---
apiVersion: networking.k8s.io/v1
items:
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    creationTimestamp: "2026-10-22T16:49:24Z"
    generation: 1
    managedFields:
    - apiVersion: networking.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:spec:
          f:egress: {}
          f:podSelector: {}
          f:policyTypes: {}
      manager: cluster-image-registry-operator
      operation: Update
      time: "2026-10-22T16:49:24Z"
    name: image-pruner-networkpolicy
    namespace: openshift-image-registry
    resourceVersion: "1723"
    uid: 2a4b4abb-0a42-4d97-a564-0274f01f02e8
  spec:
    egress:
    - {}
    - ports:
      - port: 6443
        protocol: TCP
      to:
      - namespaceSelector:
          matchLabels:
            kubernetes.io/metadata.name: openshift-kube-apiserver
        podSelector:
          matchLabels:
            app: openshift-kube-apiserver
    - ports:
      - port: 5353
        protocol: TCP
      - port: 5353
        protocol: UDP
      to:
      - namespaceSelector:
          matchLabels:
            kubernetes.io/metadata.name: openshift-dns
    - ports:
      - port: 5000
        protocol: TCP
      to:
      - podSelector:
          matchLabels:
            docker-registry: default
    podSelector:
      matchLabels:
        app: image-pruner
    policyTypes:
    - Egress
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    creationTimestamp: "2026-10-22T16:49:34Z"
    generation: 1
    managedFields:
    - apiVersion: networking.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:spec:
          f:egress: {}
          f:ingress: {}
          f:podSelector: {}
          f:policyTypes: {}
      manager: cluster-image-registry-operator
      operation: Update
      time: "2026-10-22T16:49:34Z"
    name: image-registry-networkpolicy
    namespace: openshift-image-registry
    resourceVersion: "2347"
    uid: 0fd81804-5ca5-4cd5-832f-4882d097e4d1
  spec:
    egress:
    - {}
    - ports:
      - port: 8443
        protocol: TCP
      to:
      - namespaceSelector:
          matchLabels:
            kubernetes.io/metadata.name: openshift-kube-apiserver
        podSelector:
          matchLabels:
            app: openshift-kube-apiserver
    - ports:
      - port: 5353
        protocol: TCP
      - port: 5353
        protocol: UDP
      to:
      - namespaceSelector:
          matchLabels:
            kubernetes.io/metadata.name: openshift-dns
    - ports:
      - port: 443
        protocol: TCP
      to:
      - ipBlock:
          cidr: 0.0.0.0/0
          except:
          - 10.0.0.0/8
          - 172.16.0.0/12
          - 192.168.0.0/16
    ingress:
    - from:
      - namespaceSelector:
          matchLabels:
            kubernetes.io/metadata.name: openshift-monitoring
      ports:
      - port: 5000
        protocol: TCP
    - from:
      - namespaceSelector:
          matchLabels:
            policy-group.network.openshift.io/ingress: ""
      ports:
      - port: 5000
        protocol: TCP
    - from:
      - namespaceSelector: {}
      ports:
      - port: 5000
        protocol: TCP
    - ports:
      - port: 5000
        protocol: TCP
    podSelector:
      matchLabels:
        docker-registry: default
    policyTypes:
    - Ingress
    - Egress
kind: NetworkPolicyList
metadata:
  resourceVersion: "21669"