--- apiVersion: networking.k8s.io/v1 items: - apiVersion: networking.k8s.io/v1 kind: NetworkPolicy metadata: annotations: internal.config.kubernetes.io/previousKinds: NetworkPolicy internal.config.kubernetes.io/previousNames: kserve-controller-manager internal.config.kubernetes.io/previousNamespaces: opendatahub platform.opendatahub.io/instance.generation: "1" platform.opendatahub.io/instance.name: default-kserve platform.opendatahub.io/instance.uid: c457676e-c3b3-4c50-98ba-f6c28358d660 platform.opendatahub.io/type: Open Data Hub platform.opendatahub.io/version: 3.4.0-ea.1 creationTimestamp: "2026-05-21T16:57:50Z" generation: 1 labels: app.kubernetes.io/part-of: kserve app.opendatahub.io/kserve: "true" platform.opendatahub.io/part-of: kserve managedFields: - apiVersion: networking.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: f:internal.config.kubernetes.io/previousKinds: {} f:internal.config.kubernetes.io/previousNames: {} f:internal.config.kubernetes.io/previousNamespaces: {} f:platform.opendatahub.io/instance.generation: {} f:platform.opendatahub.io/instance.name: {} f:platform.opendatahub.io/instance.uid: {} f:platform.opendatahub.io/type: {} f:platform.opendatahub.io/version: {} f:labels: f:app.kubernetes.io/part-of: {} f:app.opendatahub.io/kserve: {} f:platform.opendatahub.io/part-of: {} f:ownerReferences: k:{"uid":"c457676e-c3b3-4c50-98ba-f6c28358d660"}: {} f:spec: f:ingress: {} f:podSelector: {} manager: kserve operation: Apply time: "2026-05-21T16:57:50Z" name: kserve-controller-manager namespace: opendatahub ownerReferences: - apiVersion: components.platform.opendatahub.io/v1alpha1 blockOwnerDeletion: true controller: true kind: Kserve name: default-kserve uid: c457676e-c3b3-4c50-98ba-f6c28358d660 resourceVersion: "15445" uid: 5308b04f-a630-4dcd-88fd-061401e9e7b2 spec: ingress: - {} podSelector: matchLabels: control-plane: kserve-controller-manager policyTypes: - Ingress - apiVersion: networking.k8s.io/v1 kind: NetworkPolicy metadata: creationTimestamp: "2026-05-21T17:00:58Z" generation: 1 labels: app.kubernetes.io/component: api app.kubernetes.io/name: maas-api app.kubernetes.io/part-of: models-as-a-service app.opendatahub.io/modelsasservice: "true" maas.opendatahub.io/tenant-name: default-tenant maas.opendatahub.io/tenant-namespace: models-as-a-service managedFields: - apiVersion: networking.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:labels: f:app.kubernetes.io/component: {} f:app.kubernetes.io/name: {} f:app.kubernetes.io/part-of: {} f:app.opendatahub.io/modelsasservice: {} f:maas.opendatahub.io/tenant-name: {} f:maas.opendatahub.io/tenant-namespace: {} f:ownerReferences: k:{"uid":"ffac5c84-5560-47e6-9797-02fa3e01fca0"}: {} f:spec: f:ingress: {} f:podSelector: {} f:policyTypes: {} manager: maas-controller operation: Apply time: "2026-05-21T17:00:58Z" name: maas-api-allow-monitoring namespace: opendatahub ownerReferences: - apiVersion: maas.opendatahub.io/v1alpha1 blockOwnerDeletion: true controller: true kind: Config name: default uid: ffac5c84-5560-47e6-9797-02fa3e01fca0 resourceVersion: "21794" uid: 4237b132-a2a6-4109-9cb9-da684daae7e1 spec: ingress: - from: - namespaceSelector: matchLabels: kubernetes.io/metadata.name: redhat-ods-monitoring ports: - port: 9090 protocol: TCP podSelector: matchLabels: app.kubernetes.io/component: api app.kubernetes.io/name: maas-api app.kubernetes.io/part-of: models-as-a-service policyTypes: - Ingress - apiVersion: networking.k8s.io/v1 kind: NetworkPolicy metadata: creationTimestamp: "2026-05-21T17:00:58Z" generation: 1 labels: app.kubernetes.io/component: api app.kubernetes.io/name: maas-api app.kubernetes.io/part-of: models-as-a-service app.opendatahub.io/modelsasservice: "true" maas.opendatahub.io/tenant-name: default-tenant maas.opendatahub.io/tenant-namespace: models-as-a-service managedFields: - apiVersion: networking.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:labels: f:app.kubernetes.io/component: {} f:app.kubernetes.io/name: {} f:app.kubernetes.io/part-of: {} f:app.opendatahub.io/modelsasservice: {} f:maas.opendatahub.io/tenant-name: {} f:maas.opendatahub.io/tenant-namespace: {} f:ownerReferences: k:{"uid":"ffac5c84-5560-47e6-9797-02fa3e01fca0"}: {} f:spec: f:ingress: {} f:podSelector: {} f:policyTypes: {} manager: maas-controller operation: Apply time: "2026-05-21T17:00:58Z" name: maas-authorino-allow namespace: opendatahub ownerReferences: - apiVersion: maas.opendatahub.io/v1alpha1 blockOwnerDeletion: true controller: true kind: Config name: default uid: ffac5c84-5560-47e6-9797-02fa3e01fca0 resourceVersion: "21789" uid: 8667ba7d-b00d-4213-8d44-b0b87457a876 spec: ingress: - from: - namespaceSelector: matchExpressions: - key: kubernetes.io/metadata.name operator: In values: - kuadrant-system - openshift-operators podSelector: matchLabels: authorino-resource: authorino podSelector: matchLabels: app.kubernetes.io/component: api app.kubernetes.io/name: maas-api app.kubernetes.io/part-of: models-as-a-service policyTypes: - Ingress - apiVersion: networking.k8s.io/v1 kind: NetworkPolicy metadata: creationTimestamp: "2026-05-21T16:57:03Z" generation: 1 managedFields: - apiVersion: networking.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:ownerReferences: k:{"uid":"92d4f7d7-08c2-4410-9d0d-6ad50ca3e388"}: {} f:spec: f:ingress: {} f:podSelector: {} f:policyTypes: {} manager: dscinitialization.opendatahub.io operation: Apply time: "2026-05-21T16:57:03Z" name: opendatahub namespace: opendatahub ownerReferences: - apiVersion: dscinitialization.opendatahub.io/v2 blockOwnerDeletion: true controller: true kind: DSCInitialization name: default-dsci uid: 92d4f7d7-08c2-4410-9d0d-6ad50ca3e388 resourceVersion: "13344" uid: be66b8c5-d45c-4dd6-a9e4-b9b935b1d689 spec: ingress: - from: - namespaceSelector: matchLabels: opendatahub.io/generated-namespace: "true" - from: - namespaceSelector: matchLabels: opendatahub.io/application-namespace: "true" - from: - namespaceSelector: matchLabels: network.openshift.io/policy-group: ingress - from: - namespaceSelector: matchLabels: kubernetes.io/metadata.name: openshift-host-network - from: - namespaceSelector: matchLabels: kubernetes.io/metadata.name: openshift-monitoring - from: - namespaceSelector: matchLabels: kubernetes.io/metadata.name: openshift-cluster-observability-operator podSelector: {} policyTypes: - Ingress kind: NetworkPolicyList metadata: resourceVersion: "46089"