---
apiVersion: networking.k8s.io/v1
items:
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    annotations:
      capability.openshift.io/name: CloudCredential
      include.release.openshift.io/ibm-cloud-managed: "true"
      include.release.openshift.io/self-managed-high-availability: "true"
    creationTimestamp: "2026-11-03T16:10:28Z"
    generation: 1
    managedFields:
    - apiVersion: networking.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:capability.openshift.io/name: {}
            f:include.release.openshift.io/ibm-cloud-managed: {}
            f:include.release.openshift.io/self-managed-high-availability: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"8fa409d8-8ebc-4a51-8b1f-037ef9db3df4"}: {}
        f:spec:
          f:egress: {}
          f:podSelector: {}
          f:policyTypes: {}
      manager: cluster-version-operator
      operation: Update
      time: "2026-11-03T16:10:28Z"
    name: allow-egress
    namespace: openshift-cloud-credential-operator
    ownerReferences:
    - apiVersion: config.openshift.io/v1
      controller: true
      kind: ClusterVersion
      name: version
      uid: 8fa409d8-8ebc-4a51-8b1f-037ef9db3df4
    resourceVersion: "1262"
    uid: 36ee0614-32f2-44a7-a243-3ba4b199dfb8
  spec:
    egress:
    - ports:
      - endPort: 65535
        port: 1
        protocol: TCP
    - ports:
      - endPort: 65535
        port: 1
        protocol: UDP
    podSelector:
      matchExpressions:
      - key: app
        operator: In
        values:
        - cloud-credential-operator
        - pod-identity-webhook
    policyTypes:
    - Egress
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    annotations:
      capability.openshift.io/name: CloudCredential
      include.release.openshift.io/ibm-cloud-managed: "true"
      include.release.openshift.io/self-managed-high-availability: "true"
    creationTimestamp: "2026-11-03T16:10:29Z"
    generation: 1
    managedFields:
    - apiVersion: networking.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:capability.openshift.io/name: {}
            f:include.release.openshift.io/ibm-cloud-managed: {}
            f:include.release.openshift.io/self-managed-high-availability: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"8fa409d8-8ebc-4a51-8b1f-037ef9db3df4"}: {}
        f:spec:
          f:ingress: {}
          f:podSelector: {}
          f:policyTypes: {}
      manager: cluster-version-operator
      operation: Update
      time: "2026-11-03T16:10:29Z"
    name: allow-ingress-metrics
    namespace: openshift-cloud-credential-operator
    ownerReferences:
    - apiVersion: config.openshift.io/v1
      controller: true
      kind: ClusterVersion
      name: version
      uid: 8fa409d8-8ebc-4a51-8b1f-037ef9db3df4
    resourceVersion: "1310"
    uid: a434615c-45eb-403a-a128-37f430a1bdfa
  spec:
    ingress:
    - ports:
      - port: 8443
        protocol: TCP
    podSelector:
      matchExpressions:
      - key: app
        operator: In
        values:
        - cloud-credential-operator
    policyTypes:
    - Ingress
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    annotations:
      capability.openshift.io/name: CloudCredential
      include.release.openshift.io/ibm-cloud-managed: "true"
      include.release.openshift.io/self-managed-high-availability: "true"
    creationTimestamp: "2026-11-03T16:10:30Z"
    generation: 1
    managedFields:
    - apiVersion: networking.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:capability.openshift.io/name: {}
            f:include.release.openshift.io/ibm-cloud-managed: {}
            f:include.release.openshift.io/self-managed-high-availability: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"8fa409d8-8ebc-4a51-8b1f-037ef9db3df4"}: {}
        f:spec:
          f:ingress: {}
          f:podSelector: {}
          f:policyTypes: {}
      manager: cluster-version-operator
      operation: Update
      time: "2026-11-03T16:10:30Z"
    name: allow-ingress-pprof
    namespace: openshift-cloud-credential-operator
    ownerReferences:
    - apiVersion: config.openshift.io/v1
      controller: true
      kind: ClusterVersion
      name: version
      uid: 8fa409d8-8ebc-4a51-8b1f-037ef9db3df4
    resourceVersion: "1341"
    uid: 9c966e97-6927-4f1e-91be-6fd2ffe4da15
  spec:
    ingress:
    - ports:
      - port: 6060
        protocol: TCP
    podSelector:
      matchExpressions:
      - key: app
        operator: In
        values:
        - cloud-credential-operator
    policyTypes:
    - Ingress
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    annotations:
      capability.openshift.io/name: CloudCredential
      include.release.openshift.io/ibm-cloud-managed: "true"
      include.release.openshift.io/self-managed-high-availability: "true"
    creationTimestamp: "2026-11-03T16:10:31Z"
    generation: 1
    managedFields:
    - apiVersion: networking.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:capability.openshift.io/name: {}
            f:include.release.openshift.io/ibm-cloud-managed: {}
            f:include.release.openshift.io/self-managed-high-availability: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"8fa409d8-8ebc-4a51-8b1f-037ef9db3df4"}: {}
        f:spec:
          f:ingress: {}
          f:podSelector: {}
          f:policyTypes: {}
      manager: cluster-version-operator
      operation: Update
      time: "2026-11-03T16:10:31Z"
    name: allow-ingress-webhook
    namespace: openshift-cloud-credential-operator
    ownerReferences:
    - apiVersion: config.openshift.io/v1
      controller: true
      kind: ClusterVersion
      name: version
      uid: 8fa409d8-8ebc-4a51-8b1f-037ef9db3df4
    resourceVersion: "1373"
    uid: 836fb8ec-5c7f-48dc-97a7-2f3843ba7f76
  spec:
    ingress:
    - ports:
      - port: 9443
        protocol: TCP
    podSelector:
      matchExpressions:
      - key: app
        operator: In
        values:
        - pod-identity-webhook
    policyTypes:
    - Ingress
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    annotations:
      capability.openshift.io/name: CloudCredential
      include.release.openshift.io/ibm-cloud-managed: "true"
      include.release.openshift.io/self-managed-high-availability: "true"
    creationTimestamp: "2026-11-03T16:10:32Z"
    generation: 1
    managedFields:
    - apiVersion: networking.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:capability.openshift.io/name: {}
            f:include.release.openshift.io/ibm-cloud-managed: {}
            f:include.release.openshift.io/self-managed-high-availability: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"8fa409d8-8ebc-4a51-8b1f-037ef9db3df4"}: {}
        f:spec:
          f:policyTypes: {}
      manager: cluster-version-operator
      operation: Update
      time: "2026-11-03T16:10:32Z"
    name: default-deny
    namespace: openshift-cloud-credential-operator
    ownerReferences:
    - apiVersion: config.openshift.io/v1
      controller: true
      kind: ClusterVersion
      name: version
      uid: 8fa409d8-8ebc-4a51-8b1f-037ef9db3df4
    resourceVersion: "1405"
    uid: a7d93299-535d-4fdf-9570-8fcb2a0d4151
  spec:
    podSelector: {}
    policyTypes:
    - Ingress
    - Egress
kind: NetworkPolicyList
metadata:
  resourceVersion: "216276"