---
apiVersion: networking.k8s.io/v1
items:
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    annotations:
      exclude.release.openshift.io/internal-openshift-hosted: "true"
      include.release.openshift.io/self-managed-high-availability: "true"
      kubectl.kubernetes.io/last-applied-configuration: |
        {"apiVersion":"networking.k8s.io/v1","kind":"NetworkPolicy","metadata":{"annotations":{"exclude.release.openshift.io/internal-openshift-hosted":"true","include.release.openshift.io/self-managed-high-availability":"true","kubernetes.io/description":"This NetworkPolicy is used to deny all ingress and egress traffic by default in this namespace, matching all Pods, and serving as a baseline. At the moment no other Network Policy should be needed:\n- The cluster-version operator (CVO) is a host-networked Pod, so it is not affected by network policies.\n- Bare `version-...` Pods spawned by CVO do not require any network communication.\n"},"name":"default-deny","namespace":"openshift-cluster-version"},"spec":{"podSelector":{},"policyTypes":["Ingress","Egress"]}}
      kubernetes.io/description: |
        This NetworkPolicy is used to deny all ingress and egress traffic by default in this namespace, matching all Pods, and serving as a baseline. At the moment no other Network Policy should be needed:
        - The cluster-version operator (CVO) is a host-networked Pod, so it is not affected by network policies.
        - Bare `version-...` Pods spawned by CVO do not require any network communication.
    creationTimestamp: "2026-10-23T02:31:33Z"
    generation: 1
    managedFields:
    - apiVersion: networking.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:exclude.release.openshift.io/internal-openshift-hosted: {}
            f:include.release.openshift.io/self-managed-high-availability: {}
            f:kubectl.kubernetes.io/last-applied-configuration: {}
            f:kubernetes.io/description: {}
        f:spec:
          f:policyTypes: {}
      manager: kubectl-client-side-apply
      operation: Update
      time: "2026-10-23T02:31:33Z"
    name: default-deny
    namespace: openshift-cluster-version
    resourceVersion: "503"
    uid: b363e95f-6437-4f92-ad58-9d6366265366
  spec:
    podSelector: {}
    policyTypes:
    - Ingress
    - Egress
kind: NetworkPolicyList
metadata:
  resourceVersion: "36442"