:ingress: {} f:podSelector: {} f:policyTypes: {} manager: gatewayconfig operation: Apply time: "2026-07-16T20:39:12Z" name: kube-auth-proxy namespace: openshift-ingress resourceVersion: "15452" uid: 3a5d087d-dbba-4a62-8634-82e43cefdc46 spec: ingress: - from: - namespaceSelector: matchLabels: kubernetes.io/metadata.name: openshift-ingress podSelector: matchLabels: gateway.networking.k8s.io/gateway-name: data-science-gateway ports: - port: 8443 protocol: TCP - from: - namespaceSelector: matchLabels: kubernetes.io/metadata.name: openshift-monitoring ports: - port: 9000 protocol: TCP - from: - namespaceSelector: matchLabels: kubernetes.io/metadata.name: openshift-user-workload-monitoring ports: - port: 9000 protocol: TCP podSelector: matchLabels: app: kube-auth-proxy policyTypes: - Ingress - apiVersion: networking.k8s.io/v1 kind: NetworkPolicy metadata: creationTimestamp: "2026-07-16T20:42:34Z" generation: 1 labels: app.kubernetes.io/component: api app.kubernetes.io/name: maas-api app.kubernetes.io/part-of: models-as-a-service app.opendatahub.io/modelsasservice: "true" maas.opendatahub.io/tenant-name: e2e-shared-b-fb5e77 maas.opendatahub.io/tenant-namespace: ai-tenant-e2e-shared-b-fb5e77 managedFields: - apiVersion: networking.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:labels: f:app.kubernetes.io/component: {} f:app.kubernetes.io/name: {} f:app.kubernetes.io/part-of: {} f:app.opendatahub.io/modelsasservice: {} f:maas.opendatahub.io/tenant-name: {} f:maas.opendatahub.io/tenant-namespace: {} f:ownerReferences: k:{"uid":"453c707a-8474-4517-a870-9e77cf8dca1e"}: {} f:spec: f:egress: {} f:ingress: {} f:podSelector: {} f:policyTypes: {} manager: maas-controller operation: Apply time: "2026-07-16T21:29:30Z" name: payload-processing namespace: openshift-ingress ownerReferences: - apiVersion: maas.opendatahub.io/v1alpha1 blockOwnerDeletion: true controller: true kind: Config name: default uid: 453c707a-8474-4517-a870-9e77cf8dca1e resourceVersion: "73292" uid: 038cfa54-c247-4b31-8071-adb18231d9d9 spec: egress: - ports: - port: 53 protocol: UDP - port: 53 protocol: TCP - port: 5353 protocol: UDP - port: 5353 protocol: TCP - ports: - port: 443 protocol: TCP - port: 6443 protocol: TCP ingress: - from: - namespaceSelector: matchLabels: kubernetes.io/metadata.name: openshift-ingress podSelector: matchLabels: gateway.istio.io/managed: istio.io-gateway-controller ports: - port: 9004 protocol: TCP - from: - namespaceSelector: matchLabels: kubernetes.io/metadata.name: openshift-monitoring - namespaceSelector: matchLabels: kubernetes.io/metadata.name: openshift-user-workload-monitoring ports: - port: 9005 protocol: TCP - port: 9090 protocol: TCP podSelector: matchExpressions: - key: app operator: In values: - payload-processing - payload-pre-processing policyTypes: - Ingress - Egress kind: NetworkPolicyList metadata: resourceVersion: "74400"