--- apiVersion: networking.k8s.io/v1 items: - apiVersion: networking.k8s.io/v1 kind: NetworkPolicy metadata: annotations: platform.opendatahub.io/instance.generation: "2" platform.opendatahub.io/instance.name: default-gateway platform.opendatahub.io/instance.uid: 8904bac4-1f21-4ad4-9a85-3ec6400376a7 platform.opendatahub.io/type: Open Data Hub platform.opendatahub.io/version: 3.5.0-ea.2 creationTimestamp: "2026-07-20T19:31:18Z" generation: 1 labels: app: kube-auth-proxy app.kubernetes.io/component: authentication platform.opendatahub.io/part-of: gatewayconfig managedFields: - apiVersion: networking.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: f:platform.opendatahub.io/instance.generation: {} f:platform.opendatahub.io/instance.name: {} f:platform.opendatahub.io/instance.uid: {} f:platform.opendatahub.io/type: {} f:platform.opendatahub.io/version: {} f:labels: f:app: {} f:app.kubernetes.io/component: {} f:platform.opendatahub.io/part-of: {} f:spec: f:ingress: {} f:podSelector: {} f:policyTypes: {} manager: gatewayconfig operation: Apply time: "2026-07-20T19:31:18Z" name: kube-auth-proxy namespace: openshift-ingress resourceVersion: "15672" uid: 5a5b4093-90c8-4d45-887e-26efeb71d0f8 spec: ingress: - from: - namespaceSelector: matchLabels: kubernetes.io/metadata.name: openshift-ingress podSelector: matchLabels: gateway.networking.k8s.io/gateway-name: data-science-gateway ports: - port: 8443 protocol: TCP - from: - namespaceSelector: matchLabels: kubernetes.io/metadata.name: openshift-monitoring ports: - port: 9000 protocol: TCP - from: - namespaceSelector: matchLabels: kubernetes.io/metadata.name: openshift-user-workload-monitoring ports: - port: 9000 protocol: TCP podSelector: matchLabels: app: kube-auth-proxy policyTypes: - Ingress - apiVersion: networking.k8s.io/v1 kind: NetworkPolicy metadata: creationTimestamp: "2026-07-20T19:34:51Z" generation: 1 labels: app.kubernetes.io/component: api app.kubernetes.io/name: maas-api app.kubernetes.io/part-of: models-as-a-service app.opendatahub.io/modelsasservice: "true" maas.opendatahub.io/tenant-name: e2e-shared-b-6fb9c1 maas.opendatahub.io/tenant-namespace: ai-tenant-e2e-shared-b-6fb9c1 managedFields: - apiVersion: networking.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:labels: f:app.kubernetes.io/component: {} f:app.kubernetes.io/name: {} f:app.kubernetes.io/part-of: {} f:app.opendatahub.io/modelsasservice: {} f:maas.opendatahub.io/tenant-name: {} f:maas.opendatahub.io/tenant-namespace: {} f:ownerReferences: k:{"uid":"63ef5cde-d1ab-431a-8a2f-df42764dad8a"}: {} f:spec: f:egress: {} f:ingress: {} f:podSelector: {} f:policyTypes: {} manager: maas-controller operation: Apply time: "2026-07-20T20:11:44Z" name: payload-processing namespace: openshift-ingress ownerReferences: - apiVersion: maas.opendatahub.io/v1alpha1 blockOwnerDeletion: true controller: true kind: Config name: default uid: 63ef5cde-d1ab-431a-8a2f-df42764dad8a resourceVersion: "64855" uid: b70c9753-eeba-423b-a96e-973fa416b55c spec: egress: - ports: - port: 53 protocol: UDP - port: 53 protocol: TCP - port: 5353 protocol: UDP - port: 5353 protocol: TCP - ports: - port: 443 protocol: TCP - port: 6443 protocol: TCP ingress: - from: - namespaceSelector: matchLabels: kubernetes.io/metadata.name: openshift-ingress podSelector: matchLabels: gateway.istio.io/managed: istio.io-gateway-controller ports: - port: 9004 protocol: TCP - from: - namespaceSelector: matchLabels: kubernetes.io/metadata.name: openshift-monitoring - namespaceSelector: matchLabels: kubernetes.io/metadata.name: openshift-user-workload-monitoring ports: - port: 9005 protocol: TCP - port: 9090 protocol: TCP podSelector: matchExpressions: - key: app operator: In values: - payload-processing - payload-pre-processing policyTypes: - Ingress - Egress kind: NetworkPolicyList metadata: resourceVersion: "65697"