1. For Hub cluster

1.1 namespace hive:

~~~
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    creationTimestamp: "2023-10-02T09:21:27Z"
    generation: 1
    name: allow-from-kube-apiserver-operator
    namespace: hive
    resourceVersion: "33418356"
    uid: a77b25c2-8e11-4e82-aabe-e39c1cbc6c9c
  spec:
    ingress:
    - from:
      - namespaceSelector:
          matchLabels:
            kubernetes.io/metadata.name: openshift-kube-apiserver-operator
        podSelector:
          matchLabels:
            app: kube-apiserver-operator
    podSelector: {}
    policyTypes:
    - Ingress
  status: {}
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    creationTimestamp: "2023-10-04T03:55:21Z"
    generation: 1
    name: allow-from-multicluster-engine-components
    namespace: hive
    resourceVersion: "36561902"
    uid: c88adb8e-f92d-416a-a0d2-67a5e80ebf46
  spec:
    ingress:
    - from:
      - namespaceSelector:
          matchLabels:
            kubernetes.io/metadata.name: openshift-kube-apiserver
    podSelector: {}
    policyTypes:
    - Ingress
  status: {}
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    creationTimestamp: "2023-10-02T09:21:27Z"
    generation: 1
    name: allow-from-openshift-ingress
    namespace: hive
    resourceVersion: "33418353"
    uid: 1fd54232-92ff-4970-929c-9d67c31b8944
  spec:
    ingress:
    - from:
      - namespaceSelector:
          matchLabels:
            network.openshift.io/policy-group: ingress
    podSelector: {}
    policyTypes:
    - Ingress
  status: {}
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    creationTimestamp: "2023-10-02T09:21:27Z"
    generation: 1
    name: allow-from-openshift-monitoring
    namespace: hive
    resourceVersion: "33418352"
    uid: 847bf7ed-e845-4349-95bc-cfdc9bb5dbe1
  spec:
    ingress:
    - from:
      - namespaceSelector:
          matchLabels:
            network.openshift.io/policy-group: monitoring
    podSelector: {}
    policyTypes:
    - Ingress
  status: {}
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    creationTimestamp: "2023-10-02T09:21:27Z"
    generation: 1
    name: allow-from-same-namespace
    namespace: hive
    resourceVersion: "33418351"
    uid: a2b7da1b-5025-4e2f-894e-929eb0fda280
  spec:
    ingress:
    - from:
      - podSelector: {}
    podSelector: {}
    policyTypes:
    - Ingress
  status: {}
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    creationTimestamp: "2023-10-02T09:21:27Z"
    generation: 1
    name: deny-by-default
    namespace: hive
    resourceVersion: "33418350"
    uid: d2e80718-6f5c-4e23-81ee-5fa1ba72af76
  spec:
    podSelector: {}
    policyTypes:
    - Ingress
  status: {}
~~~


1.2 namespace local-cluster:

~~~
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    creationTimestamp: "2023-10-04T04:01:15Z"
    generation: 1
    name: allow-from-kube-apiserver-operator
    namespace: local-cluster
    resourceVersion: "36569639"
    uid: e0c2d413-037f-4c46-ab4f-36f1f90dc176
  spec:
    ingress:
    - from:
      - namespaceSelector:
          matchLabels:
            kubernetes.io/metadata.name: openshift-kube-apiserver-operator
        podSelector:
          matchLabels:
            app: kube-apiserver-operator
    podSelector: {}
    policyTypes:
    - Ingress
  status: {}
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    creationTimestamp: "2023-10-04T04:01:15Z"
    generation: 1
    name: allow-from-openshift-ingress
    namespace: local-cluster
    resourceVersion: "36569637"
    uid: c14a10da-3d12-432e-aebe-5f23f972bd20
  spec:
    ingress:
    - from:
      - namespaceSelector:
          matchLabels:
            network.openshift.io/policy-group: ingress
    podSelector: {}
    policyTypes:
    - Ingress
  status: {}
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    creationTimestamp: "2023-10-04T04:01:14Z"
    generation: 1
    name: allow-from-openshift-monitoring
    namespace: local-cluster
    resourceVersion: "36569636"
    uid: d9150db5-989d-4c2d-a2db-6b27599198da
  spec:
    ingress:
    - from:
      - namespaceSelector:
          matchLabels:
            network.openshift.io/policy-group: monitoring
    podSelector: {}
    policyTypes:
    - Ingress
  status: {}
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    creationTimestamp: "2023-10-04T04:01:14Z"
    generation: 1
    name: allow-from-same-namespace
    namespace: local-cluster
    resourceVersion: "36569635"
    uid: c992a71f-2ca0-49d9-98a9-ac1325361464
  spec:
    ingress:
    - from:
      - podSelector: {}
    podSelector: {}
    policyTypes:
    - Ingress
  status: {}
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    creationTimestamp: "2023-10-04T04:01:14Z"
    generation: 1
    name: deny-by-default
    namespace: local-cluster
    resourceVersion: "36569632"
    uid: 449ea826-e428-486b-8cc8-1aef11c1e3c4
  spec:
    podSelector: {}
    policyTypes:
    - Ingress
  status: {}
~~~




1.3 namespace Multiclutser-engine:

~~~
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    creationTimestamp: "2023-10-04T04:01:15Z"
    generation: 1
    name: allow-from-kube-apiserver-operator
    namespace: local-cluster
    resourceVersion: "36569639"
    uid: e0c2d413-037f-4c46-ab4f-36f1f90dc176
  spec:
    ingress:
    - from:
      - namespaceSelector:
          matchLabels:
            kubernetes.io/metadata.name: openshift-kube-apiserver-operator
        podSelector:
          matchLabels:
            app: kube-apiserver-operator
    podSelector: {}
    policyTypes:
    - Ingress
  status: {}
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    creationTimestamp: "2023-10-04T04:01:15Z"
    generation: 1
    name: allow-from-openshift-ingress
    namespace: local-cluster
    resourceVersion: "36569637"
    uid: c14a10da-3d12-432e-aebe-5f23f972bd20
  spec:
    ingress:
    - from:
      - namespaceSelector:
          matchLabels:
            network.openshift.io/policy-group: ingress
    podSelector: {}
    policyTypes:
    - Ingress
  status: {}
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    creationTimestamp: "2023-10-04T04:01:14Z"
    generation: 1
    name: allow-from-openshift-monitoring
    namespace: local-cluster
    resourceVersion: "36569636"
    uid: d9150db5-989d-4c2d-a2db-6b27599198da
  spec:
    ingress:
    - from:
      - namespaceSelector:
          matchLabels:
            network.openshift.io/policy-group: monitoring
    podSelector: {}
    policyTypes:
    - Ingress
  status: {}
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    creationTimestamp: "2023-10-04T04:01:14Z"
    generation: 1
    name: allow-from-same-namespace
    namespace: local-cluster
    resourceVersion: "36569635"
    uid: c992a71f-2ca0-49d9-98a9-ac1325361464
  spec:
    ingress:
    - from:
      - podSelector: {}
    podSelector: {}
    policyTypes:
    - Ingress
  status: {}
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    creationTimestamp: "2023-10-04T04:01:14Z"
    generation: 1
    name: deny-by-default
    namespace: local-cluster
    resourceVersion: "36569632"
    uid: 449ea826-e428-486b-8cc8-1aef11c1e3c4
  spec:
    podSelector: {}
    policyTypes:
    - Ingress
  status: {}
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    creationTimestamp: "2023-10-04T03:58:05Z"
    generation: 1
    name: allow-from-kube-apiserver-operator
    namespace: multicluster-engine
    resourceVersion: "36565272"
    uid: f3530291-eebd-4e25-bed3-a97386bb5fa9
  spec:
    ingress:
    - from:
      - namespaceSelector:
          matchLabels:
            kubernetes.io/metadata.name: openshift-kube-apiserver-operator
        podSelector:
          matchLabels:
            app: kube-apiserver-operator
    podSelector: {}
    policyTypes:
    - Ingress
  status: {}
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    creationTimestamp: "2023-10-04T03:56:32Z"
    generation: 1
    name: allow-from-multicluster-engine-components
    namespace: multicluster-engine
    resourceVersion: "36563307"
    uid: d8128009-2b2c-4c5d-a739-2e21bb844898
  spec:
    ingress:
    - from:
      - namespaceSelector:
          matchLabels:
            kubernetes.io/metadata.name: multicluster-engine
      - namespaceSelector:
          matchLabels:
            kubernetes.io/metadata.name: open-cluster-management
      - namespaceSelector:
          matchLabels:
            kubernetes.io/metadata.name: openshift-console
      - namespaceSelector:
          matchLabels:
            kubernetes.io/metadata.name: openshift-dns
      - namespaceSelector:
          matchLabels:
            kubernetes.io/metadata.name: openshift-kube-apiserver
      - namespaceSelector:
          matchLabels:
            kubernetes.io/metadata.name: openshift-kube-apiserver-operator
    podSelector: {}
    policyTypes:
    - Ingress
  status: {}
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    creationTimestamp: "2023-10-04T03:58:05Z"
    generation: 1
    name: allow-from-openshift-ingress
    namespace: multicluster-engine
    resourceVersion: "36565271"
    uid: 61870de3-004c-4c82-a125-71dc3c687d24
  spec:
    ingress:
    - from:
      - namespaceSelector:
          matchLabels:
            network.openshift.io/policy-group: ingress
    podSelector: {}
    policyTypes:
    - Ingress
  status: {}
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    creationTimestamp: "2023-10-04T03:58:05Z"
    generation: 1
    name: allow-from-openshift-monitoring
    namespace: multicluster-engine
    resourceVersion: "36565270"
    uid: 27e7ea9b-6655-4e04-b784-972ab6105313
  spec:
    ingress:
    - from:
      - namespaceSelector:
          matchLabels:
            network.openshift.io/policy-group: monitoring
    podSelector: {}
    policyTypes:
    - Ingress
  status: {}
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    creationTimestamp: "2023-10-04T03:58:05Z"
    generation: 1
    name: allow-from-same-namespace
    namespace: multicluster-engine
    resourceVersion: "36565269"
    uid: 23e42c1a-54ed-4133-8bf3-f6f86000528b
  spec:
    ingress:
    - from:
      - podSelector: {}
    podSelector: {}
    policyTypes:
    - Ingress
  status: {}
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    creationTimestamp: "2023-10-04T03:58:05Z"
    generation: 1
    name: deny-by-default
    namespace: multicluster-engine
    resourceVersion: "36565266"
    uid: 3e70aaec-bfef-4dc9-a970-b5de1c89575c
  spec:
    podSelector: {}
    policyTypes:
    - Ingress
  status: {}
~~~


1.4 namespace open-cluster-management-agent-addon:

~~~
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    creationTimestamp: "2023-10-02T09:43:59Z"
    generation: 1
    name: allow-from-kube-apiserver-operator
    namespace: open-cluster-management-agent-addon
    resourceVersion: "33445552"
    uid: 67d88164-7899-47dc-9654-ba4647b47505
  spec:
    ingress:
    - from:
      - namespaceSelector:
          matchLabels:
            kubernetes.io/metadata.name: openshift-kube-apiserver-operator
        podSelector:
          matchLabels:
            app: kube-apiserver-operator
    podSelector: {}
    policyTypes:
    - Ingress
  status: {}
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    creationTimestamp: "2023-10-04T03:55:30Z"
    generation: 1
    name: allow-from-multicluster-engine-components
    namespace: open-cluster-management-agent-addon
    resourceVersion: "36562074"
    uid: 12fb1f9a-e14a-4c37-9b73-915134bdbcb5
  spec:
    ingress:
    - from:
      - namespaceSelector:
          matchLabels:
            kubernetes.io/metadata.name: openshift-dns
    podSelector: {}
    policyTypes:
    - Ingress
  status: {}
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    creationTimestamp: "2023-10-02T09:43:59Z"
    generation: 1
    name: allow-from-openshift-ingress
    namespace: open-cluster-management-agent-addon
    resourceVersion: "33445551"
    uid: 026a342b-03fe-4a5a-bdb9-84e1f86b6e43
  spec:
    ingress:
    - from:
      - namespaceSelector:
          matchLabels:
            network.openshift.io/policy-group: ingress
    podSelector: {}
    policyTypes:
    - Ingress
  status: {}
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    creationTimestamp: "2023-10-02T09:43:59Z"
    generation: 1
    name: allow-from-openshift-monitoring
    namespace: open-cluster-management-agent-addon
    resourceVersion: "33445548"
    uid: ae9d8577-964d-4f20-847b-a0091db86575
  spec:
    ingress:
    - from:
      - namespaceSelector:
          matchLabels:
            network.openshift.io/policy-group: monitoring
    podSelector: {}
    policyTypes:
    - Ingress
  status: {}
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    creationTimestamp: "2023-10-02T09:43:59Z"
    generation: 1
    name: allow-from-same-namespace
    namespace: open-cluster-management-agent-addon
    resourceVersion: "33445546"
    uid: 133c2274-d970-4c0b-a187-32a093b795af
  spec:
    ingress:
    - from:
      - podSelector: {}
    podSelector: {}
    policyTypes:
    - Ingress
  status: {}
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    creationTimestamp: "2023-10-02T09:43:59Z"
    generation: 1
    name: deny-by-default
    namespace: open-cluster-management-agent-addon
    resourceVersion: "33445545"
    uid: 1dc8fb77-3594-4ddd-b8db-06e792a79af4
  spec:
    podSelector: {}
    policyTypes:
    - Ingress
  status: {}
~~~


1.5 namespace open-cluster-management-agent:

~~~
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    creationTimestamp: "2023-10-02T09:43:49Z"
    generation: 1
    name: allow-from-kube-apiserver-operator
    namespace: open-cluster-management-agent
    resourceVersion: "33445359"
    uid: c3f5d1cb-3c28-46e1-94fe-634c7b7b83a6
  spec:
    ingress:
    - from:
      - namespaceSelector:
          matchLabels:
            kubernetes.io/metadata.name: openshift-kube-apiserver-operator
        podSelector:
          matchLabels:
            app: kube-apiserver-operator
    podSelector: {}
    policyTypes:
    - Ingress
  status: {}
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    creationTimestamp: "2023-10-04T03:55:57Z"
    generation: 1
    name: allow-from-multicluster-engine-components
    namespace: open-cluster-management-agent
    resourceVersion: "36562577"
    uid: 6d42c282-5c96-42fc-be1f-ec39137595c2
  spec:
    ingress:
    - from:
      - namespaceSelector:
          matchLabels:
            kubernetes.io/metadata.name: open-cluster-management-agent
      - namespaceSelector:
          matchLabels:
            kubernetes.io/metadata.name: open-cluster-management-agent-addon
      - namespaceSelector:
          matchLabels:
            kubernetes.io/metadata.name: openshift-dns
    podSelector: {}
    policyTypes:
    - Ingress
  status: {}
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    creationTimestamp: "2023-10-02T09:43:49Z"
    generation: 1
    name: allow-from-openshift-ingress
    namespace: open-cluster-management-agent
    resourceVersion: "33445358"
    uid: 85673f7f-39f3-41f6-ae0c-72387aaaa6c6
  spec:
    ingress:
    - from:
      - namespaceSelector:
          matchLabels:
            network.openshift.io/policy-group: ingress
    podSelector: {}
    policyTypes:
    - Ingress
  status: {}
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    creationTimestamp: "2023-10-02T09:43:49Z"
    generation: 1
    name: allow-from-openshift-monitoring
    namespace: open-cluster-management-agent
    resourceVersion: "33445357"
    uid: 0dd257e6-0b00-4d32-912f-41ca41be76cb
  spec:
    ingress:
    - from:
      - namespaceSelector:
          matchLabels:
            network.openshift.io/policy-group: monitoring
    podSelector: {}
    policyTypes:
    - Ingress
  status: {}
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    creationTimestamp: "2023-10-02T09:43:49Z"
    generation: 1
    name: allow-from-same-namespace
    namespace: open-cluster-management-agent
    resourceVersion: "33445356"
    uid: caf34109-a64d-4d01-b612-7dd9848077dc
  spec:
    ingress:
    - from:
      - podSelector: {}
    podSelector: {}
    policyTypes:
    - Ingress
  status: {}
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    creationTimestamp: "2023-10-02T09:43:49Z"
    generation: 1
    name: deny-by-default
    namespace: open-cluster-management-agent
    resourceVersion: "33445354"
    uid: b004d104-d00e-43db-808a-d8083e31ed0a
  spec:
    podSelector: {}
    policyTypes:
    - Ingress
  status: {}
~~~


1.6 namespace open-cluster-management-global-set:

~~~
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    creationTimestamp: "2023-10-02T09:43:39Z"
    generation: 1
    name: allow-from-kube-apiserver-operator
    namespace: open-cluster-management-global-set
    resourceVersion: "33445135"
    uid: 0081c61c-713a-43c1-add2-adbef765836d
  spec:
    ingress:
    - from:
      - namespaceSelector:
          matchLabels:
            kubernetes.io/metadata.name: openshift-kube-apiserver-operator
        podSelector:
          matchLabels:
            app: kube-apiserver-operator
    podSelector: {}
    policyTypes:
    - Ingress
  status: {}
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    creationTimestamp: "2023-10-02T09:43:39Z"
    generation: 1
    name: allow-from-openshift-ingress
    namespace: open-cluster-management-global-set
    resourceVersion: "33445134"
    uid: 54df6902-efe3-48fe-ad3e-4ffef77b8a12
  spec:
    ingress:
    - from:
      - namespaceSelector:
          matchLabels:
            network.openshift.io/policy-group: ingress
    podSelector: {}
    policyTypes:
    - Ingress
  status: {}
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    creationTimestamp: "2023-10-02T09:43:39Z"
    generation: 1
    name: allow-from-openshift-monitoring
    namespace: open-cluster-management-global-set
    resourceVersion: "33445133"
    uid: 570294b3-a934-4aea-83e2-b43a5d6f952b
  spec:
    ingress:
    - from:
      - namespaceSelector:
          matchLabels:
            network.openshift.io/policy-group: monitoring
    podSelector: {}
    policyTypes:
    - Ingress
  status: {}
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    creationTimestamp: "2023-10-02T09:43:39Z"
    generation: 1
    name: allow-from-same-namespace
    namespace: open-cluster-management-global-set
    resourceVersion: "33445132"
    uid: 46a8c095-2728-4e2a-8b31-bbe1c62e6900
  spec:
    ingress:
    - from:
      - podSelector: {}
    podSelector: {}
    policyTypes:
    - Ingress
  status: {}
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    creationTimestamp: "2023-10-02T09:43:39Z"
    generation: 1
    name: deny-by-default
    namespace: open-cluster-management-global-set
    resourceVersion: "33445131"
    uid: d53b330f-61f5-48e0-b3d5-79823157ac2d
  spec:
    podSelector: {}
    policyTypes:
    - Ingress
  status: {}
~~~


1.7 namespace open-clutser-management-hub:

~~~
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    creationTimestamp: "2023-10-03T03:08:13Z"
    generation: 1
    name: allow-from-kube-apiserver-operator
    namespace: open-cluster-management-hub
    resourceVersion: "34717756"
    uid: c5e27e6c-db4d-4fab-bd35-e27a5d26fb91
  spec:
    ingress:
    - from:
      - namespaceSelector:
          matchLabels:
            kubernetes.io/metadata.name: openshift-kube-apiserver-operator
        podSelector:
          matchLabels:
            app: kube-apiserver-operator
    podSelector: {}
    policyTypes:
    - Ingress
  status: {}
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    creationTimestamp: "2023-10-03T03:08:13Z"
    generation: 1
    name: allow-from-multicluster-engine
    namespace: open-cluster-management-hub
    resourceVersion: "34717757"
    uid: 585486e6-388d-4819-b50d-06cb9506c60a
  spec:
    ingress:
    - from:
      - namespaceSelector:
          matchLabels:
            kubernetes.io/metadata.name: open-cluster-management
    podSelector: {}
    policyTypes:
    - Ingress
  status: {}
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    creationTimestamp: "2023-10-04T03:55:30Z"
    generation: 1
    name: allow-from-multicluster-engine-components
    namespace: open-cluster-management-hub
    resourceVersion: "36562076"
    uid: 3514dc66-93cf-4832-87bc-10fe7241620f
  spec:
    ingress:
    - from:
      - namespaceSelector:
          matchLabels:
            kubernetes.io/metadata.name: openshift-kube-apiserver
      - namespaceSelector:
          matchLabels:
            kubernetes.io/metadata.name: openshift-kube-apiserver-operator
    podSelector: {}
    policyTypes:
    - Ingress
  status: {}
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    creationTimestamp: "2023-10-03T03:08:13Z"
    generation: 1
    name: allow-from-openshift-ingress
    namespace: open-cluster-management-hub
    resourceVersion: "34717755"
    uid: 62de3802-55d5-4024-811a-5a7955b472a6
  spec:
    ingress:
    - from:
      - namespaceSelector:
          matchLabels:
            network.openshift.io/policy-group: ingress
    podSelector: {}
    policyTypes:
    - Ingress
  status: {}
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    creationTimestamp: "2023-10-03T03:08:13Z"
    generation: 1
    name: allow-from-openshift-monitoring
    namespace: open-cluster-management-hub
    resourceVersion: "34717753"
    uid: 445452e3-1b39-45f0-878c-12be164368b8
  spec:
    ingress:
    - from:
      - namespaceSelector:
          matchLabels:
            network.openshift.io/policy-group: monitoring
    podSelector: {}
    policyTypes:
    - Ingress
  status: {}
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    creationTimestamp: "2023-10-03T03:08:12Z"
    generation: 1
    name: allow-from-same-namespace
    namespace: open-cluster-management-hub
    resourceVersion: "34717752"
    uid: 5dd63de6-8512-4c5d-acdf-822692e2b3b5
  spec:
    ingress:
    - from:
      - podSelector: {}
    podSelector: {}
    policyTypes:
    - Ingress
  status: {}
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    creationTimestamp: "2023-10-03T03:08:12Z"
    generation: 1
    name: deny-by-default
    namespace: open-cluster-management-hub
    resourceVersion: "34717751"
    uid: a108ad42-3ff8-42de-9e4c-c69dd7bbbc73
  spec:
    podSelector: {}
    policyTypes:
    - Ingress
  status: {}
~~~


1.8 namespace open-cluster-management:

~~~
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    creationTimestamp: "2023-10-04T03:36:33Z"
    generation: 1
    name: allow-from-kube-apiserver-operator
    namespace: open-cluster-management
    resourceVersion: "36538656"
    uid: 2812a29a-ba56-4efb-a949-841779a17542
  spec:
    ingress:
    - from:
      - namespaceSelector:
          matchLabels:
            kubernetes.io/metadata.name: openshift-kube-apiserver-operator
        podSelector:
          matchLabels:
            app: kube-apiserver-operator
    podSelector: {}
    policyTypes:
    - Ingress
  status: {}
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    creationTimestamp: "2023-10-04T03:35:16Z"
    generation: 1
    name: allow-from-multicluster-engine-components
    namespace: open-cluster-management
    resourceVersion: "36537082"
    uid: e1410f73-a2a9-48e5-af66-f75faca321a1
  spec:
    ingress:
    - from:
      - namespaceSelector:
          matchLabels:
            kubernetes.io/metadata.name: multicluster-engine
      - namespaceSelector:
          matchLabels:
            kubernetes.io/metadata.name: open-cluster-management
      - namespaceSelector:
          matchLabels:
            kubernetes.io/metadata.name: open-cluster-management-hub
      - namespaceSelector:
          matchLabels:
            kubernetes.io/metadata.name: open-cluster-management-agent
      - namespaceSelector:
          matchLabels:
            kubernetes.io/metadata.name: open-cluster-management-agent-addon
      - namespaceSelector:
          matchLabels:
            kubernetes.io/metadata.name: openshift-console
      - namespaceSelector:
          matchLabels:
            kubernetes.io/metadata.name: openshift-dns
      - namespaceSelector:
          matchLabels:
            kubernetes.io/metadata.name: openshift-kube-apiserver
      - namespaceSelector:
          matchLabels:
            kubernetes.io/metadata.name: openshift-kube-apiserver-operator
    podSelector: {}
    policyTypes:
    - Ingress
  status: {}
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    creationTimestamp: "2023-10-04T03:36:33Z"
    generation: 1
    name: allow-from-openshift-ingress
    namespace: open-cluster-management
    resourceVersion: "36538655"
    uid: de047ccd-984b-4638-b5f9-01ed52d68d77
  spec:
    ingress:
    - from:
      - namespaceSelector:
          matchLabels:
            network.openshift.io/policy-group: ingress
    podSelector: {}
    policyTypes:
    - Ingress
  status: {}
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    creationTimestamp: "2023-10-04T03:36:33Z"
    generation: 1
    name: allow-from-openshift-monitoring
    namespace: open-cluster-management
    resourceVersion: "36538654"
    uid: ea863d82-347d-468b-bd7e-153cffbd05ab
  spec:
    ingress:
    - from:
      - namespaceSelector:
          matchLabels:
            network.openshift.io/policy-group: monitoring
    podSelector: {}
    policyTypes:
    - Ingress
  status: {}
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    creationTimestamp: "2023-10-04T03:36:33Z"
    generation: 1
    name: allow-from-same-namespace
    namespace: open-cluster-management
    resourceVersion: "36538653"
    uid: 80e06bce-2e69-4c99-a7a6-34401493b684
  spec:
    ingress:
    - from:
      - podSelector: {}
    podSelector: {}
    policyTypes:
    - Ingress
  status: {}
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    creationTimestamp: "2023-10-04T03:36:33Z"
    generation: 1
    name: deny-by-default
    namespace: open-cluster-management
    resourceVersion: "36538652"
    uid: 189c5279-e7f6-4fcb-9f37-202cd6db3c62
  spec:
    podSelector: {}
    policyTypes:
    - Ingress
  status: {}
~~~



