---
apiVersion: networking.k8s.io/v1
items:
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    creationTimestamp: "2026-11-02T09:58:01Z"
    generation: 1
    managedFields:
    - apiVersion: networking.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:ownerReferences:
            .: {}
            k:{"uid":"346a3293-57d5-4149-a6d3-f1ae4ae58a93"}: {}
        f:spec:
          f:egress: {}
          f:podSelector: {}
          f:policyTypes: {}
      manager: kueue-operator
      operation: Update
      time: "2026-11-02T09:58:01Z"
    name: kueue-allow-egress-cluster-dns
    namespace: openshift-kueue-operator
    ownerReferences:
    - apiVersion: kueue.openshift.io/v1
      kind: Kueue
      name: cluster
      uid: 346a3293-57d5-4149-a6d3-f1ae4ae58a93
    resourceVersion: "12467"
    uid: 2e6408af-881c-43be-b762-3a6dd6e6f13d
  spec:
    egress:
    - ports:
      - port: dns-tcp
        protocol: TCP
      - port: dns
        protocol: UDP
      to:
      - namespaceSelector:
          matchLabels:
            kubernetes.io/metadata.name: openshift-dns
        podSelector:
          matchLabels:
            dns.operator.openshift.io/daemonset-dns: default
    podSelector:
      matchLabels:
        app.openshift.io/name: kueue
    policyTypes:
    - Egress
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    creationTimestamp: "2026-11-02T09:58:01Z"
    generation: 1
    managedFields:
    - apiVersion: networking.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:ownerReferences:
            .: {}
            k:{"uid":"346a3293-57d5-4149-a6d3-f1ae4ae58a93"}: {}
        f:spec:
          f:egress: {}
          f:podSelector: {}
          f:policyTypes: {}
      manager: kueue-operator
      operation: Update
      time: "2026-11-02T09:58:01Z"
    name: kueue-allow-egress-kube-apiserver
    namespace: openshift-kueue-operator
    ownerReferences:
    - apiVersion: kueue.openshift.io/v1
      kind: Kueue
      name: cluster
      uid: 346a3293-57d5-4149-a6d3-f1ae4ae58a93
    resourceVersion: "12465"
    uid: 938a66f7-10d1-4baf-b645-f3b6bc57a7e7
  spec:
    egress:
    - ports:
      - port: 6443
        protocol: TCP
    podSelector:
      matchLabels:
        app.openshift.io/name: kueue
    policyTypes:
    - Egress
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    creationTimestamp: "2026-11-02T09:58:02Z"
    generation: 1
    managedFields:
    - apiVersion: networking.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:ownerReferences:
            .: {}
            k:{"uid":"346a3293-57d5-4149-a6d3-f1ae4ae58a93"}: {}
        f:spec:
          f:egress: {}
          f:ingress: {}
          f:podSelector: {}
          f:policyTypes: {}
      manager: kueue-operator
      operation: Update
      time: "2026-11-02T09:58:02Z"
    name: kueue-allow-ingress-egress-metrics
    namespace: openshift-kueue-operator
    ownerReferences:
    - apiVersion: kueue.openshift.io/v1
      kind: Kueue
      name: cluster
      uid: 346a3293-57d5-4149-a6d3-f1ae4ae58a93
    resourceVersion: "12470"
    uid: 13061596-0906-4295-87d3-d2d44c0c25f7
  spec:
    egress:
    - ports:
      - port: 8443
        protocol: TCP
      to:
      - namespaceSelector:
          matchLabels:
            openshift.io/cluster-monitoring: "true"
      - namespaceSelector:
          matchLabels:
            kubernetes.io/metadata.name: openshift-monitoring
      - namespaceSelector:
          matchLabels:
            kubernetes.io/metadata.name: openshift-user-workload-monitoring
    ingress:
    - from:
      - namespaceSelector:
          matchLabels:
            openshift.io/cluster-monitoring: "true"
      - namespaceSelector:
          matchLabels:
            kubernetes.io/metadata.name: openshift-monitoring
      - namespaceSelector:
          matchLabels:
            kubernetes.io/metadata.name: openshift-user-workload-monitoring
      ports:
      - port: 8443
        protocol: TCP
    podSelector:
      matchLabels:
        app.openshift.io/name: kueue
    policyTypes:
    - Ingress
    - Egress
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    creationTimestamp: "2026-11-02T09:58:02Z"
    generation: 1
    managedFields:
    - apiVersion: networking.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:ownerReferences:
            .: {}
            k:{"uid":"346a3293-57d5-4149-a6d3-f1ae4ae58a93"}: {}
        f:spec:
          f:egress: {}
          f:ingress: {}
          f:podSelector: {}
          f:policyTypes: {}
      manager: kueue-operator
      operation: Update
      time: "2026-11-02T09:58:02Z"
    name: kueue-allow-ingress-egress-visibility
    namespace: openshift-kueue-operator
    ownerReferences:
    - apiVersion: kueue.openshift.io/v1
      kind: Kueue
      name: cluster
      uid: 346a3293-57d5-4149-a6d3-f1ae4ae58a93
    resourceVersion: "12472"
    uid: a8e3e7d6-e5fb-4e84-9436-9048a9288ddf
  spec:
    egress:
    - ports:
      - port: visibility
        protocol: TCP
      to:
      - namespaceSelector: {}
    ingress:
    - from:
      - namespaceSelector: {}
      ports:
      - port: visibility
        protocol: TCP
    podSelector:
      matchLabels:
        app.kubernetes.io/name: kueue
    policyTypes:
    - Ingress
    - Egress
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    creationTimestamp: "2026-11-02T09:58:02Z"
    generation: 1
    managedFields:
    - apiVersion: networking.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:ownerReferences:
            .: {}
            k:{"uid":"346a3293-57d5-4149-a6d3-f1ae4ae58a93"}: {}
        f:spec:
          f:egress: {}
          f:ingress: {}
          f:podSelector: {}
          f:policyTypes: {}
      manager: kueue-operator
      operation: Update
      time: "2026-11-02T09:58:02Z"
    name: kueue-allow-ingress-egress-webhook
    namespace: openshift-kueue-operator
    ownerReferences:
    - apiVersion: kueue.openshift.io/v1
      kind: Kueue
      name: cluster
      uid: 346a3293-57d5-4149-a6d3-f1ae4ae58a93
    resourceVersion: "12475"
    uid: 06dfb310-5648-4f55-85ea-c5ee1102d9bf
  spec:
    egress:
    - ports:
      - port: webhook-server
        protocol: TCP
      to:
      - namespaceSelector:
          matchLabels:
            kubernetes.io/metadata.name: openshift-kube-apiserver
        podSelector:
          matchLabels:
            app: openshift-kube-apiserver
    ingress:
    - from:
      - namespaceSelector:
          matchLabels:
            kubernetes.io/metadata.name: openshift-kube-apiserver
        podSelector:
          matchLabels:
            app: openshift-kube-apiserver
      ports:
      - port: webhook-server
        protocol: TCP
    podSelector:
      matchLabels:
        app.kubernetes.io/name: kueue
    policyTypes:
    - Ingress
    - Egress
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    creationTimestamp: "2026-11-02T09:58:02Z"
    generation: 1
    managedFields:
    - apiVersion: networking.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:ownerReferences:
            .: {}
            k:{"uid":"346a3293-57d5-4149-a6d3-f1ae4ae58a93"}: {}
        f:spec:
          f:podSelector: {}
          f:policyTypes: {}
      manager: kueue-operator
      operation: Update
      time: "2026-11-02T09:58:02Z"
    name: kueue-deny-all
    namespace: openshift-kueue-operator
    ownerReferences:
    - apiVersion: kueue.openshift.io/v1
      kind: Kueue
      name: cluster
      uid: 346a3293-57d5-4149-a6d3-f1ae4ae58a93
    resourceVersion: "12477"
    uid: 7a40e112-928e-49f2-8774-670b47aec981
  spec:
    podSelector:
      matchLabels:
        app.openshift.io/name: kueue
    policyTypes:
    - Ingress
    - Egress
kind: NetworkPolicyList
metadata:
  resourceVersion: "22743"