apiVersion: gateway.networking.k8s.io/v1
kind: HTTPRoute
metadata:
  annotations:
    serving.kserve.io/inference-pool-migrated: v1
  creationTimestamp: "2026-07-28T17:30:44Z"
  generation: 2
  labels:
    app.kubernetes.io/component: llminferenceservice-router
    app.kubernetes.io/name: auth-invalid-token-test
    app.kubernetes.io/part-of: llminferenceservice
  managedFields:
  - apiVersion: gateway.networking.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:metadata:
        f:annotations:
          .: {}
          f:serving.kserve.io/inference-pool-migrated: {}
        f:labels:
          .: {}
          f:app.kubernetes.io/component: {}
          f:app.kubernetes.io/name: {}
          f:app.kubernetes.io/part-of: {}
        f:ownerReferences:
          .: {}
          k:{"uid":"17743c01-2f33-4f3c-a79a-0d10fdc387c3"}: {}
      f:spec: {}
    manager: manager
    operation: Update
    time: "2026-07-28T17:31:03Z"
  - apiVersion: gateway.networking.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:parents: {}
    manager: manager
    operation: Update
    subresource: status
    time: "2026-07-28T17:31:04Z"
  - apiVersion: gateway.networking.k8s.io/v1beta1
    fieldsType: FieldsV1
    fieldsV1:
      f:status: {}
    manager: pilot-discovery
    operation: Update
    subresource: status
    time: "2026-07-28T17:31:04Z"
  name: auth-invalid-token-test-kserve-route
  namespace: e2e-test-llm-auth-invalid-token-rejected-e7cfa2c6
  ownerReferences:
  - apiVersion: serving.kserve.io/v1alpha2
    blockOwnerDeletion: true
    controller: true
    kind: LLMInferenceService
    name: auth-invalid-token-test
    uid: 17743c01-2f33-4f3c-a79a-0d10fdc387c3
  resourceVersion: "29757"
  uid: 5edc1249-d646-4391-8fa8-80293fb5a50b
spec:
  parentRefs:
  - group: gateway.networking.k8s.io
    kind: Gateway
    name: openshift-ai-inference
    namespace: openshift-ingress
  rules:
  - backendRefs:
    - group: inference.networking.k8s.io
      kind: InferencePool
      name: auth-invalid-token-test-inference-pool
      port: 8000
      weight: 1
    filters:
    - type: URLRewrite
      urlRewrite:
        path:
          replacePrefixMatch: /v1/completions
          type: ReplacePrefixMatch
    matches:
    - path:
        type: PathPrefix
        value: /e2e-test-llm-auth-invalid-token-rejected-e7cfa2c6/auth-invalid-token-test/v1/completions
    timeouts:
      backendRequest: 0s
      request: 0s
  - backendRefs:
    - group: inference.networking.k8s.io
      kind: InferencePool
      name: auth-invalid-token-test-inference-pool
      port: 8000
      weight: 1
    filters:
    - type: URLRewrite
      urlRewrite:
        path:
          replacePrefixMatch: /v1/chat/completions
          type: ReplacePrefixMatch
    matches:
    - path:
        type: PathPrefix
        value: /e2e-test-llm-auth-invalid-token-rejected-e7cfa2c6/auth-invalid-token-test/v1/chat/completions
    timeouts:
      backendRequest: 0s
      request: 0s
  - backendRefs:
    - group: inference.networking.k8s.io
      kind: InferencePool
      name: auth-invalid-token-test-inference-pool
      port: 8000
      weight: 1
    filters:
    - type: URLRewrite
      urlRewrite:
        path:
          replacePrefixMatch: /v1/responses
          type: ReplacePrefixMatch
    matches:
    - path:
        type: PathPrefix
        value: /e2e-test-llm-auth-invalid-token-rejected-e7cfa2c6/auth-invalid-token-test/v1/responses
    timeouts:
      backendRequest: 0s
      request: 0s
  - backendRefs:
    - group: inference.networking.k8s.io
      kind: InferencePool
      name: auth-invalid-token-test-inference-pool
      port: 8000
      weight: 1
    filters:
    - type: URLRewrite
      urlRewrite:
        path:
          replacePrefixMatch: /v1/messages
          type: ReplacePrefixMatch
    matches:
    - path:
        type: PathPrefix
        value: /e2e-test-llm-auth-invalid-token-rejected-e7cfa2c6/auth-invalid-token-test/v1/messages
    timeouts:
      backendRequest: 0s
      request: 0s
  - backendRefs:
    - group: inference.networking.k8s.io
      kind: InferencePool
      name: auth-invalid-token-test-inference-pool
      port: 8000
      weight: 1
    matches:
    - headers:
      - name: X-Gateway-Model-Name
        type: Exact
        value: publishers/e2e-test-llm-auth-invalid-token-rejected-e7cfa2c6/models/facebook/opt-125m
      path:
        type: Exact
        value: /v1/completions
    - headers:
      - name: X-Gateway-Model-Name
        type: Exact
        value: publishers/e2e-test-llm-auth-invalid-token-rejected-e7cfa2c6/models/facebook/opt-125m
      path:
        type: Exact
        value: /v1/completions/
    - headers:
      - name: X-Gateway-Model-Name
        type: Exact
        value: publishers/e2e-test-llm-auth-invalid-token-rejected-e7cfa2c6/models/facebook/opt-125m
      path:
        type: Exact
        value: /v1/chat/completions
    - headers:
      - name: X-Gateway-Model-Name
        type: Exact
        value: publishers/e2e-test-llm-auth-invalid-token-rejected-e7cfa2c6/models/facebook/opt-125m
      path:
        type: Exact
        value: /v1/chat/completions/
    - headers:
      - name: X-Gateway-Model-Name
        type: Exact
        value: publishers/e2e-test-llm-auth-invalid-token-rejected-e7cfa2c6/models/facebook/opt-125m
      path:
        type: Exact
        value: /v1/responses
    - headers:
      - name: X-Gateway-Model-Name
        type: Exact
        value: publishers/e2e-test-llm-auth-invalid-token-rejected-e7cfa2c6/models/facebook/opt-125m
      path:
        type: Exact
        value: /v1/responses/
    - headers:
      - name: X-Gateway-Model-Name
        type: Exact
        value: publishers/e2e-test-llm-auth-invalid-token-rejected-e7cfa2c6/models/facebook/opt-125m
      path:
        type: Exact
        value: /v1/messages
    - headers:
      - name: X-Gateway-Model-Name
        type: Exact
        value: publishers/e2e-test-llm-auth-invalid-token-rejected-e7cfa2c6/models/facebook/opt-125m
      path:
        type: Exact
        value: /v1/messages/
    timeouts:
      backendRequest: 0s
      request: 0s
  - backendRefs:
    - group: inference.networking.k8s.io
      kind: InferencePool
      name: auth-invalid-token-test-inference-pool
      port: 8000
      weight: 1
    filters:
    - type: URLRewrite
      urlRewrite:
        path:
          replacePrefixMatch: /v1/completions
          type: ReplacePrefixMatch
    matches:
    - path:
        type: PathPrefix
        value: /publishers/e2e-test-llm-auth-invalid-token-rejected-e7cfa2c6/models/facebook/opt-125m/v1/completions
    timeouts:
      backendRequest: 0s
      request: 0s
  - backendRefs:
    - group: inference.networking.k8s.io
      kind: InferencePool
      name: auth-invalid-token-test-inference-pool
      port: 8000
      weight: 1
    filters:
    - type: URLRewrite
      urlRewrite:
        path:
          replacePrefixMatch: /v1/chat/completions
          type: ReplacePrefixMatch
    matches:
    - path:
        type: PathPrefix
        value: /publishers/e2e-test-llm-auth-invalid-token-rejected-e7cfa2c6/models/facebook/opt-125m/v1/chat/completions
    timeouts:
      backendRequest: 0s
      request: 0s
  - backendRefs:
    - group: inference.networking.k8s.io
      kind: InferencePool
      name: auth-invalid-token-test-inference-pool
      port: 8000
      weight: 1
    filters:
    - type: URLRewrite
      urlRewrite:
        path:
          replacePrefixMatch: /v1/responses
          type: ReplacePrefixMatch
    matches:
    - path:
        type: PathPrefix
        value: /publishers/e2e-test-llm-auth-invalid-token-rejected-e7cfa2c6/models/facebook/opt-125m/v1/responses
    timeouts:
      backendRequest: 0s
      request: 0s
  - backendRefs:
    - group: inference.networking.k8s.io
      kind: InferencePool
      name: auth-invalid-token-test-inference-pool
      port: 8000
      weight: 1
    filters:
    - type: URLRewrite
      urlRewrite:
        path:
          replacePrefixMatch: /v1/messages
          type: ReplacePrefixMatch
    matches:
    - path:
        type: PathPrefix
        value: /publishers/e2e-test-llm-auth-invalid-token-rejected-e7cfa2c6/models/facebook/opt-125m/v1/messages
    timeouts:
      backendRequest: 0s
      request: 0s
  - backendRefs:
    - group: ""
      kind: Service
      name: auth-invalid-token-test-kserve-workload-svc
      port: 8000
      weight: 1
    filters:
    - type: URLRewrite
      urlRewrite:
        path:
          replacePrefixMatch: /
          type: ReplacePrefixMatch
    matches:
    - path:
        type: PathPrefix
        value: /publishers/e2e-test-llm-auth-invalid-token-rejected-e7cfa2c6/models/facebook/opt-125m
    timeouts:
      backendRequest: 0s
      request: 0s
  - backendRefs:
    - group: ""
      kind: Service
      name: auth-invalid-token-test-kserve-workload-svc
      port: 8000
      weight: 1
    filters:
    - type: URLRewrite
      urlRewrite:
        path:
          replacePrefixMatch: /
          type: ReplacePrefixMatch
    matches:
    - path:
        type: PathPrefix
        value: /e2e-test-llm-auth-invalid-token-rejected-e7cfa2c6/auth-invalid-token-test
    timeouts:
      backendRequest: 0s
      request: 0s
  - backendRefs:
    - group: ""
      kind: Service
      name: auth-invalid-token-test-kserve-workload-svc
      port: 8000
      weight: 1
    matches:
    - headers:
      - name: X-Gateway-Model-Name
        type: Exact
        value: publishers/e2e-test-llm-auth-invalid-token-rejected-e7cfa2c6/models/facebook/opt-125m
      path:
        type: PathPrefix
        value: /
    timeouts:
      backendRequest: 0s
      request: 0s
status:
  parents:
  - conditions:
    - lastTransitionTime: "2026-07-28T17:30:44Z"
      message: Route was valid
      observedGeneration: 2
      reason: Accepted
      status: "True"
      type: Accepted
    - lastTransitionTime: "2026-07-28T17:31:04Z"
      message: All references resolved
      observedGeneration: 2
      reason: ResolvedRefs
      status: "True"
      type: ResolvedRefs
    controllerName: openshift.io/gateway-controller/v1
    parentRef:
      group: gateway.networking.k8s.io
      kind: Gateway
      name: openshift-ai-inference
      namespace: openshift-ingress
  - conditions:
    - lastTransitionTime: "2026-07-28T17:30:44Z"
      message: Object affected by AuthPolicy [openshift-ingress/openshift-ai-inference-authn]
      observedGeneration: 2
      reason: Accepted
      status: "True"
      type: kuadrant.io/AuthPolicyAffected
    controllerName: kuadrant.io/policy-controller
    parentRef:
      group: gateway.networking.k8s.io
      kind: Gateway
      name: openshift-ai-inference
      namespace: openshift-ingress