apiVersion: v1
items:
- apiVersion: kuadrant.io/v1alpha1
  kind: TokenRateLimitPolicy
  metadata:
    annotations:
      maas.opendatahub.io/subscriptions: models-as-a-service/simulator-subscription
    creationTimestamp: "2026-10-30T16:06:49Z"
    generation: 3
    labels:
      app.kubernetes.io/component: token-rate-limit-policy
      app.kubernetes.io/managed-by: maas-controller
      app.kubernetes.io/part-of: maas-subscription
      maas.opendatahub.io/gateway-name: maas-default-gateway
      maas.opendatahub.io/gateway-namespace: openshift-ingress
      maas.opendatahub.io/model: facebook-opt-125m-simulated
      maas.opendatahub.io/model-namespace: llm
    name: maas-trlp-facebook-opt-125m-simulated
    namespace: llm
    ownerReferences:
    - apiVersion: gateway.networking.k8s.io/v1
      blockOwnerDeletion: true
      controller: true
      kind: HTTPRoute
      name: facebook-opt-125m-simulated-kserve-route
      uid: 3f42d9a7-6e6b-44e2-87b3-5cea5a0d955c
    resourceVersion: "63659"
    uid: b322cc3a-33a8-46b5-aff9-567a4957335f
  spec:
    limits:
      tokens-100-per-1m:
        counters:
        - expression: auth.identity.selected_subscription_id
        - expression: auth.identity.userid
        rates:
        - limit: 100
          window: 1m
        when:
        - predicate: auth.identity.selected_subscription_id == "3f98c74fda8361a9"
            && !request.path.endsWith("/v1/models")
    targetRef:
      group: gateway.networking.k8s.io
      kind: HTTPRoute
      name: facebook-opt-125m-simulated-kserve-route
  status:
    conditions:
    - lastTransitionTime: "2026-10-30T16:06:51Z"
      message: TokenRateLimitPolicy has been accepted
      reason: Accepted
      status: "True"
      type: Accepted
    - lastTransitionTime: "2026-10-30T16:12:47Z"
      message: TokenRateLimitPolicy has been successfully enforced
      reason: Enforced
      status: "True"
      type: Enforced
    observedGeneration: 3
- apiVersion: kuadrant.io/v1alpha1
  kind: TokenRateLimitPolicy
  metadata:
    annotations:
      maas.opendatahub.io/subscriptions: models-as-a-service/premium-simulator-subscription
    creationTimestamp: "2026-10-30T15:49:28Z"
    generation: 3
    labels:
      app.kubernetes.io/component: token-rate-limit-policy
      app.kubernetes.io/managed-by: maas-controller
      app.kubernetes.io/part-of: maas-subscription
      maas.opendatahub.io/gateway-name: maas-default-gateway
      maas.opendatahub.io/gateway-namespace: openshift-ingress
      maas.opendatahub.io/model: premium-simulated-simulated-premium
      maas.opendatahub.io/model-namespace: llm
    name: maas-trlp-premium-simulated-simulated-premium
    namespace: llm
    ownerReferences:
    - apiVersion: gateway.networking.k8s.io/v1
      blockOwnerDeletion: true
      controller: true
      kind: HTTPRoute
      name: premium-simulated-simulated-premium-kserve-route
      uid: 5fa90a7e-4c06-4d57-b7dd-4c2329a7ab09
    resourceVersion: "63658"
    uid: 37d1f912-040b-48b2-9128-d88fb4fa4c52
  spec:
    limits:
      tokens-1000-per-1m:
        counters:
        - expression: auth.identity.selected_subscription_id
        - expression: auth.identity.userid
        rates:
        - limit: 1000
          window: 1m
        when:
        - predicate: auth.identity.selected_subscription_id == "793a52e02f7e18bf"
            && !request.path.endsWith("/v1/models")
    targetRef:
      group: gateway.networking.k8s.io
      kind: HTTPRoute
      name: premium-simulated-simulated-premium-kserve-route
  status:
    conditions:
    - lastTransitionTime: "2026-10-30T15:49:30Z"
      message: TokenRateLimitPolicy has been accepted
      reason: Accepted
      status: "True"
      type: Accepted
    - lastTransitionTime: "2026-10-30T16:12:47Z"
      message: TokenRateLimitPolicy has been successfully enforced
      reason: Enforced
      status: "True"
      type: Enforced
    observedGeneration: 3
- apiVersion: kuadrant.io/v1alpha1
  kind: TokenRateLimitPolicy
  metadata:
    creationTimestamp: "2026-10-30T15:48:15Z"
    generation: 1
    labels:
      app.kubernetes.io/component: api
      app.kubernetes.io/managed-by: maas-controller
      app.kubernetes.io/name: maas-api
      app.kubernetes.io/part-of: models-as-a-service
      app.opendatahub.io/modelsasservice: "true"
      maas.opendatahub.io/tenant-name: models-as-a-service
      maas.opendatahub.io/tenant-namespace: models-as-a-service
    name: gateway-default-deny
    namespace: openshift-ingress
    ownerReferences:
    - apiVersion: maas.opendatahub.io/v1alpha1
      blockOwnerDeletion: true
      controller: true
      kind: Config
      name: default
      uid: 1b57b59f-9852-4856-82a3-1940c806121f
    resourceVersion: "20945"
    uid: d0a9b2ce-7ef8-4530-a6a5-1d530b2786f5
  spec:
    defaults:
      limits:
        deny-all-by-default:
          counters:
          - expression: auth.identity.userid
          rates:
          - limit: 0
            window: 1m
          when:
          - predicate: '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")
              && !request.path.startsWith("/v1/subscriptions") && !request.path.startsWith("/v1/api-keys")
              && !(request.path == "/v1/me") && !((request.path == "/v1/conversations"
              || request.path.startsWith("/v1/conversations/")) && request.method
              in ["GET", "POST", "DELETE"]) && !(request.path.startsWith("/v1/responses/")
              && request.method in ["GET", "DELETE"])'
      strategy: atomic
    targetRef:
      group: gateway.networking.k8s.io
      kind: Gateway
      name: maas-default-gateway
  status:
    conditions:
    - lastTransitionTime: "2026-10-30T15:48:16Z"
      message: TokenRateLimitPolicy has been accepted
      reason: Accepted
      status: "True"
      type: Accepted
    - lastTransitionTime: "2026-10-30T15:49:19Z"
      message: 'TokenRateLimitPolicy has encountered some issues: policy rule(s) overridden:
        deny-all-by-default by tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny'
      reason: Unknown
      status: "False"
      type: Enforced
    observedGeneration: 1
kind: List
metadata:
  resourceVersion: ""