---
apiVersion: networking.k8s.io/v1
items:
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    creationTimestamp: "2026-10-30T07:01:13Z"
    generation: 1
    labels:
      ingress.openshift.io/owning-gateway: data-science-gateway
    managedFields:
    - apiVersion: networking.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:labels:
            .: {}
            f:ingress.openshift.io/owning-gateway: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"46af4254-1e92-4cd4-8f03-271666a46453"}: {}
        f:spec:
          f:egress: {}
          f:ingress: {}
          f:podSelector: {}
          f:policyTypes: {}
      manager: ingress-operator
      operation: Update
      time: "2026-10-30T07:01:13Z"
    name: data-science-gateway-allow
    namespace: openshift-ingress
    ownerReferences:
    - apiVersion: gateway.networking.k8s.io/v1
      kind: Gateway
      name: data-science-gateway
      uid: 46af4254-1e92-4cd4-8f03-271666a46453
    resourceVersion: "14622"
    uid: f889732a-9570-4506-ba47-d94dc264154c
  spec:
    egress:
    - {}
    ingress:
    - {}
    podSelector:
      matchLabels:
        gateway.networking.k8s.io/gateway-name: data-science-gateway
    policyTypes:
    - Ingress
    - Egress
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    creationTimestamp: "2026-10-30T06:59:59Z"
    generation: 1
    managedFields:
    - apiVersion: networking.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:spec:
          f:egress: {}
          f:ingress: {}
          f:podSelector: {}
          f:policyTypes: {}
      manager: ingress-operator
      operation: Update
      time: "2026-10-30T06:59:59Z"
    name: istiod-allow
    namespace: openshift-ingress
    resourceVersion: "9914"
    uid: 4dc0fc37-49ea-4376-bea1-d47d0bd67a02
  spec:
    egress:
    - {}
    ingress:
    - ports:
      - port: 8080
        protocol: TCP
      - port: 15010
        protocol: TCP
      - port: 15011
        protocol: TCP
      - port: 15012
        protocol: TCP
      - port: 15014
        protocol: TCP
    - ports:
      - port: 15017
        protocol: TCP
    podSelector:
      matchLabels:
        app: istiod
    policyTypes:
    - Ingress
    - Egress
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    annotations:
      platform.opendatahub.io/instance.generation: "2"
      platform.opendatahub.io/instance.name: default-gateway
      platform.opendatahub.io/instance.uid: 3a064e34-0971-4b04-8e2c-8a6d58e775e2
      platform.opendatahub.io/type: Open Data Hub
      platform.opendatahub.io/version: 3.6.0-ea.2
    creationTimestamp: "2026-10-30T07:01:14Z"
    generation: 1
    labels:
      app: kube-auth-proxy
      app.kubernetes.io/component: authentication
      platform.opendatahub.io/part-of: gatewayconfig
    managedFields:
    - apiVersion: networking.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            f:platform.opendatahub.io/instance.generation: {}
            f:platform.opendatahub.io/instance.name: {}
            f:platform.opendatahub.io/instance.uid: {}
            f:platform.opendatahub.io/type: {}
            f:platform.opendatahub.io/version: {}
          f:labels:
            f:app: {}
            f:app.kubernetes.io/component: {}
            f:platform.opendatahub.io/part-of: {}
        f:spec:
          f:egress: {}
          f:ingress: {}
          f:podSelector: {}
          f:policyTypes: {}
      manager: gatewayconfig
      operation: Apply
      time: "2026-10-30T07:01:16Z"
    name: kube-auth-proxy
    namespace: openshift-ingress
    resourceVersion: "14913"
    uid: 8a8c21a0-58dd-476d-a14a-2809dacdbc7e
  spec:
    egress:
    - {}
    ingress:
    - from:
      - namespaceSelector:
          matchLabels:
            kubernetes.io/metadata.name: openshift-ingress
        podSelector:
          matchLabels:
            gateway.networking.k8s.io/gateway-name: data-science-gateway
      ports:
      - port: 8443
        protocol: TCP
    - from:
      - namespaceSelector:
          matchLabels:
            kubernetes.io/metadata.name: openshift-monitoring
      ports:
      - port: 9000
        protocol: TCP
    - from:
      - namespaceSelector:
          matchLabels:
            kubernetes.io/metadata.name: openshift-user-workload-monitoring
      ports:
      - port: 9000
        protocol: TCP
    podSelector:
      matchLabels:
        app: kube-auth-proxy
    policyTypes:
    - Ingress
    - Egress
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    creationTimestamp: "2026-10-30T06:59:59Z"
    generation: 1
    labels:
      ingress.openshift.io/owning-gateway: maas-default-gateway
    managedFields:
    - apiVersion: networking.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:labels:
            .: {}
            f:ingress.openshift.io/owning-gateway: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"745b32af-dfa9-4526-8677-b84f5e1986e5"}: {}
        f:spec:
          f:egress: {}
          f:ingress: {}
          f:podSelector: {}
          f:policyTypes: {}
      manager: ingress-operator
      operation: Update
      time: "2026-10-30T06:59:59Z"
    name: maas-default-gateway-allow
    namespace: openshift-ingress
    ownerReferences:
    - apiVersion: gateway.networking.k8s.io/v1
      kind: Gateway
      name: maas-default-gateway
      uid: 745b32af-dfa9-4526-8677-b84f5e1986e5
    resourceVersion: "9890"
    uid: 95b8d511-4b40-4118-ae57-a83e70dda9ea
  spec:
    egress:
    - {}
    ingress:
    - {}
    podSelector:
      matchLabels:
        gateway.networking.k8s.io/gateway-name: maas-default-gateway
    policyTypes:
    - Ingress
    - Egress
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    creationTimestamp: "2026-10-30T06:59:59Z"
    generation: 1
    labels:
      ingress.openshift.io/owning-gateway: openshift-ai-inference
    managedFields:
    - apiVersion: networking.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:labels:
            .: {}
            f:ingress.openshift.io/owning-gateway: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"fdcc42c6-296e-4362-92dd-f47485aa9aea"}: {}
        f:spec:
          f:egress: {}
          f:ingress: {}
          f:podSelector: {}
          f:policyTypes: {}
      manager: ingress-operator
      operation: Update
      time: "2026-10-30T06:59:59Z"
    name: openshift-ai-inference-allow
    namespace: openshift-ingress
    ownerReferences:
    - apiVersion: gateway.networking.k8s.io/v1
      kind: Gateway
      name: openshift-ai-inference
      uid: fdcc42c6-296e-4362-92dd-f47485aa9aea
    resourceVersion: "9876"
    uid: 1a41a20a-5c0e-4be9-ad65-ae9ff494d81d
  spec:
    egress:
    - {}
    ingress:
    - {}
    podSelector:
      matchLabels:
        gateway.networking.k8s.io/gateway-name: openshift-ai-inference
    policyTypes:
    - Ingress
    - Egress
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    creationTimestamp: "2026-10-30T06:49:52Z"
    generation: 1
    managedFields:
    - apiVersion: networking.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:spec:
          f:policyTypes: {}
      manager: ingress-operator
      operation: Update
      time: "2026-10-30T06:49:52Z"
    name: openshift-ingress-deny-all
    namespace: openshift-ingress
    resourceVersion: "2207"
    uid: c7fd0393-052b-4497-bc54-12ea6c99da48
  spec:
    podSelector: {}
    policyTypes:
    - Ingress
    - Egress
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    annotations:
      opendatahub.io/managed: "false"
    creationTimestamp: "2026-10-30T07:04:12Z"
    generation: 1
    labels:
      app.kubernetes.io/component: networking
      app.kubernetes.io/managed-by: ai-gateway-controller
      app.kubernetes.io/part-of: maas
      app.opendatahub.io/modelsasservice: "true"
    managedFields:
    - apiVersion: networking.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:labels:
            f:app.kubernetes.io/component: {}
            f:app.kubernetes.io/managed-by: {}
            f:app.kubernetes.io/part-of: {}
            f:app.opendatahub.io/modelsasservice: {}
        f:spec:
          f:egress: {}
          f:ingress: {}
          f:podSelector: {}
          f:policyTypes: {}
      manager: ai-gateway-controller
      operation: Apply
      time: "2026-10-30T07:04:12Z"
    - apiVersion: networking.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:opendatahub.io/managed: {}
      manager: kubectl-annotate
      operation: Update
      time: "2026-10-30T07:04:37Z"
    name: payload-processing
    namespace: openshift-ingress
    resourceVersion: "19547"
    uid: d6f363d1-ce29-4477-b118-a847fd492f21
  spec:
    egress:
    - ports:
      - port: 53
        protocol: UDP
      - port: 53
        protocol: TCP
      - port: 5353
        protocol: UDP
      - port: 5353
        protocol: TCP
    - ports:
      - port: 443
        protocol: TCP
      - port: 6443
        protocol: TCP
    ingress:
    - from:
      - namespaceSelector:
          matchLabels:
            kubernetes.io/metadata.name: openshift-ingress
        podSelector:
          matchLabels:
            gateway.istio.io/managed: istio.io-gateway-controller
      ports:
      - port: 9004
        protocol: TCP
    - from:
      - namespaceSelector:
          matchLabels:
            kubernetes.io/metadata.name: openshift-monitoring
      - namespaceSelector:
          matchLabels:
            kubernetes.io/metadata.name: openshift-user-workload-monitoring
      ports:
      - port: 9090
        protocol: TCP
    podSelector:
      matchExpressions:
      - key: maas.opendatahub.io/tenant-instance
        operator: In
        values:
        - payload-processing
        - payload-pre-processing
    policyTypes:
    - Ingress
    - Egress
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    creationTimestamp: "2026-10-30T06:49:52Z"
    generation: 1
    labels:
      ingresscontroller.operator.openshift.io/owning-ingresscontroller: default
    managedFields:
    - apiVersion: networking.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:labels:
            .: {}
            f:ingresscontroller.operator.openshift.io/owning-ingresscontroller: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"b5007c34-8dcf-47f8-a1fa-48daf8744890"}: {}
        f:spec:
          f:egress: {}
          f:ingress: {}
          f:podSelector: {}
          f:policyTypes: {}
      manager: ingress-operator
      operation: Update
      time: "2026-10-30T06:49:52Z"
    name: router-default
    namespace: openshift-ingress
    ownerReferences:
    - apiVersion: apps/v1
      controller: true
      kind: Deployment
      name: router-default
      uid: b5007c34-8dcf-47f8-a1fa-48daf8744890
    resourceVersion: "2206"
    uid: e7269525-4cd7-43b8-b15f-270ce732fd25
  spec:
    egress:
    - {}
    ingress:
    - ports:
      - port: http
        protocol: TCP
      - port: https
        protocol: TCP
      - port: metrics
        protocol: TCP
    podSelector:
      matchLabels:
        ingresscontroller.operator.openshift.io/deployment-ingresscontroller: default
    policyTypes:
    - Ingress
    - Egress
kind: NetworkPolicyList
metadata:
  resourceVersion: "174519"