--- apiVersion: networking.k8s.io/v1 items: - apiVersion: networking.k8s.io/v1 kind: NetworkPolicy metadata: annotations: platform.opendatahub.io/instance.generation: "2" platform.opendatahub.io/instance.name: default-gateway platform.opendatahub.io/instance.uid: a34a6882-4e8d-4f23-8321-4177de0e3499 platform.opendatahub.io/type: Open Data Hub platform.opendatahub.io/version: 3.5.0-ea.2 creationTimestamp: "2026-07-22T20:10:23Z" generation: 1 labels: app: kube-auth-proxy app.kubernetes.io/component: authentication platform.opendatahub.io/part-of: gatewayconfig managedFields: - apiVersion: networking.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: f:platform.opendatahub.io/instance.generation: {} f:platform.opendatahub.io/instance.name: {} f:platform.opendatahub.io/instance.uid: {} f:platform.opendatahub.io/type: {} f:platform.opendatahub.io/version: {} f:labels: f:app: {} f:app.kubernetes.io/component: {} f:platform.opendatahub.io/part-of: {} f:spec: f:ingress: {} f:podSelector: {} f:policyTypes: {} manager: gatewayconfig operation: Apply time: "2026-07-22T20:10:33Z" name: kube-auth-proxy namespace: openshift-ingress resourceVersion: "15900" uid: a1d09041-be53-40eb-b36b-47f4ca22d532 spec: ingress: - from: - namespaceSelector: matchLabels: kubernetes.io/metadata.name: openshift-ingress podSelector: matchLabels: gateway.networking.k8s.io/gateway-name: data-science-gateway ports: - port: 8443 protocol: TCP - from: - namespaceSelector: matchLabels: kubernetes.io/metadata.name: openshift-monitoring ports: - port: 9000 protocol: TCP - from: - namespaceSelector: matchLabels: kubernetes.io/metadata.name: openshift-user-workload-monitoring ports: - port: 9000 protocol: TCP podSelector: matchLabels: app: kube-auth-proxy policyTypes: - Ingress - apiVersion: networking.k8s.io/v1 kind: NetworkPolicy metadata: creationTimestamp: "2026-07-22T20:14:23Z" generation: 1 labels: app.kubernetes.io/component: api app.kubernetes.io/name: maas-api app.kubernetes.io/part-of: models-as-a-service app.opendatahub.io/modelsasservice: "true" maas.opendatahub.io/tenant-name: e2e-shared-b-198019 maas.opendatahub.io/tenant-namespace: ai-tenant-e2e-shared-b-198019 managedFields: - apiVersion: networking.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:labels: f:app.kubernetes.io/component: {} f:app.kubernetes.io/name: {} f:app.kubernetes.io/part-of: {} f:app.opendatahub.io/modelsasservice: {} f:maas.opendatahub.io/tenant-name: {} f:maas.opendatahub.io/tenant-namespace: {} f:ownerReferences: k:{"uid":"472062fb-46e5-4543-ad1e-4afb6666cd18"}: {} f:spec: f:egress: {} f:ingress: {} f:podSelector: {} f:policyTypes: {} manager: maas-controller operation: Apply time: "2026-07-22T20:50:28Z" name: payload-processing namespace: openshift-ingress ownerReferences: - apiVersion: maas.opendatahub.io/v1alpha1 blockOwnerDeletion: true controller: true kind: Config name: default uid: 472062fb-46e5-4543-ad1e-4afb6666cd18 resourceVersion: "65027" uid: f58fa9fd-461a-4b3a-b945-69359f32590a spec: egress: - ports: - port: 53 protocol: UDP - port: 53 protocol: TCP - port: 5353 protocol: UDP - port: 5353 protocol: TCP - ports: - port: 443 protocol: TCP - port: 6443 protocol: TCP ingress: - from: - namespaceSelector: matchLabels: kubernetes.io/metadata.name: openshift-ingress podSelector: matchLabels: gateway.istio.io/managed: istio.io-gateway-controller ports: - port: 9004 protocol: TCP - from: - namespaceSelector: matchLabels: kubernetes.io/metadata.name: openshift-monitoring - namespaceSelector: matchLabels: kubernetes.io/metadata.name: openshift-user-workload-monitoring ports: - port: 9005 protocol: TCP - port: 9090 protocol: TCP podSelector: matchExpressions: - key: app operator: In values: - payload-processing - payload-pre-processing policyTypes: - Ingress - Egress kind: NetworkPolicyList metadata: resourceVersion: "65883"