--- apiVersion: networking.k8s.io/v1 items: - apiVersion: networking.k8s.io/v1 kind: NetworkPolicy metadata: annotations: internal.config.kubernetes.io/previousKinds: NetworkPolicy internal.config.kubernetes.io/previousNames: kserve-controller-manager internal.config.kubernetes.io/previousNamespaces: opendatahub platform.opendatahub.io/instance.generation: "1" platform.opendatahub.io/instance.name: default-kserve platform.opendatahub.io/instance.uid: a11aa25c-a153-4a40-9294-eb2a83177a49 platform.opendatahub.io/type: Open Data Hub platform.opendatahub.io/version: 3.4.0-ea.1 creationTimestamp: "2026-05-21T15:38:59Z" generation: 1 labels: app.kubernetes.io/part-of: kserve app.opendatahub.io/kserve: "true" platform.opendatahub.io/part-of: kserve managedFields: - apiVersion: networking.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: f:internal.config.kubernetes.io/previousKinds: {} f:internal.config.kubernetes.io/previousNames: {} f:internal.config.kubernetes.io/previousNamespaces: {} f:platform.opendatahub.io/instance.generation: {} f:platform.opendatahub.io/instance.name: {} f:platform.opendatahub.io/instance.uid: {} f:platform.opendatahub.io/type: {} f:platform.opendatahub.io/version: {} f:labels: f:app.kubernetes.io/part-of: {} f:app.opendatahub.io/kserve: {} f:platform.opendatahub.io/part-of: {} f:ownerReferences: k:{"uid":"a11aa25c-a153-4a40-9294-eb2a83177a49"}: {} f:spec: f:ingress: {} f:podSelector: {} manager: kserve operation: Apply time: "2026-05-21T15:38:59Z" name: kserve-controller-manager namespace: opendatahub ownerReferences: - apiVersion: components.platform.opendatahub.io/v1alpha1 blockOwnerDeletion: true controller: true kind: Kserve name: default-kserve uid: a11aa25c-a153-4a40-9294-eb2a83177a49 resourceVersion: "16387" uid: c9a4486b-05bb-409e-9b0f-e94710a60635 spec: ingress: - {} podSelector: matchLabels: control-plane: kserve-controller-manager policyTypes: - Ingress - apiVersion: networking.k8s.io/v1 kind: NetworkPolicy metadata: creationTimestamp: "2026-05-21T15:42:51Z" generation: 1 labels: app.kubernetes.io/component: api app.kubernetes.io/name: maas-api app.kubernetes.io/part-of: models-as-a-service app.opendatahub.io/modelsasservice: "true" maas.opendatahub.io/tenant-name: default-tenant maas.opendatahub.io/tenant-namespace: models-as-a-service managedFields: - apiVersion: networking.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:labels: f:app.kubernetes.io/component: {} f:app.kubernetes.io/name: {} f:app.kubernetes.io/part-of: {} f:app.opendatahub.io/modelsasservice: {} f:maas.opendatahub.io/tenant-name: {} f:maas.opendatahub.io/tenant-namespace: {} f:ownerReferences: k:{"uid":"98354510-3403-4736-9c30-3979d17965a6"}: {} f:spec: f:ingress: {} f:podSelector: {} f:policyTypes: {} manager: maas-controller operation: Apply time: "2026-05-21T15:42:51Z" name: maas-api-allow-monitoring namespace: opendatahub ownerReferences: - apiVersion: maas.opendatahub.io/v1alpha1 blockOwnerDeletion: true controller: true kind: Config name: default uid: 98354510-3403-4736-9c30-3979d17965a6 resourceVersion: "22613" uid: 02587c47-776b-4db8-a645-99973a1e114a spec: ingress: - from: - namespaceSelector: matchLabels: kubernetes.io/metadata.name: redhat-ods-monitoring ports: - port: 9090 protocol: TCP podSelector: matchLabels: app.kubernetes.io/component: api app.kubernetes.io/name: maas-api app.kubernetes.io/part-of: models-as-a-service policyTypes: - Ingress - apiVersion: networking.k8s.io/v1 kind: NetworkPolicy metadata: creationTimestamp: "2026-05-21T15:42:51Z" generation: 1 labels: app.kubernetes.io/component: api app.kubernetes.io/name: maas-api app.kubernetes.io/part-of: models-as-a-service app.opendatahub.io/modelsasservice: "true" maas.opendatahub.io/tenant-name: default-tenant maas.opendatahub.io/tenant-namespace: models-as-a-service managedFields: - apiVersion: networking.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:labels: f:app.kubernetes.io/component: {} f:app.kubernetes.io/name: {} f:app.kubernetes.io/part-of: {} f:app.opendatahub.io/modelsasservice: {} f:maas.opendatahub.io/tenant-name: {} f:maas.opendatahub.io/tenant-namespace: {} f:ownerReferences: k:{"uid":"98354510-3403-4736-9c30-3979d17965a6"}: {} f:spec: f:ingress: {} f:podSelector: {} f:policyTypes: {} manager: maas-controller operation: Apply time: "2026-05-21T15:42:51Z" name: maas-authorino-allow namespace: opendatahub ownerReferences: - apiVersion: maas.opendatahub.io/v1alpha1 blockOwnerDeletion: true controller: true kind: Config name: default uid: 98354510-3403-4736-9c30-3979d17965a6 resourceVersion: "22607" uid: d562e6ed-c1b6-4ac5-b15b-0d275be4374d spec: ingress: - from: - namespaceSelector: matchExpressions: - key: kubernetes.io/metadata.name operator: In values: - kuadrant-system - openshift-operators podSelector: matchLabels: authorino-resource: authorino podSelector: matchLabels: app.kubernetes.io/component: api app.kubernetes.io/name: maas-api app.kubernetes.io/part-of: models-as-a-service policyTypes: - Ingress - apiVersion: networking.k8s.io/v1 kind: NetworkPolicy metadata: creationTimestamp: "2026-05-21T15:38:11Z" generation: 1 managedFields: - apiVersion: networking.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:ownerReferences: k:{"uid":"6c437143-c8db-4d9e-8281-4af8714fdc54"}: {} f:spec: f:ingress: {} f:podSelector: {} f:policyTypes: {} manager: dscinitialization.opendatahub.io operation: Apply time: "2026-05-21T15:38:11Z" name: opendatahub namespace: opendatahub ownerReferences: - apiVersion: dscinitialization.opendatahub.io/v2 blockOwnerDeletion: true controller: true kind: DSCInitialization name: default-dsci uid: 6c437143-c8db-4d9e-8281-4af8714fdc54 resourceVersion: "13962" uid: ee06e89d-f4b0-47dc-8d16-f199327ab2e8 spec: ingress: - from: - namespaceSelector: matchLabels: opendatahub.io/generated-namespace: "true" - from: - namespaceSelector: matchLabels: opendatahub.io/application-namespace: "true" - from: - namespaceSelector: matchLabels: network.openshift.io/policy-group: ingress - from: - namespaceSelector: matchLabels: kubernetes.io/metadata.name: openshift-host-network - from: - namespaceSelector: matchLabels: kubernetes.io/metadata.name: openshift-monitoring - from: - namespaceSelector: matchLabels: kubernetes.io/metadata.name: openshift-cluster-observability-operator podSelector: {} policyTypes: - Ingress kind: NetworkPolicyList metadata: resourceVersion: "47012"