---
apiVersion: networking.k8s.io/v1
items:
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    creationTimestamp: "2026-10-30T09:29:45Z"
    generation: 1
    labels:
      app.kubernetes.io/managed-by: cluster-monitoring-operator
      app.kubernetes.io/part-of: openshift-monitoring
    managedFields:
    - apiVersion: networking.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:labels:
            .: {}
            f:app.kubernetes.io/managed-by: {}
            f:app.kubernetes.io/part-of: {}
        f:spec:
          f:egress: {}
          f:ingress: {}
          f:podSelector: {}
          f:policyTypes: {}
      manager: operator
      operation: Update
      time: "2026-10-30T09:29:45Z"
    name: alertmanager
    namespace: openshift-monitoring
    resourceVersion: "6694"
    uid: d6fa9312-ca13-4913-99d9-778e93cc2be0
  spec:
    egress:
    - {}
    ingress:
    - ports:
      - port: 9092
        protocol: TCP
      - port: 9095
        protocol: TCP
      - port: 9097
        protocol: TCP
      - port: 9094
        protocol: TCP
      - port: 9094
        protocol: UDP
    podSelector:
      matchLabels:
        app.kubernetes.io/name: alertmanager
        app.kubernetes.io/part-of: openshift-monitoring
    policyTypes:
    - Ingress
    - Egress
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    annotations:
      include.release.openshift.io/hypershift: "true"
      include.release.openshift.io/ibm-cloud-managed: "true"
      include.release.openshift.io/self-managed-high-availability: "true"
      include.release.openshift.io/single-node-developer: "true"
    creationTimestamp: "2026-10-30T09:19:41Z"
    generation: 1
    labels:
      app.kubernetes.io/managed-by: cluster-version-operator
      app.kubernetes.io/part-of: openshift-monitoring
    managedFields:
    - apiVersion: networking.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:include.release.openshift.io/hypershift: {}
            f:include.release.openshift.io/ibm-cloud-managed: {}
            f:include.release.openshift.io/self-managed-high-availability: {}
            f:include.release.openshift.io/single-node-developer: {}
          f:labels:
            .: {}
            f:app.kubernetes.io/managed-by: {}
            f:app.kubernetes.io/part-of: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"2a0c9ab3-97b5-455f-a136-fb6cfe2d7a17"}: {}
        f:spec:
          f:egress: {}
          f:ingress: {}
          f:podSelector: {}
          f:policyTypes: {}
      manager: cluster-version-operator
      operation: Update
      time: "2026-10-30T09:19:41Z"
    name: cluster-monitoring-operator
    namespace: openshift-monitoring
    ownerReferences:
    - apiVersion: config.openshift.io/v1
      controller: true
      kind: ClusterVersion
      name: version
      uid: 2a0c9ab3-97b5-455f-a136-fb6cfe2d7a17
    resourceVersion: "1741"
    uid: 23cc7748-2c7d-4ec3-a1cc-c3ad0590d39b
  spec:
    egress:
    - {}
    ingress:
    - ports:
      - port: 8443
        protocol: TCP
    podSelector:
      matchLabels:
        app.kubernetes.io/name: cluster-monitoring-operator
    policyTypes:
    - Ingress
    - Egress
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    creationTimestamp: "2026-10-30T09:30:31Z"
    generation: 1
    labels:
      app.kubernetes.io/managed-by: cluster-monitoring-operator
      app.kubernetes.io/part-of: openshift-monitoring
    managedFields:
    - apiVersion: networking.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:labels:
            .: {}
            f:app.kubernetes.io/managed-by: {}
            f:app.kubernetes.io/part-of: {}
        f:spec:
          f:podSelector: {}
          f:policyTypes: {}
      manager: operator
      operation: Update
      time: "2026-10-30T09:30:31Z"
    name: deny-cluster-monitoring-operator-and-operands
    namespace: openshift-monitoring
    resourceVersion: "8229"
    uid: a7683a8e-62b8-4d03-934b-aff05ec5b084
  spec:
    podSelector:
      matchLabels:
        app.kubernetes.io/part-of: openshift-monitoring
    policyTypes:
    - Ingress
    - Egress
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    creationTimestamp: "2026-10-30T09:29:45Z"
    generation: 1
    labels:
      app.kubernetes.io/managed-by: cluster-monitoring-operator
      app.kubernetes.io/part-of: openshift-monitoring
    managedFields:
    - apiVersion: networking.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:labels:
            .: {}
            f:app.kubernetes.io/managed-by: {}
            f:app.kubernetes.io/part-of: {}
        f:spec:
          f:egress: {}
          f:ingress: {}
          f:podSelector: {}
          f:policyTypes: {}
      manager: operator
      operation: Update
      time: "2026-10-30T09:29:45Z"
    name: kube-state-metrics
    namespace: openshift-monitoring
    resourceVersion: "6698"
    uid: 3c753190-4c11-4f35-830f-2029a88b5681
  spec:
    egress:
    - {}
    ingress:
    - ports:
      - port: 8443
        protocol: TCP
      - port: 9443
        protocol: TCP
    podSelector:
      matchLabels:
        app.kubernetes.io/name: kube-state-metrics
        app.kubernetes.io/part-of: openshift-monitoring
    policyTypes:
    - Ingress
    - Egress
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    creationTimestamp: "2026-10-30T09:29:45Z"
    generation: 1
    labels:
      app.kubernetes.io/managed-by: cluster-monitoring-operator
      app.kubernetes.io/part-of: openshift-monitoring
    managedFields:
    - apiVersion: networking.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:labels:
            .: {}
            f:app.kubernetes.io/managed-by: {}
            f:app.kubernetes.io/part-of: {}
        f:spec:
          f:egress: {}
          f:ingress: {}
          f:podSelector: {}
          f:policyTypes: {}
      manager: operator
      operation: Update
      time: "2026-10-30T09:29:45Z"
    name: metrics-server
    namespace: openshift-monitoring
    resourceVersion: "6693"
    uid: 95d26007-9e89-4d74-8aff-be39aa777081
  spec:
    egress:
    - {}
    ingress:
    - ports:
      - port: 10250
        protocol: TCP
    podSelector:
      matchLabels:
        app.kubernetes.io/name: metrics-server
        app.kubernetes.io/part-of: openshift-monitoring
    policyTypes:
    - Ingress
    - Egress
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    creationTimestamp: "2026-10-30T09:29:45Z"
    generation: 1
    labels:
      app.kubernetes.io/managed-by: cluster-monitoring-operator
      app.kubernetes.io/part-of: openshift-monitoring
    managedFields:
    - apiVersion: networking.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:labels:
            .: {}
            f:app.kubernetes.io/managed-by: {}
            f:app.kubernetes.io/part-of: {}
        f:spec:
          f:egress: {}
          f:ingress: {}
          f:podSelector: {}
          f:policyTypes: {}
      manager: operator
      operation: Update
      time: "2026-10-30T09:29:45Z"
    name: monitoring-plugin
    namespace: openshift-monitoring
    resourceVersion: "6696"
    uid: d3d67174-03ca-4ea5-bd95-eccee0cba266
  spec:
    egress:
    - {}
    ingress:
    - ports:
      - port: 9443
        protocol: TCP
    podSelector:
      matchLabels:
        app.kubernetes.io/name: monitoring-plugin
        app.kubernetes.io/part-of: openshift-monitoring
    policyTypes:
    - Ingress
    - Egress
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    creationTimestamp: "2026-10-30T09:29:45Z"
    generation: 1
    labels:
      app.kubernetes.io/managed-by: cluster-monitoring-operator
      app.kubernetes.io/part-of: openshift-monitoring
    managedFields:
    - apiVersion: networking.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:labels:
            .: {}
            f:app.kubernetes.io/managed-by: {}
            f:app.kubernetes.io/part-of: {}
        f:spec:
          f:egress: {}
          f:ingress: {}
          f:podSelector: {}
          f:policyTypes: {}
      manager: operator
      operation: Update
      time: "2026-10-30T09:29:45Z"
    name: openshift-state-metrics
    namespace: openshift-monitoring
    resourceVersion: "6695"
    uid: 3ced9b36-7e8d-46fa-8963-3572fef1e7f6
  spec:
    egress:
    - {}
    ingress:
    - ports:
      - port: 8443
        protocol: TCP
      - port: 9443
        protocol: TCP
    podSelector:
      matchLabels:
        app.kubernetes.io/name: openshift-state-metrics
        app.kubernetes.io/part-of: openshift-monitoring
    policyTypes:
    - Ingress
    - Egress
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    creationTimestamp: "2026-10-30T09:29:45Z"
    generation: 1
    labels:
      app.kubernetes.io/managed-by: cluster-monitoring-operator
      app.kubernetes.io/part-of: openshift-monitoring
    managedFields:
    - apiVersion: networking.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:labels:
            .: {}
            f:app.kubernetes.io/managed-by: {}
            f:app.kubernetes.io/part-of: {}
        f:spec:
          f:egress: {}
          f:ingress: {}
          f:podSelector: {}
          f:policyTypes: {}
      manager: operator
      operation: Update
      time: "2026-10-30T09:29:45Z"
    name: prometheus
    namespace: openshift-monitoring
    resourceVersion: "6692"
    uid: 8e13a3fd-4d38-4ecc-8d27-425378cc1474
  spec:
    egress:
    - {}
    ingress:
    - ports:
      - port: 9091
        protocol: TCP
      - port: 9092
        protocol: TCP
      - port: 10901
        protocol: TCP
      - port: 10903
        protocol: TCP
    podSelector:
      matchLabels:
        app.kubernetes.io/name: prometheus
        app.kubernetes.io/part-of: openshift-monitoring
    policyTypes:
    - Ingress
    - Egress
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    creationTimestamp: "2026-10-30T09:29:25Z"
    generation: 1
    labels:
      app.kubernetes.io/managed-by: cluster-monitoring-operator
      app.kubernetes.io/part-of: openshift-monitoring
    managedFields:
    - apiVersion: networking.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:labels:
            .: {}
            f:app.kubernetes.io/managed-by: {}
            f:app.kubernetes.io/part-of: {}
        f:spec:
          f:egress: {}
          f:ingress: {}
          f:podSelector: {}
          f:policyTypes: {}
      manager: operator
      operation: Update
      time: "2026-10-30T09:29:25Z"
    name: prometheus-operator
    namespace: openshift-monitoring
    resourceVersion: "6118"
    uid: d3463c40-f230-4342-9241-9172f78b56db
  spec:
    egress:
    - {}
    ingress:
    - ports:
      - port: 8443
        protocol: TCP
    podSelector:
      matchLabels:
        app.kubernetes.io/name: prometheus-operator
        app.kubernetes.io/part-of: openshift-monitoring
    policyTypes:
    - Ingress
    - Egress
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    creationTimestamp: "2026-10-30T09:29:26Z"
    generation: 1
    labels:
      app.kubernetes.io/managed-by: cluster-monitoring-operator
      app.kubernetes.io/part-of: openshift-monitoring
    managedFields:
    - apiVersion: networking.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:labels:
            .: {}
            f:app.kubernetes.io/managed-by: {}
            f:app.kubernetes.io/part-of: {}
        f:spec:
          f:egress: {}
          f:ingress: {}
          f:podSelector: {}
          f:policyTypes: {}
      manager: operator
      operation: Update
      time: "2026-10-30T09:29:26Z"
    name: prometheus-operator-admission-webhook
    namespace: openshift-monitoring
    resourceVersion: "6137"
    uid: cfe69996-c765-4035-85ee-e384eaa55857
  spec:
    egress:
    - {}
    ingress:
    - ports:
      - port: 8443
        protocol: TCP
    podSelector:
      matchLabels:
        app.kubernetes.io/name: prometheus-operator-admission-webhook
        app.kubernetes.io/part-of: openshift-monitoring
    policyTypes:
    - Ingress
    - Egress
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    creationTimestamp: "2026-10-30T09:29:57Z"
    generation: 1
    labels:
      app.kubernetes.io/managed-by: cluster-monitoring-operator
      app.kubernetes.io/part-of: openshift-monitoring
    managedFields:
    - apiVersion: networking.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:labels:
            .: {}
            f:app.kubernetes.io/managed-by: {}
            f:app.kubernetes.io/part-of: {}
        f:spec:
          f:egress: {}
          f:ingress: {}
          f:podSelector: {}
          f:policyTypes: {}
      manager: operator
      operation: Update
      time: "2026-10-30T09:29:57Z"
    name: telemeter-client
    namespace: openshift-monitoring
    resourceVersion: "7395"
    uid: 362f8554-8159-4bc9-a3ab-4502977b6cb2
  spec:
    egress:
    - {}
    ingress:
    - ports:
      - port: 8443
        protocol: TCP
    podSelector:
      matchLabels:
        app.kubernetes.io/name: telemeter-client
        app.kubernetes.io/part-of: openshift-monitoring
    policyTypes:
    - Ingress
    - Egress
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    creationTimestamp: "2026-10-30T09:29:45Z"
    generation: 1
    labels:
      app.kubernetes.io/managed-by: cluster-monitoring-operator
      app.kubernetes.io/part-of: openshift-monitoring
    managedFields:
    - apiVersion: networking.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:labels:
            .: {}
            f:app.kubernetes.io/managed-by: {}
            f:app.kubernetes.io/part-of: {}
        f:spec:
          f:egress: {}
          f:ingress: {}
          f:podSelector: {}
          f:policyTypes: {}
      manager: operator
      operation: Update
      time: "2026-10-30T09:29:45Z"
    name: thanos-querier
    namespace: openshift-monitoring
    resourceVersion: "6697"
    uid: 62e2aaae-31bb-4653-a650-883d90cbb493
  spec:
    egress:
    - {}
    ingress:
    - ports:
      - port: 9091
        protocol: TCP
      - port: 9092
        protocol: TCP
      - port: 9093
        protocol: TCP
      - port: 9094
        protocol: TCP
    podSelector:
      matchLabels:
        app.kubernetes.io/name: thanos-query
        app.kubernetes.io/part-of: openshift-monitoring
    policyTypes:
    - Ingress
    - Egress
kind: NetworkPolicyList
metadata:
  resourceVersion: "10289"