---
apiVersion: networking.k8s.io/v1
items:
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    creationTimestamp: "2026-11-02T12:05:31Z"
    generation: 1
    managedFields:
    - apiVersion: networking.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:ownerReferences:
            .: {}
            k:{"uid":"c01471ec-e2b7-4010-9e1e-73473387d3f3"}: {}
        f:spec:
          f:egress: {}
          f:podSelector: {}
          f:policyTypes: {}
      manager: kueue-operator
      operation: Update
      time: "2026-11-02T12:05:31Z"
    name: kueue-allow-egress-cluster-dns
    namespace: openshift-kueue-operator
    ownerReferences:
    - apiVersion: kueue.openshift.io/v1
      kind: Kueue
      name: cluster
      uid: c01471ec-e2b7-4010-9e1e-73473387d3f3
    resourceVersion: "12507"
    uid: 96f7df99-baaa-4d0e-b458-4677c5010e58
  spec:
    egress:
    - ports:
      - port: dns-tcp
        protocol: TCP
      - port: dns
        protocol: UDP
      to:
      - namespaceSelector:
          matchLabels:
            kubernetes.io/metadata.name: openshift-dns
        podSelector:
          matchLabels:
            dns.operator.openshift.io/daemonset-dns: default
    podSelector:
      matchLabels:
        app.openshift.io/name: kueue
    policyTypes:
    - Egress
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    creationTimestamp: "2026-11-02T12:05:31Z"
    generation: 1
    managedFields:
    - apiVersion: networking.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:ownerReferences:
            .: {}
            k:{"uid":"c01471ec-e2b7-4010-9e1e-73473387d3f3"}: {}
        f:spec:
          f:egress: {}
          f:podSelector: {}
          f:policyTypes: {}
      manager: kueue-operator
      operation: Update
      time: "2026-11-02T12:05:31Z"
    name: kueue-allow-egress-kube-apiserver
    namespace: openshift-kueue-operator
    ownerReferences:
    - apiVersion: kueue.openshift.io/v1
      kind: Kueue
      name: cluster
      uid: c01471ec-e2b7-4010-9e1e-73473387d3f3
    resourceVersion: "12505"
    uid: 08c64c78-6567-4a7c-ae39-f36576ed4a62
  spec:
    egress:
    - ports:
      - port: 6443
        protocol: TCP
    podSelector:
      matchLabels:
        app.openshift.io/name: kueue
    policyTypes:
    - Egress
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    creationTimestamp: "2026-11-02T12:05:31Z"
    generation: 1
    managedFields:
    - apiVersion: networking.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:ownerReferences:
            .: {}
            k:{"uid":"c01471ec-e2b7-4010-9e1e-73473387d3f3"}: {}
        f:spec:
          f:egress: {}
          f:ingress: {}
          f:podSelector: {}
          f:policyTypes: {}
      manager: kueue-operator
      operation: Update
      time: "2026-11-02T12:05:31Z"
    name: kueue-allow-ingress-egress-metrics
    namespace: openshift-kueue-operator
    ownerReferences:
    - apiVersion: kueue.openshift.io/v1
      kind: Kueue
      name: cluster
      uid: c01471ec-e2b7-4010-9e1e-73473387d3f3
    resourceVersion: "12509"
    uid: 818c5069-3d3a-4c53-b1e0-b29ff9f09955
  spec:
    egress:
    - ports:
      - port: 8443
        protocol: TCP
      to:
      - namespaceSelector:
          matchLabels:
            openshift.io/cluster-monitoring: "true"
      - namespaceSelector:
          matchLabels:
            kubernetes.io/metadata.name: openshift-monitoring
      - namespaceSelector:
          matchLabels:
            kubernetes.io/metadata.name: openshift-user-workload-monitoring
    ingress:
    - from:
      - namespaceSelector:
          matchLabels:
            openshift.io/cluster-monitoring: "true"
      - namespaceSelector:
          matchLabels:
            kubernetes.io/metadata.name: openshift-monitoring
      - namespaceSelector:
          matchLabels:
            kubernetes.io/metadata.name: openshift-user-workload-monitoring
      ports:
      - port: 8443
        protocol: TCP
    podSelector:
      matchLabels:
        app.openshift.io/name: kueue
    policyTypes:
    - Ingress
    - Egress
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    creationTimestamp: "2026-11-02T12:05:31Z"
    generation: 1
    managedFields:
    - apiVersion: networking.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:ownerReferences:
            .: {}
            k:{"uid":"c01471ec-e2b7-4010-9e1e-73473387d3f3"}: {}
        f:spec:
          f:egress: {}
          f:ingress: {}
          f:podSelector: {}
          f:policyTypes: {}
      manager: kueue-operator
      operation: Update
      time: "2026-11-02T12:05:31Z"
    name: kueue-allow-ingress-egress-visibility
    namespace: openshift-kueue-operator
    ownerReferences:
    - apiVersion: kueue.openshift.io/v1
      kind: Kueue
      name: cluster
      uid: c01471ec-e2b7-4010-9e1e-73473387d3f3
    resourceVersion: "12515"
    uid: 699b95c4-e1d4-47a3-81b7-bef6a060bbd0
  spec:
    egress:
    - ports:
      - port: visibility
        protocol: TCP
      to:
      - namespaceSelector: {}
    ingress:
    - from:
      - namespaceSelector: {}
      ports:
      - port: visibility
        protocol: TCP
    podSelector:
      matchLabels:
        app.kubernetes.io/name: kueue
    policyTypes:
    - Ingress
    - Egress
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    creationTimestamp: "2026-11-02T12:05:32Z"
    generation: 1
    managedFields:
    - apiVersion: networking.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:ownerReferences:
            .: {}
            k:{"uid":"c01471ec-e2b7-4010-9e1e-73473387d3f3"}: {}
        f:spec:
          f:egress: {}
          f:ingress: {}
          f:podSelector: {}
          f:policyTypes: {}
      manager: kueue-operator
      operation: Update
      time: "2026-11-02T12:05:32Z"
    name: kueue-allow-ingress-egress-webhook
    namespace: openshift-kueue-operator
    ownerReferences:
    - apiVersion: kueue.openshift.io/v1
      kind: Kueue
      name: cluster
      uid: c01471ec-e2b7-4010-9e1e-73473387d3f3
    resourceVersion: "12517"
    uid: 8b2d209b-30fa-4063-bc8b-712121f09a7c
  spec:
    egress:
    - ports:
      - port: webhook-server
        protocol: TCP
      to:
      - namespaceSelector:
          matchLabels:
            kubernetes.io/metadata.name: openshift-kube-apiserver
        podSelector:
          matchLabels:
            app: openshift-kube-apiserver
    ingress:
    - from:
      - namespaceSelector:
          matchLabels:
            kubernetes.io/metadata.name: openshift-kube-apiserver
        podSelector:
          matchLabels:
            app: openshift-kube-apiserver
      ports:
      - port: webhook-server
        protocol: TCP
    podSelector:
      matchLabels:
        app.kubernetes.io/name: kueue
    policyTypes:
    - Ingress
    - Egress
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    creationTimestamp: "2026-11-02T12:05:32Z"
    generation: 1
    managedFields:
    - apiVersion: networking.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:ownerReferences:
            .: {}
            k:{"uid":"c01471ec-e2b7-4010-9e1e-73473387d3f3"}: {}
        f:spec:
          f:podSelector: {}
          f:policyTypes: {}
      manager: kueue-operator
      operation: Update
      time: "2026-11-02T12:05:32Z"
    name: kueue-deny-all
    namespace: openshift-kueue-operator
    ownerReferences:
    - apiVersion: kueue.openshift.io/v1
      kind: Kueue
      name: cluster
      uid: c01471ec-e2b7-4010-9e1e-73473387d3f3
    resourceVersion: "12520"
    uid: db536650-1adb-4653-8ffc-b5db57d92a40
  spec:
    podSelector:
      matchLabels:
        app.openshift.io/name: kueue
    policyTypes:
    - Ingress
    - Egress
kind: NetworkPolicyList
metadata:
  resourceVersion: "23610"