---
apiVersion: networking.k8s.io/v1
items:
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    creationTimestamp: "2026-11-02T17:36:53Z"
    generation: 1
    labels:
      ingress.openshift.io/owning-gateway: data-science-gateway
    managedFields:
    - apiVersion: networking.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:labels:
            .: {}
            f:ingress.openshift.io/owning-gateway: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"4ea7ff65-36b9-4590-b022-a16c5d85fb14"}: {}
        f:spec:
          f:egress: {}
          f:ingress: {}
          f:podSelector: {}
          f:policyTypes: {}
      manager: ingress-operator
      operation: Update
      time: "2026-11-02T17:36:53Z"
    name: data-science-gateway-allow
    namespace: openshift-ingress
    ownerReferences:
    - apiVersion: gateway.networking.k8s.io/v1
      kind: Gateway
      name: data-science-gateway
      uid: 4ea7ff65-36b9-4590-b022-a16c5d85fb14
    resourceVersion: "14494"
    uid: c6f42c21-514d-4dcf-9f32-049cc8240275
  spec:
    egress:
    - {}
    ingress:
    - {}
    podSelector:
      matchLabels:
        gateway.networking.k8s.io/gateway-name: data-science-gateway
    policyTypes:
    - Ingress
    - Egress
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    creationTimestamp: "2026-11-02T17:35:44Z"
    generation: 1
    managedFields:
    - apiVersion: networking.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:spec:
          f:egress: {}
          f:ingress: {}
          f:podSelector: {}
          f:policyTypes: {}
      manager: ingress-operator
      operation: Update
      time: "2026-11-02T17:35:44Z"
    name: istiod-allow
    namespace: openshift-ingress
    resourceVersion: "9665"
    uid: cf5236de-b552-4de5-afd4-f20f96970e3a
  spec:
    egress:
    - {}
    ingress:
    - ports:
      - port: 8080
        protocol: TCP
      - port: 15010
        protocol: TCP
      - port: 15011
        protocol: TCP
      - port: 15012
        protocol: TCP
      - port: 15014
        protocol: TCP
    - ports:
      - port: 15017
        protocol: TCP
    podSelector:
      matchLabels:
        app: istiod
    policyTypes:
    - Ingress
    - Egress
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    annotations:
      platform.opendatahub.io/instance.generation: "2"
      platform.opendatahub.io/instance.name: default-gateway
      platform.opendatahub.io/instance.uid: 86d62051-9a91-40d2-8604-0bfd31c3236b
      platform.opendatahub.io/type: Open Data Hub
      platform.opendatahub.io/version: 3.6.0-ea.2
    creationTimestamp: "2026-11-02T17:36:53Z"
    generation: 1
    labels:
      app: kube-auth-proxy
      app.kubernetes.io/component: authentication
      platform.opendatahub.io/part-of: gatewayconfig
    managedFields:
    - apiVersion: networking.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            f:platform.opendatahub.io/instance.generation: {}
            f:platform.opendatahub.io/instance.name: {}
            f:platform.opendatahub.io/instance.uid: {}
            f:platform.opendatahub.io/type: {}
            f:platform.opendatahub.io/version: {}
          f:labels:
            f:app: {}
            f:app.kubernetes.io/component: {}
            f:platform.opendatahub.io/part-of: {}
        f:spec:
          f:egress: {}
          f:ingress: {}
          f:podSelector: {}
          f:policyTypes: {}
      manager: gatewayconfig
      operation: Apply
      time: "2026-11-02T17:36:55Z"
    name: kube-auth-proxy
    namespace: openshift-ingress
    resourceVersion: "14764"
    uid: 13959d13-4685-4b91-af70-c0a0c8260c33
  spec:
    egress:
    - {}
    ingress:
    - from:
      - namespaceSelector:
          matchLabels:
            kubernetes.io/metadata.name: openshift-ingress
        podSelector:
          matchLabels:
            gateway.networking.k8s.io/gateway-name: data-science-gateway
      ports:
      - port: 8443
        protocol: TCP
    - from:
      - namespaceSelector:
          matchLabels:
            kubernetes.io/metadata.name: openshift-monitoring
      ports:
      - port: 9000
        protocol: TCP
    - from:
      - namespaceSelector:
          matchLabels:
            kubernetes.io/metadata.name: openshift-user-workload-monitoring
      ports:
      - port: 9000
        protocol: TCP
    podSelector:
      matchLabels:
        app: kube-auth-proxy
    policyTypes:
    - Ingress
    - Egress
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    creationTimestamp: "2026-11-02T17:35:43Z"
    generation: 1
    labels:
      ingress.openshift.io/owning-gateway: maas-default-gateway
    managedFields:
    - apiVersion: networking.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:labels:
            .: {}
            f:ingress.openshift.io/owning-gateway: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"5bfda421-ff22-4db1-9447-7ce6ca2c1036"}: {}
        f:spec:
          f:egress: {}
          f:ingress: {}
          f:podSelector: {}
          f:policyTypes: {}
      manager: ingress-operator
      operation: Update
      time: "2026-11-02T17:35:43Z"
    name: maas-default-gateway-allow
    namespace: openshift-ingress
    ownerReferences:
    - apiVersion: gateway.networking.k8s.io/v1
      kind: Gateway
      name: maas-default-gateway
      uid: 5bfda421-ff22-4db1-9447-7ce6ca2c1036
    resourceVersion: "9606"
    uid: f1d32b54-b802-4887-924b-ded3aff6310b
  spec:
    egress:
    - {}
    ingress:
    - {}
    podSelector:
      matchLabels:
        gateway.networking.k8s.io/gateway-name: maas-default-gateway
    policyTypes:
    - Ingress
    - Egress
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    creationTimestamp: "2026-11-02T17:35:43Z"
    generation: 1
    labels:
      ingress.openshift.io/owning-gateway: openshift-ai-inference
    managedFields:
    - apiVersion: networking.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:labels:
            .: {}
            f:ingress.openshift.io/owning-gateway: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"b6f4aec8-672c-46c2-8368-eb395397cbc8"}: {}
        f:spec:
          f:egress: {}
          f:ingress: {}
          f:podSelector: {}
          f:policyTypes: {}
      manager: ingress-operator
      operation: Update
      time: "2026-11-02T17:35:43Z"
    name: openshift-ai-inference-allow
    namespace: openshift-ingress
    ownerReferences:
    - apiVersion: gateway.networking.k8s.io/v1
      kind: Gateway
      name: openshift-ai-inference
      uid: b6f4aec8-672c-46c2-8368-eb395397cbc8
    resourceVersion: "9586"
    uid: 098746de-3fba-4175-a49a-cf9042c8f639
  spec:
    egress:
    - {}
    ingress:
    - {}
    podSelector:
      matchLabels:
        gateway.networking.k8s.io/gateway-name: openshift-ai-inference
    policyTypes:
    - Ingress
    - Egress
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    creationTimestamp: "2026-11-02T17:27:19Z"
    generation: 1
    managedFields:
    - apiVersion: networking.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:spec:
          f:policyTypes: {}
      manager: ingress-operator
      operation: Update
      time: "2026-11-02T17:27:19Z"
    name: openshift-ingress-deny-all
    namespace: openshift-ingress
    resourceVersion: "2189"
    uid: 9f9f4122-869a-4197-8f89-1f5e8cacd4e7
  spec:
    podSelector: {}
    policyTypes:
    - Ingress
    - Egress
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    annotations:
      opendatahub.io/managed: "false"
    creationTimestamp: "2026-11-02T17:39:28Z"
    generation: 1
    labels:
      app.kubernetes.io/component: networking
      app.kubernetes.io/managed-by: ai-gateway-controller
      app.kubernetes.io/part-of: maas
      app.opendatahub.io/modelsasservice: "true"
    managedFields:
    - apiVersion: networking.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:labels:
            f:app.kubernetes.io/component: {}
            f:app.kubernetes.io/managed-by: {}
            f:app.kubernetes.io/part-of: {}
            f:app.opendatahub.io/modelsasservice: {}
        f:spec:
          f:egress: {}
          f:ingress: {}
          f:podSelector: {}
          f:policyTypes: {}
      manager: ai-gateway-controller
      operation: Apply
      time: "2026-11-02T17:39:28Z"
    - apiVersion: networking.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:opendatahub.io/managed: {}
      manager: kubectl-annotate
      operation: Update
      time: "2026-11-02T17:39:55Z"
    name: payload-processing
    namespace: openshift-ingress
    resourceVersion: "18896"
    uid: 49d3f7c3-9a16-4588-9660-da2e85f48f76
  spec:
    egress:
    - ports:
      - port: 53
        protocol: UDP
      - port: 53
        protocol: TCP
      - port: 5353
        protocol: UDP
      - port: 5353
        protocol: TCP
    - ports:
      - port: 443
        protocol: TCP
      - port: 6443
        protocol: TCP
    ingress:
    - from:
      - namespaceSelector:
          matchLabels:
            kubernetes.io/metadata.name: openshift-ingress
        podSelector:
          matchLabels:
            gateway.istio.io/managed: istio.io-gateway-controller
      ports:
      - port: 9004
        protocol: TCP
    - from:
      - namespaceSelector:
          matchLabels:
            kubernetes.io/metadata.name: openshift-monitoring
      - namespaceSelector:
          matchLabels:
            kubernetes.io/metadata.name: openshift-user-workload-monitoring
      ports:
      - port: 9090
        protocol: TCP
    podSelector:
      matchExpressions:
      - key: maas.opendatahub.io/tenant-instance
        operator: In
        values:
        - payload-processing
        - payload-pre-processing
    policyTypes:
    - Ingress
    - Egress
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    creationTimestamp: "2026-11-02T17:27:19Z"
    generation: 1
    labels:
      ingresscontroller.operator.openshift.io/owning-ingresscontroller: default
    managedFields:
    - apiVersion: networking.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:labels:
            .: {}
            f:ingresscontroller.operator.openshift.io/owning-ingresscontroller: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"aaad62f0-2f49-44ee-ae59-b9eafa0ef392"}: {}
        f:spec:
          f:egress: {}
          f:ingress: {}
          f:podSelector: {}
          f:policyTypes: {}
      manager: ingress-operator
      operation: Update
      time: "2026-11-02T17:27:19Z"
    name: router-default
    namespace: openshift-ingress
    ownerReferences:
    - apiVersion: apps/v1
      controller: true
      kind: Deployment
      name: router-default
      uid: aaad62f0-2f49-44ee-ae59-b9eafa0ef392
    resourceVersion: "2188"
    uid: 11bf6f08-737a-4601-a3ee-77135659c532
  spec:
    egress:
    - {}
    ingress:
    - ports:
      - port: http
        protocol: TCP
      - port: https
        protocol: TCP
      - port: metrics
        protocol: TCP
    podSelector:
      matchLabels:
        ingresscontroller.operator.openshift.io/deployment-ingresscontroller: default
    policyTypes:
    - Ingress
    - Egress
kind: NetworkPolicyList
metadata:
  resourceVersion: "236173"