--- apiVersion: networking.k8s.io/v1 items: - apiVersion: networking.k8s.io/v1 kind: NetworkPolicy metadata: annotations: internal.config.kubernetes.io/previousKinds: NetworkPolicy internal.config.kubernetes.io/previousNames: kserve-controller-manager internal.config.kubernetes.io/previousNamespaces: opendatahub platform.opendatahub.io/instance.generation: "1" platform.opendatahub.io/instance.name: default-kserve platform.opendatahub.io/instance.uid: 263974cc-ca71-4d08-b80e-ef36825584f4 platform.opendatahub.io/type: Open Data Hub platform.opendatahub.io/version: 3.4.0-ea.1 creationTimestamp: "2026-05-21T19:30:06Z" generation: 1 labels: app.kubernetes.io/part-of: kserve app.opendatahub.io/kserve: "true" platform.opendatahub.io/part-of: kserve managedFields: - apiVersion: networking.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: f:internal.config.kubernetes.io/previousKinds: {} f:internal.config.kubernetes.io/previousNames: {} f:internal.config.kubernetes.io/previousNamespaces: {} f:platform.opendatahub.io/instance.generation: {} f:platform.opendatahub.io/instance.name: {} f:platform.opendatahub.io/instance.uid: {} f:platform.opendatahub.io/type: {} f:platform.opendatahub.io/version: {} f:labels: f:app.kubernetes.io/part-of: {} f:app.opendatahub.io/kserve: {} f:platform.opendatahub.io/part-of: {} f:ownerReferences: k:{"uid":"263974cc-ca71-4d08-b80e-ef36825584f4"}: {} f:spec: f:ingress: {} f:podSelector: {} manager: kserve operation: Apply time: "2026-05-21T19:30:06Z" name: kserve-controller-manager namespace: opendatahub ownerReferences: - apiVersion: components.platform.opendatahub.io/v1alpha1 blockOwnerDeletion: true controller: true kind: Kserve name: default-kserve uid: 263974cc-ca71-4d08-b80e-ef36825584f4 resourceVersion: "16024" uid: 2adf3c1e-a6c2-4989-b484-15371b7a157a spec: ingress: - {} podSelector: matchLabels: control-plane: kserve-controller-manager policyTypes: - Ingress - apiVersion: networking.k8s.io/v1 kind: NetworkPolicy metadata: creationTimestamp: "2026-05-21T19:33:09Z" generation: 1 labels: app.kubernetes.io/component: api app.kubernetes.io/name: maas-api app.kubernetes.io/part-of: models-as-a-service app.opendatahub.io/modelsasservice: "true" maas.opendatahub.io/tenant-name: default-tenant maas.opendatahub.io/tenant-namespace: models-as-a-service managedFields: - apiVersion: networking.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:labels: f:app.kubernetes.io/component: {} f:app.kubernetes.io/name: {} f:app.kubernetes.io/part-of: {} f:app.opendatahub.io/modelsasservice: {} f:maas.opendatahub.io/tenant-name: {} f:maas.opendatahub.io/tenant-namespace: {} f:ownerReferences: k:{"uid":"e400b4bf-692f-4db1-a9e3-ab481e01ad17"}: {} f:spec: f:ingress: {} f:podSelector: {} f:policyTypes: {} manager: maas-controller operation: Apply time: "2026-05-21T19:33:09Z" name: maas-api-allow-monitoring namespace: opendatahub ownerReferences: - apiVersion: maas.opendatahub.io/v1alpha1 blockOwnerDeletion: true controller: true kind: Config name: default uid: e400b4bf-692f-4db1-a9e3-ab481e01ad17 resourceVersion: "22228" uid: 72310790-f9d3-45d6-862b-10ef141c51c3 spec: ingress: - from: - namespaceSelector: matchLabels: kubernetes.io/metadata.name: redhat-ods-monitoring ports: - port: 9090 protocol: TCP podSelector: matchLabels: app.kubernetes.io/component: api app.kubernetes.io/name: maas-api app.kubernetes.io/part-of: models-as-a-service policyTypes: - Ingress - apiVersion: networking.k8s.io/v1 kind: NetworkPolicy metadata: creationTimestamp: "2026-05-21T19:33:09Z" generation: 1 labels: app.kubernetes.io/component: api app.kubernetes.io/name: maas-api app.kubernetes.io/part-of: models-as-a-service app.opendatahub.io/modelsasservice: "true" maas.opendatahub.io/tenant-name: default-tenant maas.opendatahub.io/tenant-namespace: models-as-a-service managedFields: - apiVersion: networking.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:labels: f:app.kubernetes.io/component: {} f:app.kubernetes.io/name: {} f:app.kubernetes.io/part-of: {} f:app.opendatahub.io/modelsasservice: {} f:maas.opendatahub.io/tenant-name: {} f:maas.opendatahub.io/tenant-namespace: {} f:ownerReferences: k:{"uid":"e400b4bf-692f-4db1-a9e3-ab481e01ad17"}: {} f:spec: f:ingress: {} f:podSelector: {} f:policyTypes: {} manager: maas-controller operation: Apply time: "2026-05-21T19:33:09Z" name: maas-authorino-allow namespace: opendatahub ownerReferences: - apiVersion: maas.opendatahub.io/v1alpha1 blockOwnerDeletion: true controller: true kind: Config name: default uid: e400b4bf-692f-4db1-a9e3-ab481e01ad17 resourceVersion: "22223" uid: 22e5e538-f60a-4aef-92b5-74b441966ff3 spec: ingress: - from: - namespaceSelector: matchExpressions: - key: kubernetes.io/metadata.name operator: In values: - kuadrant-system - openshift-operators podSelector: matchLabels: authorino-resource: authorino podSelector: matchLabels: app.kubernetes.io/component: api app.kubernetes.io/name: maas-api app.kubernetes.io/part-of: models-as-a-service policyTypes: - Ingress - apiVersion: networking.k8s.io/v1 kind: NetworkPolicy metadata: creationTimestamp: "2026-05-21T19:29:18Z" generation: 1 managedFields: - apiVersion: networking.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:ownerReferences: k:{"uid":"3c4fb665-0827-4da1-93b7-ebe5c7b17176"}: {} f:spec: f:ingress: {} f:podSelector: {} f:policyTypes: {} manager: dscinitialization.opendatahub.io operation: Apply time: "2026-05-21T19:29:18Z" name: opendatahub namespace: opendatahub ownerReferences: - apiVersion: dscinitialization.opendatahub.io/v2 blockOwnerDeletion: true controller: true kind: DSCInitialization name: default-dsci uid: 3c4fb665-0827-4da1-93b7-ebe5c7b17176 resourceVersion: "13630" uid: 6de6b77f-9ab0-46f9-9fdf-bd1dea284579 spec: ingress: - from: - namespaceSelector: matchLabels: opendatahub.io/generated-namespace: "true" - from: - namespaceSelector: matchLabels: opendatahub.io/application-namespace: "true" - from: - namespaceSelector: matchLabels: network.openshift.io/policy-group: ingress - from: - namespaceSelector: matchLabels: kubernetes.io/metadata.name: openshift-host-network - from: - namespaceSelector: matchLabels: kubernetes.io/metadata.name: openshift-monitoring - from: - namespaceSelector: matchLabels: kubernetes.io/metadata.name: openshift-cluster-observability-operator podSelector: {} policyTypes: - Ingress kind: NetworkPolicyList metadata: resourceVersion: "46525"