apiVersion: extensions.istio.io/v1alpha1
kind: WasmPlugin
metadata:
  creationTimestamp: "2026-06-10T13:29:01Z"
  generation: 7
  labels:
    kuadrant.io/managed: "true"
  managedFields:
  - apiVersion: extensions.istio.io/v1alpha1
    fieldsType: FieldsV1
    fieldsV1:
      f:metadata:
        f:labels:
          .: {}
          f:kuadrant.io/managed: {}
        f:ownerReferences:
          .: {}
          k:{"uid":"d641e659-a3a4-4249-9c7f-0fff166cf309"}: {}
      f:spec:
        .: {}
        f:phase: {}
        f:pluginConfig:
          .: {}
          f:actionSets: {}
          f:services:
            .: {}
            f:auth-service:
              .: {}
              f:endpoint: {}
              f:failureMode: {}
              f:timeout: {}
              f:type: {}
            f:ratelimit-check-service:
              .: {}
              f:endpoint: {}
              f:failureMode: {}
              f:timeout: {}
              f:type: {}
            f:ratelimit-report-service:
              .: {}
              f:endpoint: {}
              f:failureMode: {}
              f:timeout: {}
              f:type: {}
            f:ratelimit-service:
              .: {}
              f:endpoint: {}
              f:failureMode: {}
              f:timeout: {}
              f:type: {}
        f:targetRefs: {}
        f:url: {}
    manager: manager
    operation: Update
    time: "2026-06-10T13:31:17Z"
  name: kuadrant-maas-default-gateway
  namespace: openshift-ingress
  ownerReferences:
  - apiVersion: gateway.networking.k8s.io/v1
    blockOwnerDeletion: true
    controller: true
    kind: Gateway
    name: maas-default-gateway
    uid: d641e659-a3a4-4249-9c7f-0fff166cf309
  resourceVersion: "27135"
  uid: 38ea143d-ecc3-4473-8014-a46b9335d267
spec:
  phase: STATS
  pluginConfig:
    actionSets:
    - actions:
      - scope: 9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a
        service: auth-service
        sources:
        - authpolicy.kuadrant.io:openshift-ingress/gateway-default-auth
      - conditionalData:
        - data:
          - expression:
              key: tokenlimit.deny_all_by_default__6d45535f
              value: "1"
          - expression:
              key: auth.identity.userid
              value: auth.identity.userid
          - expression:
              key: ratelimit.hits_addend
              value: "0"
          predicates:
          - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")'
        scope: llm/e2e-unconfigured-facebook-opt-125m-simulated-kserve-route
        service: ratelimit-check-service
        sources:
        - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny
      - conditionalData:
        - data:
          - expression:
              key: tokenlimit.deny_all_by_default__6d45535f
              value: "1"
          - expression:
              key: auth.identity.userid
              value: auth.identity.userid
          - expression:
              key: ratelimit.hits_addend
              value: responseBodyJSON("/usage/total_tokens")
          predicates:
          - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")'
        scope: llm/e2e-unconfigured-facebook-opt-125m-simulated-kserve-route
        service: ratelimit-report-service
        sources:
        - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny
      name: 11b4ca026022a144a5c52269d3adb4fe038e3f4f62bf2970222e4c7a04b5ca20
      routeRuleConditions:
        hostnames:
        - maas.apps.1d72ec05-6f11-4a19-a7a1-1638e531ad06.prod.konfluxeaas.com
        predicates:
        - request.url_path.startsWith('/llm/e2e-unconfigured-facebook-opt-125m-simulated/v1/chat/completions')
    - actions:
      - scope: 01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5
        service: auth-service
        sources:
        - authpolicy.kuadrant.io:openshift-ingress/gateway-default-auth
      - conditionalData:
        - data:
          - expression:
              key: tokenlimit.deny_all_by_default__6d45535f
              value: "1"
          - expression:
              key: auth.identity.userid
              value: auth.identity.userid
          - expression:
              key: ratelimit.hits_addend
              value: "0"
          predicates:
          - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")'
        scope: llm/e2e-unconfigured-facebook-opt-125m-simulated-kserve-route
        service: ratelimit-check-service
        sources:
        - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny
      - conditionalData:
        - data:
          - expression:
              key: tokenlimit.deny_all_by_default__6d45535f
              value: "1"
          - expression:
              key: auth.identity.userid
              value: auth.identity.userid
          - expression:
              key: ratelimit.hits_addend
              value: responseBodyJSON("/usage/total_tokens")
          predicates:
          - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")'
        scope: llm/e2e-unconfigured-facebook-opt-125m-simulated-kserve-route
        service: ratelimit-report-service
        sources:
        - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny
      name: f1f14e1cc5b3d6c67ec7dcb8f8ecfa325812c2b3af861b95761708d9020a0d17
      routeRuleConditions:
        hostnames:
        - maas.apps.1d72ec05-6f11-4a19-a7a1-1638e531ad06.prod.konfluxeaas.com
        predicates:
        - request.url_path.startsWith('/llm/e2e-unconfigured-facebook-opt-125m-simulated/v1/completions')
    - actions:
      - scope: e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be
        service: auth-service
        sources:
        - authpolicy.kuadrant.io:openshift-ingress/gateway-default-auth
      - conditionalData:
        - data:
          - expression:
              key: tokenlimit.deny_all_by_default__6d45535f
              value: "1"
          - expression:
              key: auth.identity.userid
              value: auth.identity.userid
          - expression:
              key: ratelimit.hits_addend
              value: "0"
          predicates:
          - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")'
        scope: llm/e2e-unconfigured-facebook-opt-125m-simulated-kserve-route
        service: ratelimit-check-service
        sources:
        - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny
      - conditionalData:
        - data:
          - expression:
              key: tokenlimit.deny_all_by_default__6d45535f
              value: "1"
          - expression:
              key: auth.identity.userid
              value: auth.identity.userid
          - expression:
              key: ratelimit.hits_addend
              value: responseBodyJSON("/usage/total_tokens")
          predicates:
          - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")'
        scope: llm/e2e-unconfigured-facebook-opt-125m-simulated-kserve-route
        service: ratelimit-report-service
        sources:
        - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny
      name: de8d9a9760904a0f46f747a364a1ac1c699a401d04e631cd441ceca1564efe68
      routeRuleConditions:
        hostnames:
        - maas.apps.1d72ec05-6f11-4a19-a7a1-1638e531ad06.prod.konfluxeaas.com
        predicates:
        - request.url_path.startsWith('/llm/e2e-unconfigured-facebook-opt-125m-simulated/v1/responses')
    - actions:
      - scope: edcceb5a2e0cf1edde0fc3ed43068ce5b123a6fdc41949959c2c3b7a5a48bf24
        service: auth-service
        sources:
        - authpolicy.kuadrant.io:llm/maas-auth-premium-simulated-simulated-premium
      - conditionalData:
        - data:
          - expression:
              key: tokenlimit.models_as_a_service_premium_simulator_subscription_premium_simulated_simulated_premium_tokens__a2a80825
              value: "1"
          - expression:
              key: auth.identity.userid
              value: auth.identity.userid
          - expression:
              key: ratelimit.hits_addend
              value: "0"
          predicates:
          - auth.identity.selected_subscription_key == "models-as-a-service/premium-simulator-subscription@llm/premium-simulated-simulated-premium"
            && !request.path.endsWith("/v1/models")
        scope: llm/premium-simulated-simulated-premium-kserve-route
        service: ratelimit-check-service
        sources:
        - tokenratelimitpolicy.kuadrant.io:llm/maas-trlp-premium-simulated-simulated-premium
      - conditionalData:
        - data:
          - expression:
              key: tokenlimit.models_as_a_service_premium_simulator_subscription_premium_simulated_simulated_premium_tokens__a2a80825
              value: "1"
          - expression:
              key: auth.identity.userid
              value: auth.identity.userid
          - expression:
              key: ratelimit.hits_addend
              value: responseBodyJSON("/usage/total_tokens")
          predicates:
          - auth.identity.selected_subscription_key == "models-as-a-service/premium-simulator-subscription@llm/premium-simulated-simulated-premium"
            && !request.path.endsWith("/v1/models")
        scope: llm/premium-simulated-simulated-premium-kserve-route
        service: ratelimit-report-service
        sources:
        - tokenratelimitpolicy.kuadrant.io:llm/maas-trlp-premium-simulated-simulated-premium
      name: 66c0bcf11114cb732b8b4e0df0554270adb80db39aa3e816b4100ef06586f63e
      routeRuleConditions:
        hostnames:
        - maas.apps.1d72ec05-6f11-4a19-a7a1-1638e531ad06.prod.konfluxeaas.com
        predicates:
        - request.url_path.startsWith('/llm/premium-simulated-simulated-premium/v1/chat/completions')
    - actions:
      - scope: 80f10756c0e833d16937036ed66f1daf5bef95559ef05a5e852766b97b9bdaef
        service: auth-service
        sources:
        - authpolicy.kuadrant.io:llm/maas-auth-premium-simulated-simulated-premium
      - conditionalData:
        - data:
          - expression:
              key: tokenlimit.models_as_a_service_premium_simulator_subscription_premium_simulated_simulated_premium_tokens__a2a80825
              value: "1"
          - expression:
              key: auth.identity.userid
              value: auth.identity.userid
          - expression:
              key: ratelimit.hits_addend
              value: "0"
          predicates:
          - auth.identity.selected_subscription_key == "models-as-a-service/premium-simulator-subscription@llm/premium-simulated-simulated-premium"
            && !request.path.endsWith("/v1/models")
        scope: llm/premium-simulated-simulated-premium-kserve-route
        service: ratelimit-check-service
        sources:
        - tokenratelimitpolicy.kuadrant.io:llm/maas-trlp-premium-simulated-simulated-premium
      - conditionalData:
        - data:
          - expression:
              key: tokenlimit.models_as_a_service_premium_simulator_subscription_premium_simulated_simulated_premium_tokens__a2a80825
              value: "1"
          - expression:
              key: auth.identity.userid
              value: auth.identity.userid
          - expression:
              key: ratelimit.hits_addend
              value: responseBodyJSON("/usage/total_tokens")
          predicates:
          - auth.identity.selected_subscription_key == "models-as-a-service/premium-simulator-subscription@llm/premium-simulated-simulated-premium"
            && !request.path.endsWith("/v1/models")
        scope: llm/premium-simulated-simulated-premium-kserve-route
        service: ratelimit-report-service
        sources:
        - tokenratelimitpolicy.kuadrant.io:llm/maas-trlp-premium-simulated-simulated-premium
      name: 20150f4ab43599ec36675acc387f3efeb47ce64f2c7e6d4b223ef0c1f7274d93
      routeRuleConditions:
        hostnames:
        - maas.apps.1d72ec05-6f11-4a19-a7a1-1638e531ad06.prod.konfluxeaas.com
        predicates:
        - request.url_path.startsWith('/llm/premium-simulated-simulated-premium/v1/completions')
    - actions:
      - scope: 4dc577fd60594d78a4a8bebe396f4b5a928f41bdc3f95c06d717cf1ddc3158b2
        service: auth-service
        sources:
        - authpolicy.kuadrant.io:llm/maas-auth-premium-simulated-simulated-premium
      - conditionalData:
        - data:
          - expression:
              key: tokenlimit.models_as_a_service_premium_simulator_subscription_premium_simulated_simulated_premium_tokens__a2a80825
              value: "1"
          - expression:
              key: auth.identity.userid
              value: auth.identity.userid
          - expression:
              key: ratelimit.hits_addend
              value: "0"
          predicates:
          - auth.identity.selected_subscription_key == "models-as-a-service/premium-simulator-subscription@llm/premium-simulated-simulated-premium"
            && !request.path.endsWith("/v1/models")
        scope: llm/premium-simulated-simulated-premium-kserve-route
        service: ratelimit-check-service
        sources:
        - tokenratelimitpolicy.kuadrant.io:llm/maas-trlp-premium-simulated-simulated-premium
      - conditionalData:
        - data:
          - expression:
              key: tokenlimit.models_as_a_service_premium_simulator_subscription_premium_simulated_simulated_premium_tokens__a2a80825
              value: "1"
          - expression:
              key: auth.identity.userid
              value: auth.identity.userid
          - expression:
              key: ratelimit.hits_addend
              value: responseBodyJSON("/usage/total_tokens")
          predicates:
          - auth.identity.selected_subscription_key == "models-as-a-service/premium-simulator-subscription@llm/premium-simulated-simulated-premium"
            && !request.path.endsWith("/v1/models")
        scope: llm/premium-simulated-simulated-premium-kserve-route
        service: ratelimit-report-service
        sources:
        - tokenratelimitpolicy.kuadrant.io:llm/maas-trlp-premium-simulated-simulated-premium
      name: c36266b0618bc22ad79a20ced9959f9729d88ec67d80ee85afac97e4b2ba3868
      routeRuleConditions:
        hostnames:
        - maas.apps.1d72ec05-6f11-4a19-a7a1-1638e531ad06.prod.konfluxeaas.com
        predicates:
        - request.url_path.startsWith('/llm/premium-simulated-simulated-premium/v1/responses')
    - actions:
      - scope: 18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76
        service: auth-service
        sources:
        - authpolicy.kuadrant.io:llm/maas-auth-facebook-opt-125m-simulated
      - conditionalData:
        - data:
          - expression:
              key: tokenlimit.models_as_a_service_simulator_subscription_facebook_opt_125m_simulated_tokens__87db8427
              value: "1"
          - expression:
              key: auth.identity.userid
              value: auth.identity.userid
          - expression:
              key: ratelimit.hits_addend
              value: "0"
          predicates:
          - auth.identity.selected_subscription_key == "models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated"
            && !request.path.endsWith("/v1/models")
        scope: llm/facebook-opt-125m-simulated-kserve-route
        service: ratelimit-check-service
        sources:
        - tokenratelimitpolicy.kuadrant.io:llm/maas-trlp-facebook-opt-125m-simulated
      - conditionalData:
        - data:
          - expression:
              key: tokenlimit.models_as_a_service_simulator_subscription_facebook_opt_125m_simulated_tokens__87db8427
              value: "1"
          - expression:
              key: auth.identity.userid
              value: auth.identity.userid
          - expression:
              key: ratelimit.hits_addend
              value: responseBodyJSON("/usage/total_tokens")
          predicates:
          - auth.identity.selected_subscription_key == "models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated"
            && !request.path.endsWith("/v1/models")
        scope: llm/facebook-opt-125m-simulated-kserve-route
        service: ratelimit-report-service
        sources:
        - tokenratelimitpolicy.kuadrant.io:llm/maas-trlp-facebook-opt-125m-simulated
      name: 493ba13630ed27d83a40d2a235dea716f2bda555368d2b16a2c07dd68a5c97d7
      routeRuleConditions:
        hostnames:
        - maas.apps.1d72ec05-6f11-4a19-a7a1-1638e531ad06.prod.konfluxeaas.com
        predicates:
        - request.url_path.startsWith('/llm/facebook-opt-125m-simulated/v1/chat/completions')
    - actions:
      - scope: e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a
        service: auth-service
        sources:
        - authpolicy.kuadrant.io:openshift-ingress/gateway-default-auth
      - conditionalData:
        - data:
          - expression:
              key: tokenlimit.deny_all_by_default__6d45535f
              value: "1"
          - expression:
              key: auth.identity.userid
              value: auth.identity.userid
          - expression:
              key: ratelimit.hits_addend
              value: "0"
          predicates:
          - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")'
        scope: llm/e2e-distinct-2-simulated-kserve-route
        service: ratelimit-check-service
        sources:
        - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny
      - conditionalData:
        - data:
          - expression:
              key: tokenlimit.deny_all_by_default__6d45535f
              value: "1"
          - expression:
              key: auth.identity.userid
              value: auth.identity.userid
          - expression:
              key: ratelimit.hits_addend
              value: responseBodyJSON("/usage/total_tokens")
          predicates:
          - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")'
        scope: llm/e2e-distinct-2-simulated-kserve-route
        service: ratelimit-report-service
        sources:
        - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny
      name: 3bf4e69de6132667a0fa32fddd790e5a55aee360667d415f463377aad44c28db
      routeRuleConditions:
        hostnames:
        - maas.apps.1d72ec05-6f11-4a19-a7a1-1638e531ad06.prod.konfluxeaas.com
        predicates:
        - request.url_path.startsWith('/llm/e2e-distinct-2-simulated/v1/chat/completions')
    - actions:
      - scope: 9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5
        service: auth-service
        sources:
        - authpolicy.kuadrant.io:openshift-ingress/gateway-default-auth
      - conditionalData:
        - data:
          - expression:
              key: tokenlimit.deny_all_by_default__6d45535f
              value: "1"
          - expression:
              key: auth.identity.userid
              value: auth.identity.userid
          - expression:
              key: ratelimit.hits_addend
              value: "0"
          predicates:
          - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")'
        scope: llm/e2e-unconfigured-facebook-opt-125m-simulated-kserve-route
        service: ratelimit-check-service
        sources:
        - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny
      - conditionalData:
        - data:
          - expression:
              key: tokenlimit.deny_all_by_default__6d45535f
              value: "1"
          - expression:
              key: auth.identity.userid
              value: auth.identity.userid
          - expression:
              key: ratelimit.hits_addend
              value: responseBodyJSON("/usage/total_tokens")
          predicates:
          - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")'
        scope: llm/e2e-unconfigured-facebook-opt-125m-simulated-kserve-route
        service: ratelimit-report-service
        sources:
        - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny
      name: 3ec48ec405e9f3e1984ee66132cb7b967425f6d605c1b14648cdd96f17cb4c2e
      routeRuleConditions:
        hostnames:
        - maas.apps.1d72ec05-6f11-4a19-a7a1-1638e531ad06.prod.konfluxeaas.com
        predicates:
        - request.url_path.startsWith('/llm/e2e-unconfigured-facebook-opt-125m-simulated')
    - actions:
      - scope: 319a353672fc7601c875fa3f8b807adf60b64f093f022b2a1c3dfef3ac8cd4f4
        service: auth-service
        sources:
        - authpolicy.kuadrant.io:openshift-ingress/gateway-default-auth
      - conditionalData:
        - data:
          - expression:
              key: tokenlimit.deny_all_by_default__6d45535f
              value: "1"
          - expression:
              key: auth.identity.userid
              value: auth.identity.userid
          - expression:
              key: ratelimit.hits_addend
              value: "0"
          predicates:
          - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")'
        scope: llm/e2e-trlp-test-simulated-kserve-route
        service: ratelimit-check-service
        sources:
        - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny
      - conditionalData:
        - data:
          - expression:
              key: tokenlimit.deny_all_by_default__6d45535f
              value: "1"
          - expression:
              key: auth.identity.userid
              value: auth.identity.userid
          - expression:
              key: ratelimit.hits_addend
              value: responseBodyJSON("/usage/total_tokens")
          predicates:
          - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")'
        scope: llm/e2e-trlp-test-simulated-kserve-route
        service: ratelimit-report-service
        sources:
        - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny
      name: e9d4265c93a6019fe3ecba7ed546eda58a2b1057ef4214c5e62c1c5b5c0b5ea6
      routeRuleConditions:
        hostnames:
        - maas.apps.1d72ec05-6f11-4a19-a7a1-1638e531ad06.prod.konfluxeaas.com
        predicates:
        - request.url_path.startsWith('/llm/e2e-trlp-test-simulated/v1/chat/completions')
    - actions:
      - scope: 3dc75fc8307b952a3e873400cf417e90f2861e8a225abec4b22708deb7901db7
        service: auth-service
        sources:
        - authpolicy.kuadrant.io:openshift-ingress/gateway-default-auth
      - conditionalData:
        - data:
          - expression:
              key: tokenlimit.deny_all_by_default__6d45535f
              value: "1"
          - expression:
              key: auth.identity.userid
              value: auth.identity.userid
          - expression:
              key: ratelimit.hits_addend
              value: "0"
          predicates:
          - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")'
        scope: llm/e2e-distinct-simulated-kserve-route
        service: ratelimit-check-service
        sources:
        - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny
      - conditionalData:
        - data:
          - expression:
              key: tokenlimit.deny_all_by_default__6d45535f
              value: "1"
          - expression:
              key: auth.identity.userid
              value: auth.identity.userid
          - expression:
              key: ratelimit.hits_addend
              value: responseBodyJSON("/usage/total_tokens")
          predicates:
          - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")'
        scope: llm/e2e-distinct-simulated-kserve-route
        service: ratelimit-report-service
        sources:
        - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny
      name: 831750d3e3c368b7d14c64fbe020eb32233da330b81d9fea9fa6a8911f3461d1
      routeRuleConditions:
        hostnames:
        - maas.apps.1d72ec05-6f11-4a19-a7a1-1638e531ad06.prod.konfluxeaas.com
        predicates:
        - request.url_path.startsWith('/llm/e2e-distinct-simulated/v1/chat/completions')
    - actions:
      - scope: cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a
        service: auth-service
        sources:
        - authpolicy.kuadrant.io:llm/maas-auth-facebook-opt-125m-simulated
      - conditionalData:
        - data:
          - expression:
              key: tokenlimit.models_as_a_service_simulator_subscription_facebook_opt_125m_simulated_tokens__87db8427
              value: "1"
          - expression:
              key: auth.identity.userid
              value: auth.identity.userid
          - expression:
              key: ratelimit.hits_addend
              value: "0"
          predicates:
          - auth.identity.selected_subscription_key == "models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated"
            && !request.path.endsWith("/v1/models")
        scope: llm/facebook-opt-125m-simulated-kserve-route
        service: ratelimit-check-service
        sources:
        - tokenratelimitpolicy.kuadrant.io:llm/maas-trlp-facebook-opt-125m-simulated
      - conditionalData:
        - data:
          - expression:
              key: tokenlimit.models_as_a_service_simulator_subscription_facebook_opt_125m_simulated_tokens__87db8427
              value: "1"
          - expression:
              key: auth.identity.userid
              value: auth.identity.userid
          - expression:
              key: ratelimit.hits_addend
              value: responseBodyJSON("/usage/total_tokens")
          predicates:
          - auth.identity.selected_subscription_key == "models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated"
            && !request.path.endsWith("/v1/models")
        scope: llm/facebook-opt-125m-simulated-kserve-route
        service: ratelimit-report-service
        sources:
        - tokenratelimitpolicy.kuadrant.io:llm/maas-trlp-facebook-opt-125m-simulated
      name: 371e24ce446619a46ca192caa76c356a5ba2acc3f354f7f5bef313723bf9cd33
      routeRuleConditions:
        hostnames:
        - maas.apps.1d72ec05-6f11-4a19-a7a1-1638e531ad06.prod.konfluxeaas.com
        predicates:
        - request.url_path.startsWith('/llm/facebook-opt-125m-simulated/v1/completions')
    - actions:
      - scope: 311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418
        service: auth-service
        sources:
        - authpolicy.kuadrant.io:llm/maas-auth-facebook-opt-125m-simulated
      - conditionalData:
        - data:
          - expression:
              key: tokenlimit.models_as_a_service_simulator_subscription_facebook_opt_125m_simulated_tokens__87db8427
              value: "1"
          - expression:
              key: auth.identity.userid
              value: auth.identity.userid
          - expression:
              key: ratelimit.hits_addend
              value: "0"
          predicates:
          - auth.identity.selected_subscription_key == "models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated"
            && !request.path.endsWith("/v1/models")
        scope: llm/facebook-opt-125m-simulated-kserve-route
        service: ratelimit-check-service
        sources:
        - tokenratelimitpolicy.kuadrant.io:llm/maas-trlp-facebook-opt-125m-simulated
      - conditionalData:
        - data:
          - expression:
              key: tokenlimit.models_as_a_service_simulator_subscription_facebook_opt_125m_simulated_tokens__87db8427
              value: "1"
          - expression:
              key: auth.identity.userid
              value: auth.identity.userid
          - expression:
              key: ratelimit.hits_addend
              value: responseBodyJSON("/usage/total_tokens")
          predicates:
          - auth.identity.selected_subscription_key == "models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated"
            && !request.path.endsWith("/v1/models")
        scope: llm/facebook-opt-125m-simulated-kserve-route
        service: ratelimit-report-service
        sources:
        - tokenratelimitpolicy.kuadrant.io:llm/maas-trlp-facebook-opt-125m-simulated
      name: 5fdb329883156d367923953337cd31681e17d553c8965cc9dae1ce6b389e721d
      routeRuleConditions:
        hostnames:
        - maas.apps.1d72ec05-6f11-4a19-a7a1-1638e531ad06.prod.konfluxeaas.com
        predicates:
        - request.url_path.startsWith('/llm/facebook-opt-125m-simulated/v1/responses')
    - actions:
      - scope: 331dc257e65f55f80700a586f7807093eda7b3d8e7d91215dc3c47731508480c
        service: auth-service
        sources:
        - authpolicy.kuadrant.io:openshift-ingress/gateway-default-auth
      - conditionalData:
        - data:
          - expression:
              key: tokenlimit.deny_all_by_default__6d45535f
              value: "1"
          - expression:
              key: auth.identity.userid
              value: auth.identity.userid
          - expression:
              key: ratelimit.hits_addend
              value: "0"
          predicates:
          - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")'
        scope: llm/e2e-distinct-2-simulated-kserve-route
        service: ratelimit-check-service
        sources:
        - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny
      - conditionalData:
        - data:
          - expression:
              key: tokenlimit.deny_all_by_default__6d45535f
              value: "1"
          - expression:
              key: auth.identity.userid
              value: auth.identity.userid
          - expression:
              key: ratelimit.hits_addend
              value: responseBodyJSON("/usage/total_tokens")
          predicates:
          - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")'
        scope: llm/e2e-distinct-2-simulated-kserve-route
        service: ratelimit-report-service
        sources:
        - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny
      name: 5814a4ef3b0a520897f726ede24204932405da2c0349b8a0dc6d50e3084c6b0a
      routeRuleConditions:
        hostnames:
        - maas.apps.1d72ec05-6f11-4a19-a7a1-1638e531ad06.prod.konfluxeaas.com
        predicates:
        - request.url_path.startsWith('/llm/e2e-distinct-2-simulated/v1/completions')
    - actions:
      - scope: bf72a6316f6ed79299511e58d068836cdc71dbca5e23944f783c9340ffa0aee1
        service: auth-service
        sources:
        - authpolicy.kuadrant.io:openshift-ingress/gateway-default-auth
      - conditionalData:
        - data:
          - expression:
              key: tokenlimit.deny_all_by_default__6d45535f
              value: "1"
          - expression:
              key: auth.identity.userid
              value: auth.identity.userid
          - expression:
              key: ratelimit.hits_addend
              value: "0"
          predicates:
          - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")'
        scope: llm/e2e-trlp-test-simulated-kserve-route
        service: ratelimit-check-service
        sources:
        - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny
      - conditionalData:
        - data:
          - expression:
              key: tokenlimit.deny_all_by_default__6d45535f
              value: "1"
          - expression:
              key: auth.identity.userid
              value: auth.identity.userid
          - expression:
              key: ratelimit.hits_addend
              value: responseBodyJSON("/usage/total_tokens")
          predicates:
          - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")'
        scope: llm/e2e-trlp-test-simulated-kserve-route
        service: ratelimit-report-service
        sources:
        - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny
      name: 3b750544acc140f9c769c71b72b3abd4a94b72127079ad8ac7ed1cbdb1845900
      routeRuleConditions:
        hostnames:
        - maas.apps.1d72ec05-6f11-4a19-a7a1-1638e531ad06.prod.konfluxeaas.com
        predicates:
        - request.url_path.startsWith('/llm/e2e-trlp-test-simulated/v1/completions')
    - actions:
      - scope: 35d34d59676c333235d7c9f02273e0380bb39f27cfd30856fedc0f7c0e5f79aa
        service: auth-service
        sources:
        - authpolicy.kuadrant.io:openshift-ingress/gateway-default-auth
      - conditionalData:
        - data:
          - expression:
              key: tokenlimit.deny_all_by_default__6d45535f
              value: "1"
          - expression:
              key: auth.identity.userid
              value: auth.identity.userid
          - expression:
              key: ratelimit.hits_addend
              value: "0"
          predicates:
          - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")'
        scope: llm/e2e-distinct-2-simulated-kserve-route
        service: ratelimit-check-service
        sources:
        - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny
      - conditionalData:
        - data:
          - expression:
              key: tokenlimit.deny_all_by_default__6d45535f
              value: "1"
          - expression:
              key: auth.identity.userid
              value: auth.identity.userid
          - expression:
              key: ratelimit.hits_addend
              value: responseBodyJSON("/usage/total_tokens")
          predicates:
          - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")'
        scope: llm/e2e-distinct-2-simulated-kserve-route
        service: ratelimit-report-service
        sources:
        - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny
      name: d6c6ec198d11737a5c1c2696fabbcc6c5dc2d7d2eb1a26694467fffcf8a4c2e2
      routeRuleConditions:
        hostnames:
        - maas.apps.1d72ec05-6f11-4a19-a7a1-1638e531ad06.prod.konfluxeaas.com
        predicates:
        - request.url_path.startsWith('/llm/e2e-distinct-2-simulated/v1/responses')
    - actions:
      - scope: 3c0d47082320c9bb02d3788ab2b052c696af91abc2ae438437ae71a26936c7c2
        service: auth-service
        sources:
        - authpolicy.kuadrant.io:openshift-ingress/gateway-default-auth
      - conditionalData:
        - data:
          - expression:
              key: tokenlimit.deny_all_by_default__6d45535f
              value: "1"
          - expression:
              key: auth.identity.userid
              value: auth.identity.userid
          - expression:
              key: ratelimit.hits_addend
              value: "0"
          predicates:
          - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")'
        scope: llm/e2e-distinct-simulated-kserve-route
        service: ratelimit-check-service
        sources:
        - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny
      - conditionalData:
        - data:
          - expression:
              key: tokenlimit.deny_all_by_default__6d45535f
              value: "1"
          - expression:
              key: auth.identity.userid
              value: auth.identity.userid
          - expression:
              key: ratelimit.hits_addend
              value: responseBodyJSON("/usage/total_tokens")
          predicates:
          - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")'
        scope: llm/e2e-distinct-simulated-kserve-route
        service: ratelimit-report-service
        sources:
        - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny
      name: fb7d75764e3834400b284b6fd8519400f247c907aba37919722dc00671f2649c
      routeRuleConditions:
        hostnames:
        - maas.apps.1d72ec05-6f11-4a19-a7a1-1638e531ad06.prod.konfluxeaas.com
        predicates:
        - request.url_path.startsWith('/llm/e2e-distinct-simulated/v1/completions')
    - actions:
      - scope: df733b2c652bfe2458c9e19932b1091e939c1a62178d6879462b3b4f73fca4bb
        service: auth-service
        sources:
        - authpolicy.kuadrant.io:openshift-ingress/gateway-default-auth
      - conditionalData:
        - data:
          - expression:
              key: tokenlimit.deny_all_by_default__6d45535f
              value: "1"
          - expression:
              key: auth.identity.userid
              value: auth.identity.userid
          - expression:
              key: ratelimit.hits_addend
              value: "0"
          predicates:
          - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")'
        scope: llm/e2e-trlp-test-simulated-kserve-route
        service: ratelimit-check-service
        sources:
        - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny
      - conditionalData:
        - data:
          - expression:
              key: tokenlimit.deny_all_by_default__6d45535f
              value: "1"
          - expression:
              key: auth.identity.userid
              value: auth.identity.userid
          - expression:
              key: ratelimit.hits_addend
              value: responseBodyJSON("/usage/total_tokens")
          predicates:
          - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")'
        scope: llm/e2e-trlp-test-simulated-kserve-route
        service: ratelimit-report-service
        sources:
        - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny
      name: 57c174deb9114235b8a135c33fbd92128f0032225d545fa477f49b6c55013049
      routeRuleConditions:
        hostnames:
        - maas.apps.1d72ec05-6f11-4a19-a7a1-1638e531ad06.prod.konfluxeaas.com
        predicates:
        - request.url_path.startsWith('/llm/e2e-trlp-test-simulated/v1/responses')
    - actions:
      - scope: d3b195a61a7f24c6bf1fba40f9f2e2565facb6af92e959c1546ac398a9172618
        service: auth-service
        sources:
        - authpolicy.kuadrant.io:openshift-ingress/gateway-default-auth
      - conditionalData:
        - data:
          - expression:
              key: tokenlimit.deny_all_by_default__6d45535f
              value: "1"
          - expression:
              key: auth.identity.userid
              value: auth.identity.userid
          - expression:
              key: ratelimit.hits_addend
              value: "0"
          predicates:
          - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")'
        scope: llm/e2e-distinct-simulated-kserve-route
        service: ratelimit-check-service
        sources:
        - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny
      - conditionalData:
        - data:
          - expression:
              key: tokenlimit.deny_all_by_default__6d45535f
              value: "1"
          - expression:
              key: auth.identity.userid
              value: auth.identity.userid
          - expression:
              key: ratelimit.hits_addend
              value: responseBodyJSON("/usage/total_tokens")
          predicates:
          - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")'
        scope: llm/e2e-distinct-simulated-kserve-route
        service: ratelimit-report-service
        sources:
        - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny
      name: 5650ac0a7cecdad87128da03a3687788ab4e106a84551aac8ea3172f32451c62
      routeRuleConditions:
        hostnames:
        - maas.apps.1d72ec05-6f11-4a19-a7a1-1638e531ad06.prod.konfluxeaas.com
        predicates:
        - request.url_path.startsWith('/llm/e2e-distinct-simulated/v1/responses')
    - actions:
      - scope: 7371c34ce8e4df2309ee8f952c87f921947b289427b6e9ea579dcb9970fc1b86
        service: auth-service
        sources:
        - authpolicy.kuadrant.io:llm/maas-auth-premium-simulated-simulated-premium
      - conditionalData:
        - data:
          - expression:
              key: tokenlimit.models_as_a_service_premium_simulator_subscription_premium_simulated_simulated_premium_tokens__a2a80825
              value: "1"
          - expression:
              key: auth.identity.userid
              value: auth.identity.userid
          - expression:
              key: ratelimit.hits_addend
              value: "0"
          predicates:
          - auth.identity.selected_subscription_key == "models-as-a-service/premium-simulator-subscription@llm/premium-simulated-simulated-premium"
            && !request.path.endsWith("/v1/models")
        scope: llm/premium-simulated-simulated-premium-kserve-route
        service: ratelimit-check-service
        sources:
        - tokenratelimitpolicy.kuadrant.io:llm/maas-trlp-premium-simulated-simulated-premium
      - conditionalData:
        - data:
          - expression:
              key: tokenlimit.models_as_a_service_premium_simulator_subscription_premium_simulated_simulated_premium_tokens__a2a80825
              value: "1"
          - expression:
              key: auth.identity.userid
              value: auth.identity.userid
          - expression:
              key: ratelimit.hits_addend
              value: responseBodyJSON("/usage/total_tokens")
          predicates:
          - auth.identity.selected_subscription_key == "models-as-a-service/premium-simulator-subscription@llm/premium-simulated-simulated-premium"
            && !request.path.endsWith("/v1/models")
        scope: llm/premium-simulated-simulated-premium-kserve-route
        service: ratelimit-report-service
        sources:
        - tokenratelimitpolicy.kuadrant.io:llm/maas-trlp-premium-simulated-simulated-premium
      name: 3b8823f677fff58b4079a62d18138d1092f9095ef61ca91f7406b46e286cf6c2
      routeRuleConditions:
        hostnames:
        - maas.apps.1d72ec05-6f11-4a19-a7a1-1638e531ad06.prod.konfluxeaas.com
        predicates:
        - request.url_path.startsWith('/llm/premium-simulated-simulated-premium')
    - actions:
      - scope: 3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3
        service: auth-service
        sources:
        - authpolicy.kuadrant.io:llm/maas-auth-facebook-opt-125m-simulated
      - conditionalData:
        - data:
          - expression:
              key: tokenlimit.models_as_a_service_simulator_subscription_facebook_opt_125m_simulated_tokens__87db8427
              value: "1"
          - expression:
              key: auth.identity.userid
              value: auth.identity.userid
          - expression:
              key: ratelimit.hits_addend
              value: "0"
          predicates:
          - auth.identity.selected_subscription_key == "models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated"
            && !request.path.endsWith("/v1/models")
        scope: llm/facebook-opt-125m-simulated-kserve-route
        service: ratelimit-check-service
        sources:
        - tokenratelimitpolicy.kuadrant.io:llm/maas-trlp-facebook-opt-125m-simulated
      - conditionalData:
        - data:
          - expression:
              key: tokenlimit.models_as_a_service_simulator_subscription_facebook_opt_125m_simulated_tokens__87db8427
              value: "1"
          - expression:
              key: auth.identity.userid
              value: auth.identity.userid
          - expression:
              key: ratelimit.hits_addend
              value: responseBodyJSON("/usage/total_tokens")
          predicates:
          - auth.identity.selected_subscription_key == "models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated"
            && !request.path.endsWith("/v1/models")
        scope: llm/facebook-opt-125m-simulated-kserve-route
        service: ratelimit-report-service
        sources:
        - tokenratelimitpolicy.kuadrant.io:llm/maas-trlp-facebook-opt-125m-simulated
      name: 7bcf6f71250c5072d6788fae548ac4ac3a7da3ae655456773f5a5be8681d3b19
      routeRuleConditions:
        hostnames:
        - maas.apps.1d72ec05-6f11-4a19-a7a1-1638e531ad06.prod.konfluxeaas.com
        predicates:
        - request.url_path.startsWith('/llm/facebook-opt-125m-simulated')
    - actions:
      - scope: a89b0896df0d8cd430f1c81b6eb292ddc044daed393537d009a6330718f58d4b
        service: auth-service
        sources:
        - authpolicy.kuadrant.io:openshift-ingress/gateway-default-auth
      - conditionalData:
        - data:
          - expression:
              key: tokenlimit.deny_all_by_default__6d45535f
              value: "1"
          - expression:
              key: auth.identity.userid
              value: auth.identity.userid
          - expression:
              key: ratelimit.hits_addend
              value: "0"
          predicates:
          - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")'
        scope: llm/e2e-distinct-2-simulated-kserve-route
        service: ratelimit-check-service
        sources:
        - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny
      - conditionalData:
        - data:
          - expression:
              key: tokenlimit.deny_all_by_default__6d45535f
              value: "1"
          - expression:
              key: auth.identity.userid
              value: auth.identity.userid
          - expression:
              key: ratelimit.hits_addend
              value: responseBodyJSON("/usage/total_tokens")
          predicates:
          - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")'
        scope: llm/e2e-distinct-2-simulated-kserve-route
        service: ratelimit-report-service
        sources:
        - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny
      name: fdd6aa945b3de9cfd5e8558648b32de93fbf77773d6e9f77dbcba7e6588afc35
      routeRuleConditions:
        hostnames:
        - maas.apps.1d72ec05-6f11-4a19-a7a1-1638e531ad06.prod.konfluxeaas.com
        predicates:
        - request.url_path.startsWith('/llm/e2e-distinct-2-simulated')
    - actions:
      - scope: 5fea747cb803a5ee3aeb620187bd9ec74ccccd10a92474ef528215a7ff146c8f
        service: auth-service
        sources:
        - authpolicy.kuadrant.io:openshift-ingress/gateway-default-auth
      - conditionalData:
        - data:
          - expression:
              key: tokenlimit.deny_all_by_default__6d45535f
              value: "1"
          - expression:
              key: auth.identity.userid
              value: auth.identity.userid
          - expression:
              key: ratelimit.hits_addend
              value: "0"
          predicates:
          - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")'
        scope: llm/e2e-trlp-test-simulated-kserve-route
        service: ratelimit-check-service
        sources:
        - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny
      - conditionalData:
        - data:
          - expression:
              key: tokenlimit.deny_all_by_default__6d45535f
              value: "1"
          - expression:
              key: auth.identity.userid
              value: auth.identity.userid
          - expression:
              key: ratelimit.hits_addend
              value: responseBodyJSON("/usage/total_tokens")
          predicates:
          - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")'
        scope: llm/e2e-trlp-test-simulated-kserve-route
        service: ratelimit-report-service
        sources:
        - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny
      name: 976f8f2ee10572463371f982251c2d9292b68f7743c8e3a67dfa1b43378f8bb6
      routeRuleConditions:
        hostnames:
        - maas.apps.1d72ec05-6f11-4a19-a7a1-1638e531ad06.prod.konfluxeaas.com
        predicates:
        - request.url_path.startsWith('/llm/e2e-trlp-test-simulated')
    - actions:
      - scope: 86cbb62fb4d82d4dc402b3281444539a5625c4bb4c86bbc4912c70e690a2e374
        service: auth-service
        sources:
        - authpolicy.kuadrant.io:openshift-ingress/gateway-default-auth
      - conditionalData:
        - data:
          - expression:
              key: tokenlimit.deny_all_by_default__6d45535f
              value: "1"
          - expression:
              key: auth.identity.userid
              value: auth.identity.userid
          - expression:
              key: ratelimit.hits_addend
              value: "0"
          predicates:
          - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")'
        scope: llm/e2e-distinct-simulated-kserve-route
        service: ratelimit-check-service
        sources:
        - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny
      - conditionalData:
        - data:
          - expression:
              key: tokenlimit.deny_all_by_default__6d45535f
              value: "1"
          - expression:
              key: auth.identity.userid
              value: auth.identity.userid
          - expression:
              key: ratelimit.hits_addend
              value: responseBodyJSON("/usage/total_tokens")
          predicates:
          - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")'
        scope: llm/e2e-distinct-simulated-kserve-route
        service: ratelimit-report-service
        sources:
        - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny
      name: b3904dd783e0b018ffbad5af6f0108c705bc6ed341b6530e8c32ca113232b0cc
      routeRuleConditions:
        hostnames:
        - maas.apps.1d72ec05-6f11-4a19-a7a1-1638e531ad06.prod.konfluxeaas.com
        predicates:
        - request.url_path.startsWith('/llm/e2e-distinct-simulated')
    - actions:
      - predicates:
        - request.path != "/maas-api/health" || request.method != "GET"
        scope: c9f2cdb36f800bc8ef8831e6117ec4c6cc521d8cd63b718b7906225d0f25e59f
        service: auth-service
        sources:
        - authpolicy.kuadrant.io:opendatahub/maas-api-auth-policy
      - conditionalData:
        - data:
          - expression:
              key: tokenlimit.deny_all_by_default__6d45535f
              value: "1"
          - expression:
              key: auth.identity.userid
              value: auth.identity.userid
          - expression:
              key: ratelimit.hits_addend
              value: "0"
          predicates:
          - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")'
        scope: opendatahub/maas-api-route
        service: ratelimit-check-service
        sources:
        - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny
      - conditionalData:
        - data:
          - expression:
              key: tokenlimit.deny_all_by_default__6d45535f
              value: "1"
          - expression:
              key: auth.identity.userid
              value: auth.identity.userid
          - expression:
              key: ratelimit.hits_addend
              value: responseBodyJSON("/usage/total_tokens")
          predicates:
          - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")'
        scope: opendatahub/maas-api-route
        service: ratelimit-report-service
        sources:
        - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny
      name: e955c43fdfa5eb2a81fed85766a824df2ac1de71343170430da76b23f4d1c907
      routeRuleConditions:
        hostnames:
        - maas.apps.1d72ec05-6f11-4a19-a7a1-1638e531ad06.prod.konfluxeaas.com
        predicates:
        - request.url_path.startsWith('/v1/models')
    - actions:
      - predicates:
        - request.path != "/maas-api/health" || request.method != "GET"
        scope: 4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d
        service: auth-service
        sources:
        - authpolicy.kuadrant.io:opendatahub/maas-api-auth-policy
      - conditionalData:
        - data:
          - expression:
              key: tokenlimit.deny_all_by_default__6d45535f
              value: "1"
          - expression:
              key: auth.identity.userid
              value: auth.identity.userid
          - expression:
              key: ratelimit.hits_addend
              value: "0"
          predicates:
          - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")'
        scope: opendatahub/maas-api-route
        service: ratelimit-check-service
        sources:
        - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny
      - conditionalData:
        - data:
          - expression:
              key: tokenlimit.deny_all_by_default__6d45535f
              value: "1"
          - expression:
              key: auth.identity.userid
              value: auth.identity.userid
          - expression:
              key: ratelimit.hits_addend
              value: responseBodyJSON("/usage/total_tokens")
          predicates:
          - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")'
        scope: opendatahub/maas-api-route
        service: ratelimit-report-service
        sources:
        - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny
      name: 3287e86b2a4dc04b0694dfcfe5a9e7d990aa3d1c28fdce5de4d8dfca2c7bfdaf
      routeRuleConditions:
        hostnames:
        - maas.apps.1d72ec05-6f11-4a19-a7a1-1638e531ad06.prod.konfluxeaas.com
        predicates:
        - request.url_path.startsWith('/maas-api')
    services:
      auth-service:
        endpoint: kuadrant-auth-service
        failureMode: deny
        timeout: 200ms
        type: auth
      ratelimit-check-service:
        endpoint: kuadrant-ratelimit-service
        failureMode: deny
        timeout: 100ms
        type: ratelimit-check
      ratelimit-report-service:
        endpoint: kuadrant-ratelimit-service
        failureMode: deny
        timeout: 100ms
        type: ratelimit-report
      ratelimit-service:
        endpoint: kuadrant-ratelimit-service
        failureMode: allow
        timeout: 100ms
        type: ratelimit
  targetRefs:
  - group: gateway.networking.k8s.io
    kind: Gateway
    name: maas-default-gateway
  url: quay.io/kuadrant/wasm-shim:v0.12.1