---
apiVersion: networking.k8s.io/v1
items:
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    annotations:
      kubectl.kubernetes.io/last-applied-configuration: |
        {"apiVersion":"networking.k8s.io/v1","kind":"NetworkPolicy","metadata":{"annotations":{},"labels":{"app.kubernetes.io/component":"ai-gateway-controller","app.kubernetes.io/name":"ai-gateway-controller","app.kubernetes.io/part-of":"aigateway"},"name":"ai-gateway-controller-allow-metrics-traffic","namespace":"opendatahub"},"spec":{"ingress":[{"from":[{"namespaceSelector":{"matchExpressions":[{"key":"kubernetes.io/metadata.name","operator":"In","values":["redhat-ods-monitoring","openshift-monitoring"]}]}}],"ports":[{"port":8443,"protocol":"TCP"}]},{"ports":[{"port":8081,"protocol":"TCP"}]}],"podSelector":{"matchLabels":{"control-plane":"ai-gateway-controller"}},"policyTypes":["Ingress"]}}
    creationTimestamp: "2026-10-30T13:10:02Z"
    generation: 1
    labels:
      app.kubernetes.io/component: ai-gateway-controller
      app.kubernetes.io/name: ai-gateway-controller
      app.kubernetes.io/part-of: aigateway
    managedFields:
    - apiVersion: networking.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:kubectl.kubernetes.io/last-applied-configuration: {}
          f:labels:
            .: {}
            f:app.kubernetes.io/component: {}
            f:app.kubernetes.io/name: {}
            f:app.kubernetes.io/part-of: {}
        f:spec:
          f:ingress: {}
          f:podSelector: {}
          f:policyTypes: {}
      manager: kubectl-client-side-apply
      operation: Update
      time: "2026-10-30T13:10:02Z"
    name: ai-gateway-controller-allow-metrics-traffic
    namespace: opendatahub
    resourceVersion: "18956"
    uid: cade5a06-a9a3-4f24-af50-5cd020bc3e5f
  spec:
    ingress:
    - from:
      - namespaceSelector:
          matchExpressions:
          - key: kubernetes.io/metadata.name
            operator: In
            values:
            - redhat-ods-monitoring
            - openshift-monitoring
      ports:
      - port: 8443
        protocol: TCP
    - ports:
      - port: 8081
        protocol: TCP
    podSelector:
      matchLabels:
        control-plane: ai-gateway-controller
    policyTypes:
    - Ingress
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    annotations:
      internal.config.kubernetes.io/previousKinds: NetworkPolicy
      internal.config.kubernetes.io/previousNames: kserve-controller-manager
      internal.config.kubernetes.io/previousNamespaces: opendatahub
      platform.opendatahub.io/instance.generation: "1"
      platform.opendatahub.io/instance.name: default-kserve
      platform.opendatahub.io/instance.uid: 915bcc48-f24e-4930-8fb3-2cecb2579ad4
    creationTimestamp: "2026-10-30T13:08:23Z"
    generation: 1
    labels:
      platform.opendatahub.io/part-of: kserve
    managedFields:
    - apiVersion: networking.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            f:internal.config.kubernetes.io/previousKinds: {}
            f:internal.config.kubernetes.io/previousNames: {}
            f:internal.config.kubernetes.io/previousNamespaces: {}
            f:platform.opendatahub.io/instance.generation: {}
            f:platform.opendatahub.io/instance.name: {}
            f:platform.opendatahub.io/instance.uid: {}
          f:labels:
            f:platform.opendatahub.io/part-of: {}
          f:ownerReferences:
            k:{"uid":"915bcc48-f24e-4930-8fb3-2cecb2579ad4"}: {}
        f:spec:
          f:ingress: {}
          f:podSelector: {}
      manager: kserve-module-controller
      operation: Apply
      time: "2026-10-30T13:08:23Z"
    name: kserve-controller-manager
    namespace: opendatahub
    ownerReferences:
    - apiVersion: components.platform.opendatahub.io/v1alpha1
      blockOwnerDeletion: true
      controller: true
      kind: Kserve
      name: default-kserve
      uid: 915bcc48-f24e-4930-8fb3-2cecb2579ad4
    resourceVersion: "17181"
    uid: 7bd2eb24-67b1-40d8-9abd-8361c6d7e3e2
  spec:
    ingress:
    - {}
    podSelector:
      matchLabels:
        control-plane: kserve-controller-manager
    policyTypes:
    - Ingress
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    annotations:
      internal.config.kubernetes.io/previousKinds: NetworkPolicy
      internal.config.kubernetes.io/previousNames: llmisvc-controller-manager
      internal.config.kubernetes.io/previousNamespaces: opendatahub
      platform.opendatahub.io/instance.generation: "1"
      platform.opendatahub.io/instance.name: default-kserve
      platform.opendatahub.io/instance.uid: 915bcc48-f24e-4930-8fb3-2cecb2579ad4
    creationTimestamp: "2026-10-30T13:08:23Z"
    generation: 1
    labels:
      platform.opendatahub.io/part-of: kserve
    managedFields:
    - apiVersion: networking.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            f:internal.config.kubernetes.io/previousKinds: {}
            f:internal.config.kubernetes.io/previousNames: {}
            f:internal.config.kubernetes.io/previousNamespaces: {}
            f:platform.opendatahub.io/instance.generation: {}
            f:platform.opendatahub.io/instance.name: {}
            f:platform.opendatahub.io/instance.uid: {}
          f:labels:
            f:platform.opendatahub.io/part-of: {}
          f:ownerReferences:
            k:{"uid":"915bcc48-f24e-4930-8fb3-2cecb2579ad4"}: {}
        f:spec:
          f:ingress: {}
          f:podSelector: {}
      manager: kserve-module-controller
      operation: Apply
      time: "2026-10-30T13:08:23Z"
    name: llmisvc-controller-manager
    namespace: opendatahub
    ownerReferences:
    - apiVersion: components.platform.opendatahub.io/v1alpha1
      blockOwnerDeletion: true
      controller: true
      kind: Kserve
      name: default-kserve
      uid: 915bcc48-f24e-4930-8fb3-2cecb2579ad4
    resourceVersion: "17182"
    uid: 31186882-e24c-4c43-91db-f44a73e19cd3
  spec:
    ingress:
    - {}
    podSelector:
      matchLabels:
        control-plane: llmisvc-controller-manager
    policyTypes:
    - Ingress
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    annotations:
      kubectl.kubernetes.io/last-applied-configuration: |
        {"apiVersion":"networking.k8s.io/v1","kind":"NetworkPolicy","metadata":{"annotations":{},"labels":{"app.kubernetes.io/component":"models-as-a-service","app.kubernetes.io/name":"maas-controller","app.kubernetes.io/part-of":"models-as-a-service","app.opendatahub.io/modelsasservice":"true"},"name":"maas-controller-allow-monitoring","namespace":"opendatahub"},"spec":{"ingress":[{"from":[{"namespaceSelector":{"matchLabels":{"kubernetes.io/metadata.name":"redhat-ods-monitoring"}}}],"ports":[{"port":8443,"protocol":"TCP"}]}],"podSelector":{"matchLabels":{"control-plane":"maas-controller"}},"policyTypes":["Ingress"]}}
    creationTimestamp: "2026-10-30T13:08:00Z"
    generation: 1
    labels:
      app.kubernetes.io/component: models-as-a-service
      app.kubernetes.io/name: maas-controller
      app.kubernetes.io/part-of: models-as-a-service
      app.opendatahub.io/modelsasservice: "true"
    managedFields:
    - apiVersion: networking.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:kubectl.kubernetes.io/last-applied-configuration: {}
          f:labels:
            .: {}
            f:app.kubernetes.io/component: {}
            f:app.kubernetes.io/name: {}
            f:app.kubernetes.io/part-of: {}
            f:app.opendatahub.io/modelsasservice: {}
        f:spec:
          f:ingress: {}
          f:podSelector: {}
          f:policyTypes: {}
      manager: kubectl-client-side-apply
      operation: Update
      time: "2026-10-30T13:08:00Z"
    name: maas-controller-allow-monitoring
    namespace: opendatahub
    resourceVersion: "16582"
    uid: 01d7f160-2b36-490e-a771-7b79a5173d4d
  spec:
    ingress:
    - from:
      - namespaceSelector:
          matchLabels:
            kubernetes.io/metadata.name: redhat-ods-monitoring
      ports:
      - port: 8443
        protocol: TCP
    podSelector:
      matchLabels:
        control-plane: maas-controller
    policyTypes:
    - Ingress
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    annotations:
      internal.config.kubernetes.io/previousKinds: NetworkPolicy
      internal.config.kubernetes.io/previousNames: odh-model-controller-webhook-allow-ingress
      internal.config.kubernetes.io/previousNamespaces: opendatahub
      platform.opendatahub.io/instance.generation: "1"
      platform.opendatahub.io/instance.name: default-kserve
      platform.opendatahub.io/instance.uid: 915bcc48-f24e-4930-8fb3-2cecb2579ad4
    creationTimestamp: "2026-10-30T13:08:23Z"
    generation: 1
    labels:
      platform.opendatahub.io/part-of: kserve
    managedFields:
    - apiVersion: networking.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            f:internal.config.kubernetes.io/previousKinds: {}
            f:internal.config.kubernetes.io/previousNames: {}
            f:internal.config.kubernetes.io/previousNamespaces: {}
            f:platform.opendatahub.io/instance.generation: {}
            f:platform.opendatahub.io/instance.name: {}
            f:platform.opendatahub.io/instance.uid: {}
          f:labels:
            f:platform.opendatahub.io/part-of: {}
          f:ownerReferences:
            k:{"uid":"915bcc48-f24e-4930-8fb3-2cecb2579ad4"}: {}
        f:spec:
          f:ingress: {}
          f:podSelector: {}
      manager: kserve-module-controller
      operation: Apply
      time: "2026-10-30T13:08:23Z"
    name: odh-model-controller-webhook-allow-ingress
    namespace: opendatahub
    ownerReferences:
    - apiVersion: components.platform.opendatahub.io/v1alpha1
      blockOwnerDeletion: true
      controller: true
      kind: Kserve
      name: default-kserve
      uid: 915bcc48-f24e-4930-8fb3-2cecb2579ad4
    resourceVersion: "17185"
    uid: 8b79b89d-8a1c-4d24-a53b-8fc09766e2ee
  spec:
    ingress:
    - {}
    podSelector:
      matchLabels:
        control-plane: odh-model-controller
    policyTypes:
    - Ingress
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    creationTimestamp: "2026-10-30T13:07:16Z"
    generation: 1
    managedFields:
    - apiVersion: networking.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:ownerReferences:
            k:{"uid":"f5f843b2-90c5-4eea-8054-90b37f9bd584"}: {}
        f:spec:
          f:ingress: {}
          f:podSelector: {}
          f:policyTypes: {}
      manager: dscinitialization.opendatahub.io
      operation: Apply
      time: "2026-10-30T13:07:16Z"
    name: opendatahub
    namespace: opendatahub
    ownerReferences:
    - apiVersion: dscinitialization.opendatahub.io/v2
      blockOwnerDeletion: true
      controller: true
      kind: DSCInitialization
      name: default-dsci
      uid: f5f843b2-90c5-4eea-8054-90b37f9bd584
    resourceVersion: "14557"
    uid: 1fe2216d-c7c9-43f4-93c5-2a5066384d9b
  spec:
    ingress:
    - from:
      - namespaceSelector:
          matchLabels:
            opendatahub.io/generated-namespace: "true"
    - from:
      - namespaceSelector:
          matchLabels:
            opendatahub.io/application-namespace: "true"
    - from:
      - namespaceSelector:
          matchLabels:
            network.openshift.io/policy-group: ingress
    - from:
      - namespaceSelector:
          matchLabels:
            kubernetes.io/metadata.name: openshift-host-network
    - from:
      - namespaceSelector:
          matchLabels:
            kubernetes.io/metadata.name: openshift-monitoring
    - from:
      - namespaceSelector:
          matchLabels:
            kubernetes.io/metadata.name: openshift-cluster-observability-operator
    podSelector: {}
    policyTypes:
    - Ingress
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    creationTimestamp: "2026-10-30T13:08:05Z"
    generation: 1
    labels:
      app.kubernetes.io/component: usage-tenancy-proxy
      app.kubernetes.io/managed-by: maas-controller
      app.kubernetes.io/part-of: models-as-a-service
      app.opendatahub.io/modelsasservice: "true"
    managedFields:
    - apiVersion: networking.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:labels:
            f:app.kubernetes.io/component: {}
            f:app.kubernetes.io/managed-by: {}
            f:app.kubernetes.io/part-of: {}
            f:app.opendatahub.io/modelsasservice: {}
          f:ownerReferences:
            k:{"uid":"41b8f6ec-3375-47e1-b18f-e14c9b3f8e40"}: {}
        f:spec:
          f:ingress: {}
          f:podSelector: {}
          f:policyTypes: {}
      manager: maas-controller
      operation: Apply
      time: "2026-10-30T13:08:05Z"
    name: usage-tenancy-proxy-allow-perses
    namespace: opendatahub
    ownerReferences:
    - apiVersion: maas.opendatahub.io/v1alpha1
      blockOwnerDeletion: true
      controller: true
      kind: Config
      name: default
      uid: 41b8f6ec-3375-47e1-b18f-e14c9b3f8e40
    resourceVersion: "16742"
    uid: 3a6f0033-1c8b-446c-9763-ae7cd7756f86
  spec:
    ingress:
    - from:
      - podSelector:
          matchLabels:
            app.kubernetes.io/managed-by: perses-operator
      ports:
      - port: 8443
        protocol: TCP
    - from:
      - namespaceSelector:
          matchLabels:
            network.openshift.io/policy-group: host-network
      ports:
      - port: 8443
        protocol: TCP
    podSelector:
      matchLabels:
        app: usage-tenancy-proxy
    policyTypes:
    - Ingress
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    creationTimestamp: "2026-10-30T13:08:05Z"
    generation: 1
    labels:
      app.kubernetes.io/component: usage-tenancy-proxy
      app.kubernetes.io/managed-by: maas-controller
      app.kubernetes.io/part-of: models-as-a-service
      app.opendatahub.io/modelsasservice: "true"
    managedFields:
    - apiVersion: networking.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:labels:
            f:app.kubernetes.io/component: {}
            f:app.kubernetes.io/managed-by: {}
            f:app.kubernetes.io/part-of: {}
            f:app.opendatahub.io/modelsasservice: {}
          f:ownerReferences:
            k:{"uid":"41b8f6ec-3375-47e1-b18f-e14c9b3f8e40"}: {}
        f:spec:
          f:egress: {}
          f:podSelector: {}
          f:policyTypes: {}
      manager: maas-controller
      operation: Apply
      time: "2026-10-30T13:08:05Z"
    name: usage-tenancy-proxy-egress-restrict
    namespace: opendatahub
    ownerReferences:
    - apiVersion: maas.opendatahub.io/v1alpha1
      blockOwnerDeletion: true
      controller: true
      kind: Config
      name: default
      uid: 41b8f6ec-3375-47e1-b18f-e14c9b3f8e40
    resourceVersion: "16744"
    uid: 2d58b2bf-28fd-4516-82fb-608c814266ea
  spec:
    egress:
    - ports:
      - port: 53
        protocol: UDP
      - port: 53
        protocol: TCP
      - port: 5353
        protocol: UDP
      - port: 5353
        protocol: TCP
      to:
      - namespaceSelector:
          matchLabels:
            kubernetes.io/metadata.name: openshift-dns
        podSelector:
          matchLabels:
            dns.operator.openshift.io/daemonset-dns: default
    - ports:
      - port: 443
        protocol: TCP
      - port: 6443
        protocol: TCP
    - ports:
      - port: 8080
        protocol: TCP
      to:
      - podSelector:
          matchLabels:
            app.kubernetes.io/component: lokistack-gateway
            app.kubernetes.io/instance: data-science-lokistack
            app.kubernetes.io/name: lokistack
    podSelector:
      matchLabels:
        app: usage-tenancy-proxy
    policyTypes:
    - Egress
kind: NetworkPolicyList
metadata:
  resourceVersion: "176159"