---
apiVersion: networking.k8s.io/v1
items:
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    creationTimestamp: "2026-10-30T12:40:54Z"
    generation: 1
    labels:
      ingress.openshift.io/owning-gateway: data-science-gateway
    managedFields:
    - apiVersion: networking.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:labels:
            .: {}
            f:ingress.openshift.io/owning-gateway: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"4d9201f4-7f3b-4300-9d27-e5f308ae7af2"}: {}
        f:spec:
          f:egress: {}
          f:ingress: {}
          f:podSelector: {}
          f:policyTypes: {}
      manager: ingress-operator
      operation: Update
      time: "2026-10-30T12:40:54Z"
    name: data-science-gateway-allow
    namespace: openshift-ingress
    ownerReferences:
    - apiVersion: gateway.networking.k8s.io/v1
      kind: Gateway
      name: data-science-gateway
      uid: 4d9201f4-7f3b-4300-9d27-e5f308ae7af2
    resourceVersion: "13507"
    uid: c2fe46ec-ed44-4b11-8684-5d13573c1d1a
  spec:
    egress:
    - {}
    ingress:
    - {}
    podSelector:
      matchLabels:
        gateway.networking.k8s.io/gateway-name: data-science-gateway
    policyTypes:
    - Ingress
    - Egress
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    creationTimestamp: "2026-10-30T12:39:22Z"
    generation: 1
    managedFields:
    - apiVersion: networking.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:spec:
          f:egress: {}
          f:ingress: {}
          f:podSelector: {}
          f:policyTypes: {}
      manager: ingress-operator
      operation: Update
      time: "2026-10-30T12:39:22Z"
    name: istiod-allow
    namespace: openshift-ingress
    resourceVersion: "9698"
    uid: 27a5212b-c6d5-420c-8a8b-a9fc7c93bd64
  spec:
    egress:
    - {}
    ingress:
    - ports:
      - port: 8080
        protocol: TCP
      - port: 15010
        protocol: TCP
      - port: 15011
        protocol: TCP
      - port: 15012
        protocol: TCP
      - port: 15014
        protocol: TCP
    - ports:
      - port: 15017
        protocol: TCP
    podSelector:
      matchLabels:
        app: istiod
    policyTypes:
    - Ingress
    - Egress
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    annotations:
      platform.opendatahub.io/instance.generation: "2"
      platform.opendatahub.io/instance.name: default-gateway
      platform.opendatahub.io/instance.uid: 4683ba9b-fddb-4f8f-981b-3e29b5ae1de0
      platform.opendatahub.io/type: Open Data Hub
      platform.opendatahub.io/version: 3.6.0-ea.2
    creationTimestamp: "2026-10-30T12:40:54Z"
    generation: 1
    labels:
      app: kube-auth-proxy
      app.kubernetes.io/component: authentication
      platform.opendatahub.io/part-of: gatewayconfig
    managedFields:
    - apiVersion: networking.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            f:platform.opendatahub.io/instance.generation: {}
            f:platform.opendatahub.io/instance.name: {}
            f:platform.opendatahub.io/instance.uid: {}
            f:platform.opendatahub.io/type: {}
            f:platform.opendatahub.io/version: {}
          f:labels:
            f:app: {}
            f:app.kubernetes.io/component: {}
            f:platform.opendatahub.io/part-of: {}
        f:spec:
          f:egress: {}
          f:ingress: {}
          f:podSelector: {}
          f:policyTypes: {}
      manager: gatewayconfig
      operation: Apply
      time: "2026-10-30T12:40:57Z"
    name: kube-auth-proxy
    namespace: openshift-ingress
    resourceVersion: "13797"
    uid: 001d2018-a9e1-4284-b7aa-e89acfb9dde8
  spec:
    egress:
    - {}
    ingress:
    - from:
      - namespaceSelector:
          matchLabels:
            kubernetes.io/metadata.name: openshift-ingress
        podSelector:
          matchLabels:
            gateway.networking.k8s.io/gateway-name: data-science-gateway
      ports:
      - port: 8443
        protocol: TCP
    - from:
      - namespaceSelector:
          matchLabels:
            kubernetes.io/metadata.name: openshift-monitoring
      ports:
      - port: 9000
        protocol: TCP
    - from:
      - namespaceSelector:
          matchLabels:
            kubernetes.io/metadata.name: openshift-user-workload-monitoring
      ports:
      - port: 9000
        protocol: TCP
    podSelector:
      matchLabels:
        app: kube-auth-proxy
    policyTypes:
    - Ingress
    - Egress
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    creationTimestamp: "2026-10-30T12:39:22Z"
    generation: 1
    labels:
      ingress.openshift.io/owning-gateway: maas-default-gateway
    managedFields:
    - apiVersion: networking.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:labels:
            .: {}
            f:ingress.openshift.io/owning-gateway: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"13037da2-7ce3-408f-991b-ad31db53d1ff"}: {}
        f:spec:
          f:egress: {}
          f:ingress: {}
          f:podSelector: {}
          f:policyTypes: {}
      manager: ingress-operator
      operation: Update
      time: "2026-10-30T12:39:22Z"
    name: maas-default-gateway-allow
    namespace: openshift-ingress
    ownerReferences:
    - apiVersion: gateway.networking.k8s.io/v1
      kind: Gateway
      name: maas-default-gateway
      uid: 13037da2-7ce3-408f-991b-ad31db53d1ff
    resourceVersion: "9678"
    uid: d70e6ad8-62f8-42c6-bd1e-00fb73d11ac8
  spec:
    egress:
    - {}
    ingress:
    - {}
    podSelector:
      matchLabels:
        gateway.networking.k8s.io/gateway-name: maas-default-gateway
    policyTypes:
    - Ingress
    - Egress
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    creationTimestamp: "2026-10-30T12:39:22Z"
    generation: 1
    labels:
      ingress.openshift.io/owning-gateway: openshift-ai-inference
    managedFields:
    - apiVersion: networking.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:labels:
            .: {}
            f:ingress.openshift.io/owning-gateway: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"82cd596c-4ef5-4e5f-a8b7-9cf6f60bc0ec"}: {}
        f:spec:
          f:egress: {}
          f:ingress: {}
          f:podSelector: {}
          f:policyTypes: {}
      manager: ingress-operator
      operation: Update
      time: "2026-10-30T12:39:22Z"
    name: openshift-ai-inference-allow
    namespace: openshift-ingress
    ownerReferences:
    - apiVersion: gateway.networking.k8s.io/v1
      kind: Gateway
      name: openshift-ai-inference
      uid: 82cd596c-4ef5-4e5f-a8b7-9cf6f60bc0ec
    resourceVersion: "9665"
    uid: 3e253fa1-f173-4836-a35b-74dd4e621f11
  spec:
    egress:
    - {}
    ingress:
    - {}
    podSelector:
      matchLabels:
        gateway.networking.k8s.io/gateway-name: openshift-ai-inference
    policyTypes:
    - Ingress
    - Egress
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    creationTimestamp: "2026-10-30T12:28:59Z"
    generation: 1
    managedFields:
    - apiVersion: networking.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:spec:
          f:policyTypes: {}
      manager: ingress-operator
      operation: Update
      time: "2026-10-30T12:28:59Z"
    name: openshift-ingress-deny-all
    namespace: openshift-ingress
    resourceVersion: "2155"
    uid: 7fa797bd-4715-4370-8573-e15af6582edb
  spec:
    podSelector: {}
    policyTypes:
    - Ingress
    - Egress
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    annotations:
      opendatahub.io/managed: "false"
    creationTimestamp: "2026-10-30T12:43:55Z"
    generation: 1
    labels:
      app.kubernetes.io/component: networking
      app.kubernetes.io/managed-by: ai-gateway-controller
      app.kubernetes.io/part-of: maas
      app.opendatahub.io/modelsasservice: "true"
    managedFields:
    - apiVersion: networking.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:labels:
            f:app.kubernetes.io/component: {}
            f:app.kubernetes.io/managed-by: {}
            f:app.kubernetes.io/part-of: {}
            f:app.opendatahub.io/modelsasservice: {}
        f:spec:
          f:egress: {}
          f:ingress: {}
          f:podSelector: {}
          f:policyTypes: {}
      manager: ai-gateway-controller
      operation: Apply
      time: "2026-10-30T12:43:55Z"
    - apiVersion: networking.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:opendatahub.io/managed: {}
      manager: kubectl-annotate
      operation: Update
      time: "2026-10-30T12:44:22Z"
    name: payload-processing
    namespace: openshift-ingress
    resourceVersion: "17436"
    uid: 196ed8ea-dcc8-42b5-af16-30c27cc1f67d
  spec:
    egress:
    - ports:
      - port: 53
        protocol: UDP
      - port: 53
        protocol: TCP
      - port: 5353
        protocol: UDP
      - port: 5353
        protocol: TCP
    - ports:
      - port: 443
        protocol: TCP
      - port: 6443
        protocol: TCP
    ingress:
    - from:
      - namespaceSelector:
          matchLabels:
            kubernetes.io/metadata.name: openshift-ingress
        podSelector:
          matchLabels:
            gateway.istio.io/managed: istio.io-gateway-controller
      ports:
      - port: 9004
        protocol: TCP
    - from:
      - namespaceSelector:
          matchLabels:
            kubernetes.io/metadata.name: openshift-monitoring
      - namespaceSelector:
          matchLabels:
            kubernetes.io/metadata.name: openshift-user-workload-monitoring
      ports:
      - port: 9090
        protocol: TCP
    podSelector:
      matchExpressions:
      - key: maas.opendatahub.io/tenant-instance
        operator: In
        values:
        - payload-processing
        - payload-pre-processing
    policyTypes:
    - Ingress
    - Egress
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    creationTimestamp: "2026-10-30T12:28:59Z"
    generation: 1
    labels:
      ingresscontroller.operator.openshift.io/owning-ingresscontroller: default
    managedFields:
    - apiVersion: networking.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:labels:
            .: {}
            f:ingresscontroller.operator.openshift.io/owning-ingresscontroller: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"d03a1a0d-a277-4410-b818-1760478f9be3"}: {}
        f:spec:
          f:egress: {}
          f:ingress: {}
          f:podSelector: {}
          f:policyTypes: {}
      manager: ingress-operator
      operation: Update
      time: "2026-10-30T12:28:59Z"
    name: router-default
    namespace: openshift-ingress
    ownerReferences:
    - apiVersion: apps/v1
      controller: true
      kind: Deployment
      name: router-default
      uid: d03a1a0d-a277-4410-b818-1760478f9be3
    resourceVersion: "2151"
    uid: 721013f2-0908-476c-ae27-520f94aaad0a
  spec:
    egress:
    - {}
    ingress:
    - ports:
      - port: http
        protocol: TCP
      - port: https
        protocol: TCP
      - port: metrics
        protocol: TCP
    podSelector:
      matchLabels:
        ingresscontroller.operator.openshift.io/deployment-ingresscontroller: default
    policyTypes:
    - Ingress
    - Egress
kind: NetworkPolicyList
metadata:
  resourceVersion: "86676"