apiVersion: extensions.istio.io/v1alpha1 kind: WasmPlugin metadata: creationTimestamp: "2026-06-03T23:04:07Z" generation: 628 labels: kuadrant.io/managed: "true" managedFields: - apiVersion: extensions.istio.io/v1alpha1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:labels: .: {} f:kuadrant.io/managed: {} f:ownerReferences: .: {} k:{"uid":"72593124-3ee9-4bd7-9cb7-cb7ee2e6d3a6"}: {} f:spec: .: {} f:phase: {} f:pluginConfig: .: {} f:actionSets: {} f:services: .: {} f:auth-service: .: {} f:endpoint: {} f:failureMode: {} f:timeout: {} f:type: {} f:ratelimit-check-service: .: {} f:endpoint: {} f:failureMode: {} f:timeout: {} f:type: {} f:ratelimit-report-service: .: {} f:endpoint: {} f:failureMode: {} f:timeout: {} f:type: {} f:ratelimit-service: .: {} f:endpoint: {} f:failureMode: {} f:timeout: {} f:type: {} f:targetRefs: {} f:url: {} manager: manager operation: Update time: "2026-06-03T23:31:38Z" name: kuadrant-maas-default-gateway namespace: openshift-ingress ownerReferences: - apiVersion: gateway.networking.k8s.io/v1 blockOwnerDeletion: true controller: true kind: Gateway name: maas-default-gateway uid: 72593124-3ee9-4bd7-9cb7-cb7ee2e6d3a6 resourceVersion: "53014" uid: d3c2d905-46fc-48e0-b52b-787c9f726267 spec: phase: STATS pluginConfig: actionSets: - actions: - scope: cccb9f888be4be56e16cc32e380709be54a35972abf80517f8c40fc107282b39 service: auth-service sources: - authpolicy.kuadrant.io:openshift-ingress/gateway-default-auth - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: "0" predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-unconfigured-facebook-opt-125m-simulated-kserve-route service: ratelimit-check-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: responseBodyJSON("/usage/total_tokens") predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-unconfigured-facebook-opt-125m-simulated-kserve-route service: ratelimit-report-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny name: 7af45032c2a56898875cad1b8c96c9b5feaa96a1b92689389007360ab9d66017 routeRuleConditions: hostnames: - maas.apps.e6084d49-758e-4e7e-a528-c6a4c49764e9.prod.konfluxeaas.com predicates: - request.url_path.startsWith('/llm/e2e-unconfigured-facebook-opt-125m-simulated/v1/chat/completions') - actions: - scope: 9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a service: auth-service sources: - authpolicy.kuadrant.io:openshift-ingress/gateway-default-auth - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: "0" predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-unconfigured-facebook-opt-125m-simulated-kserve-route service: ratelimit-check-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: responseBodyJSON("/usage/total_tokens") predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-unconfigured-facebook-opt-125m-simulated-kserve-route service: ratelimit-report-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny name: 0f3e1a1dfa4829b230954bcceff9e5ecb8a709048970b56ebf413fa3c763bd5e routeRuleConditions: hostnames: - maas.apps.e6084d49-758e-4e7e-a528-c6a4c49764e9.prod.konfluxeaas.com predicates: - request.url_path.startsWith('/llm/e2e-unconfigured-facebook-opt-125m-simulated/v1/chat/completions') - actions: - scope: d81a415a9d6b7bd916041b26b5a288b98c3b5bc233efb3bb1e7ca74fc032a437 service: auth-service sources: - authpolicy.kuadrant.io:openshift-ingress/gateway-default-auth - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: "0" predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-unconfigured-facebook-opt-125m-simulated-kserve-route service: ratelimit-check-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: responseBodyJSON("/usage/total_tokens") predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-unconfigured-facebook-opt-125m-simulated-kserve-route service: ratelimit-report-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny name: 864d462d25464d3a96d66aad2041ff57d317b4ac4fad24efa68fd8521e2cb2d7 routeRuleConditions: hostnames: - maas.apps.e6084d49-758e-4e7e-a528-c6a4c49764e9.prod.konfluxeaas.com predicates: - request.url_path.startsWith('/llm/e2e-unconfigured-facebook-opt-125m-simulated/v1/completions') - actions: - scope: 01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5 service: auth-service sources: - authpolicy.kuadrant.io:openshift-ingress/gateway-default-auth - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: "0" predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-unconfigured-facebook-opt-125m-simulated-kserve-route service: ratelimit-check-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: responseBodyJSON("/usage/total_tokens") predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-unconfigured-facebook-opt-125m-simulated-kserve-route service: ratelimit-report-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny name: 5b896c161811f83f5f05dd5f2068b58f01b695d9f4a6ef3d91227611278cd0c6 routeRuleConditions: hostnames: - maas.apps.e6084d49-758e-4e7e-a528-c6a4c49764e9.prod.konfluxeaas.com predicates: - request.url_path.startsWith('/llm/e2e-unconfigured-facebook-opt-125m-simulated/v1/completions') - actions: - scope: e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be service: auth-service sources: - authpolicy.kuadrant.io:openshift-ingress/gateway-default-auth - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: "0" predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-unconfigured-facebook-opt-125m-simulated-kserve-route service: ratelimit-check-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: responseBodyJSON("/usage/total_tokens") predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-unconfigured-facebook-opt-125m-simulated-kserve-route service: ratelimit-report-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny name: 866dc778d41224eaff7badd81809f30680e295892badc866226a0111cdfabb78 routeRuleConditions: hostnames: - maas.apps.e6084d49-758e-4e7e-a528-c6a4c49764e9.prod.konfluxeaas.com predicates: - request.url_path.startsWith('/llm/e2e-unconfigured-facebook-opt-125m-simulated/v1/responses') - actions: - scope: aae65b7ddc0033e778bd82057b67fb5cd3e029782d6fd444ddefece908444945 service: auth-service sources: - authpolicy.kuadrant.io:openshift-ingress/gateway-default-auth - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: "0" predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-unconfigured-facebook-opt-125m-simulated-kserve-route service: ratelimit-check-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: responseBodyJSON("/usage/total_tokens") predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-unconfigured-facebook-opt-125m-simulated-kserve-route service: ratelimit-report-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny name: 78a9b9b80312871ad506db92623c6f8c87bb6536723e4c9203f75711ff6d5300 routeRuleConditions: hostnames: - maas.apps.e6084d49-758e-4e7e-a528-c6a4c49764e9.prod.konfluxeaas.com predicates: - request.url_path.startsWith('/llm/e2e-unconfigured-facebook-opt-125m-simulated/v1/responses') - actions: - scope: edcceb5a2e0cf1edde0fc3ed43068ce5b123a6fdc41949959c2c3b7a5a48bf24 service: auth-service sources: - authpolicy.kuadrant.io:llm/maas-auth-premium-simulated-simulated-premium - conditionalData: - data: - expression: key: tokenlimit.models_as_a_service_premium_simulator_subscription_premium_simulated_simulated_premium_tokens__a2a80825 value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: "0" predicates: - auth.identity.selected_subscription_key == "models-as-a-service/premium-simulator-subscription@llm/premium-simulated-simulated-premium" && !request.path.endsWith("/v1/models") scope: llm/premium-simulated-simulated-premium-kserve-route service: ratelimit-check-service sources: - tokenratelimitpolicy.kuadrant.io:llm/maas-trlp-premium-simulated-simulated-premium - conditionalData: - data: - expression: key: tokenlimit.models_as_a_service_premium_simulator_subscription_premium_simulated_simulated_premium_tokens__a2a80825 value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: responseBodyJSON("/usage/total_tokens") predicates: - auth.identity.selected_subscription_key == "models-as-a-service/premium-simulator-subscription@llm/premium-simulated-simulated-premium" && !request.path.endsWith("/v1/models") scope: llm/premium-simulated-simulated-premium-kserve-route service: ratelimit-report-service sources: - tokenratelimitpolicy.kuadrant.io:llm/maas-trlp-premium-simulated-simulated-premium name: 9a843ff8702d84f2d52aa2484140841d1ef33ce492fde33b3a121b2ec5834c4a routeRuleConditions: hostnames: - maas.apps.e6084d49-758e-4e7e-a528-c6a4c49764e9.prod.konfluxeaas.com predicates: - request.url_path.startsWith('/llm/premium-simulated-simulated-premium/v1/chat/completions') - actions: - scope: 290fcbcface9546d9c9667b9925aed6bb7d99d80cc4eac41ce432606d6568f6d service: auth-service sources: - authpolicy.kuadrant.io:llm/maas-auth-premium-simulated-simulated-premium - conditionalData: - data: - expression: key: tokenlimit.models_as_a_service_premium_simulator_subscription_premium_simulated_simulated_premium_tokens__a2a80825 value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: "0" predicates: - auth.identity.selected_subscription_key == "models-as-a-service/premium-simulator-subscription@llm/premium-simulated-simulated-premium" && !request.path.endsWith("/v1/models") scope: llm/premium-simulated-simulated-premium-kserve-route service: ratelimit-check-service sources: - tokenratelimitpolicy.kuadrant.io:llm/maas-trlp-premium-simulated-simulated-premium - conditionalData: - data: - expression: key: tokenlimit.models_as_a_service_premium_simulator_subscription_premium_simulated_simulated_premium_tokens__a2a80825 value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: responseBodyJSON("/usage/total_tokens") predicates: - auth.identity.selected_subscription_key == "models-as-a-service/premium-simulator-subscription@llm/premium-simulated-simulated-premium" && !request.path.endsWith("/v1/models") scope: llm/premium-simulated-simulated-premium-kserve-route service: ratelimit-report-service sources: - tokenratelimitpolicy.kuadrant.io:llm/maas-trlp-premium-simulated-simulated-premium name: b215de0ea2b1459550d461df499dc9838def2396b46bf9e5eb95c2146cfb966f routeRuleConditions: hostnames: - maas.apps.e6084d49-758e-4e7e-a528-c6a4c49764e9.prod.konfluxeaas.com predicates: - request.url_path.startsWith('/llm/premium-simulated-simulated-premium/v1/chat/completions') - actions: - scope: bdc91161f6d2aa93e1f0bdc761e87370999b7b62803bc46a203347b0f626e17d service: auth-service sources: - authpolicy.kuadrant.io:llm/maas-auth-premium-simulated-simulated-premium - conditionalData: - data: - expression: key: tokenlimit.models_as_a_service_premium_simulator_subscription_premium_simulated_simulated_premium_tokens__a2a80825 value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: "0" predicates: - auth.identity.selected_subscription_key == "models-as-a-service/premium-simulator-subscription@llm/premium-simulated-simulated-premium" && !request.path.endsWith("/v1/models") scope: llm/premium-simulated-simulated-premium-kserve-route service: ratelimit-check-service sources: - tokenratelimitpolicy.kuadrant.io:llm/maas-trlp-premium-simulated-simulated-premium - conditionalData: - data: - expression: key: tokenlimit.models_as_a_service_premium_simulator_subscription_premium_simulated_simulated_premium_tokens__a2a80825 value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: responseBodyJSON("/usage/total_tokens") predicates: - auth.identity.selected_subscription_key == "models-as-a-service/premium-simulator-subscription@llm/premium-simulated-simulated-premium" && !request.path.endsWith("/v1/models") scope: llm/premium-simulated-simulated-premium-kserve-route service: ratelimit-report-service sources: - tokenratelimitpolicy.kuadrant.io:llm/maas-trlp-premium-simulated-simulated-premium name: 1dcc4a7db7591a5ddd6945a87a35832972f4b0ef4110ef01c869bdb709bd84c9 routeRuleConditions: hostnames: - maas.apps.e6084d49-758e-4e7e-a528-c6a4c49764e9.prod.konfluxeaas.com predicates: - request.url_path.startsWith('/llm/premium-simulated-simulated-premium/v1/completions') - actions: - scope: 80f10756c0e833d16937036ed66f1daf5bef95559ef05a5e852766b97b9bdaef service: auth-service sources: - authpolicy.kuadrant.io:llm/maas-auth-premium-simulated-simulated-premium - conditionalData: - data: - expression: key: tokenlimit.models_as_a_service_premium_simulator_subscription_premium_simulated_simulated_premium_tokens__a2a80825 value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: "0" predicates: - auth.identity.selected_subscription_key == "models-as-a-service/premium-simulator-subscription@llm/premium-simulated-simulated-premium" && !request.path.endsWith("/v1/models") scope: llm/premium-simulated-simulated-premium-kserve-route service: ratelimit-check-service sources: - tokenratelimitpolicy.kuadrant.io:llm/maas-trlp-premium-simulated-simulated-premium - conditionalData: - data: - expression: key: tokenlimit.models_as_a_service_premium_simulator_subscription_premium_simulated_simulated_premium_tokens__a2a80825 value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: responseBodyJSON("/usage/total_tokens") predicates: - auth.identity.selected_subscription_key == "models-as-a-service/premium-simulator-subscription@llm/premium-simulated-simulated-premium" && !request.path.endsWith("/v1/models") scope: llm/premium-simulated-simulated-premium-kserve-route service: ratelimit-report-service sources: - tokenratelimitpolicy.kuadrant.io:llm/maas-trlp-premium-simulated-simulated-premium name: f68077c1c3cc5ecb742427044ac80f93c5f4baf70a14bd98fa85a90b35f06144 routeRuleConditions: hostnames: - maas.apps.e6084d49-758e-4e7e-a528-c6a4c49764e9.prod.konfluxeaas.com predicates: - request.url_path.startsWith('/llm/premium-simulated-simulated-premium/v1/completions') - actions: - scope: 4dc577fd60594d78a4a8bebe396f4b5a928f41bdc3f95c06d717cf1ddc3158b2 service: auth-service sources: - authpolicy.kuadrant.io:llm/maas-auth-premium-simulated-simulated-premium - conditionalData: - data: - expression: key: tokenlimit.models_as_a_service_premium_simulator_subscription_premium_simulated_simulated_premium_tokens__a2a80825 value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: "0" predicates: - auth.identity.selected_subscription_key == "models-as-a-service/premium-simulator-subscription@llm/premium-simulated-simulated-premium" && !request.path.endsWith("/v1/models") scope: llm/premium-simulated-simulated-premium-kserve-route service: ratelimit-check-service sources: - tokenratelimitpolicy.kuadrant.io:llm/maas-trlp-premium-simulated-simulated-premium - conditionalData: - data: - expression: key: tokenlimit.models_as_a_service_premium_simulator_subscription_premium_simulated_simulated_premium_tokens__a2a80825 value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: responseBodyJSON("/usage/total_tokens") predicates: - auth.identity.selected_subscription_key == "models-as-a-service/premium-simulator-subscription@llm/premium-simulated-simulated-premium" && !request.path.endsWith("/v1/models") scope: llm/premium-simulated-simulated-premium-kserve-route service: ratelimit-report-service sources: - tokenratelimitpolicy.kuadrant.io:llm/maas-trlp-premium-simulated-simulated-premium name: d6668b7acb587325f020849bb6a962af11e4223243efcdc8042e5e516a81dfce routeRuleConditions: hostnames: - maas.apps.e6084d49-758e-4e7e-a528-c6a4c49764e9.prod.konfluxeaas.com predicates: - request.url_path.startsWith('/llm/premium-simulated-simulated-premium/v1/responses') - actions: - scope: 98bc217fbd0e2cf75ea4dcf982124867212376a116bb6e3b753f8445aead6170 service: auth-service sources: - authpolicy.kuadrant.io:llm/maas-auth-premium-simulated-simulated-premium - conditionalData: - data: - expression: key: tokenlimit.models_as_a_service_premium_simulator_subscription_premium_simulated_simulated_premium_tokens__a2a80825 value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: "0" predicates: - auth.identity.selected_subscription_key == "models-as-a-service/premium-simulator-subscription@llm/premium-simulated-simulated-premium" && !request.path.endsWith("/v1/models") scope: llm/premium-simulated-simulated-premium-kserve-route service: ratelimit-check-service sources: - tokenratelimitpolicy.kuadrant.io:llm/maas-trlp-premium-simulated-simulated-premium - conditionalData: - data: - expression: key: tokenlimit.models_as_a_service_premium_simulator_subscription_premium_simulated_simulated_premium_tokens__a2a80825 value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: responseBodyJSON("/usage/total_tokens") predicates: - auth.identity.selected_subscription_key == "models-as-a-service/premium-simulator-subscription@llm/premium-simulated-simulated-premium" && !request.path.endsWith("/v1/models") scope: llm/premium-simulated-simulated-premium-kserve-route service: ratelimit-report-service sources: - tokenratelimitpolicy.kuadrant.io:llm/maas-trlp-premium-simulated-simulated-premium name: 1dbdb4bc2d96c26cfc5d11bf0f53fa0240d232f48a32b5c3784bf47d569250ab routeRuleConditions: hostnames: - maas.apps.e6084d49-758e-4e7e-a528-c6a4c49764e9.prod.konfluxeaas.com predicates: - request.url_path.startsWith('/llm/premium-simulated-simulated-premium/v1/responses') - actions: - scope: 5aa0fd746a1cbe4557cf771f0b5f5c4020da5a6444c58d701a6d039232d7faab service: auth-service sources: - authpolicy.kuadrant.io:llm/maas-auth-facebook-opt-125m-simulated - conditionalData: - data: - expression: key: tokenlimit.models_as_a_service_simulator_subscription_facebook_opt_125m_simulated_tokens__87db8427 value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: "0" predicates: - auth.identity.selected_subscription_key == "models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated" && !request.path.endsWith("/v1/models") scope: llm/facebook-opt-125m-simulated-kserve-route service: ratelimit-check-service sources: - tokenratelimitpolicy.kuadrant.io:llm/maas-trlp-facebook-opt-125m-simulated - conditionalData: - data: - expression: key: tokenlimit.models_as_a_service_simulator_subscription_facebook_opt_125m_simulated_tokens__87db8427 value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: responseBodyJSON("/usage/total_tokens") predicates: - auth.identity.selected_subscription_key == "models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated" && !request.path.endsWith("/v1/models") scope: llm/facebook-opt-125m-simulated-kserve-route service: ratelimit-report-service sources: - tokenratelimitpolicy.kuadrant.io:llm/maas-trlp-facebook-opt-125m-simulated name: 7ca52a674152d33618d7029c3fba4d53f56cbdb7268df4c23c5827c2e020ddf4 routeRuleConditions: hostnames: - maas.apps.e6084d49-758e-4e7e-a528-c6a4c49764e9.prod.konfluxeaas.com predicates: - request.url_path.startsWith('/llm/facebook-opt-125m-simulated/v1/chat/completions') - actions: - scope: 18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76 service: auth-service sources: - authpolicy.kuadrant.io:llm/maas-auth-facebook-opt-125m-simulated - conditionalData: - data: - expression: key: tokenlimit.models_as_a_service_simulator_subscription_facebook_opt_125m_simulated_tokens__87db8427 value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: "0" predicates: - auth.identity.selected_subscription_key == "models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated" && !request.path.endsWith("/v1/models") scope: llm/facebook-opt-125m-simulated-kserve-route service: ratelimit-check-service sources: - tokenratelimitpolicy.kuadrant.io:llm/maas-trlp-facebook-opt-125m-simulated - conditionalData: - data: - expression: key: tokenlimit.models_as_a_service_simulator_subscription_facebook_opt_125m_simulated_tokens__87db8427 value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: responseBodyJSON("/usage/total_tokens") predicates: - auth.identity.selected_subscription_key == "models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated" && !request.path.endsWith("/v1/models") scope: llm/facebook-opt-125m-simulated-kserve-route service: ratelimit-report-service sources: - tokenratelimitpolicy.kuadrant.io:llm/maas-trlp-facebook-opt-125m-simulated name: dacaa67abdfceb15a6ec53ef5c9ac6ad1424b4246978e0fa14a3e31da4f92974 routeRuleConditions: hostnames: - maas.apps.e6084d49-758e-4e7e-a528-c6a4c49764e9.prod.konfluxeaas.com predicates: - request.url_path.startsWith('/llm/facebook-opt-125m-simulated/v1/chat/completions') - actions: - scope: e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a service: auth-service sources: - authpolicy.kuadrant.io:openshift-ingress/gateway-default-auth - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: "0" predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-distinct-2-simulated-kserve-route service: ratelimit-check-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: responseBodyJSON("/usage/total_tokens") predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-distinct-2-simulated-kserve-route service: ratelimit-report-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny name: 74bf612bfa5125462f58a258d9f2973cce8c85455c63ca81f1e253c8133b5ef7 routeRuleConditions: hostnames: - maas.apps.e6084d49-758e-4e7e-a528-c6a4c49764e9.prod.konfluxeaas.com predicates: - request.url_path.startsWith('/llm/e2e-distinct-2-simulated/v1/chat/completions') - actions: - scope: df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346 service: auth-service sources: - authpolicy.kuadrant.io:openshift-ingress/gateway-default-auth - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: "0" predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-distinct-2-simulated-kserve-route service: ratelimit-check-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: responseBodyJSON("/usage/total_tokens") predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-distinct-2-simulated-kserve-route service: ratelimit-report-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny name: 4a3e408f592085c139a72376b4f920092b737e583a93b66735821ec5ea7e7e6d routeRuleConditions: hostnames: - maas.apps.e6084d49-758e-4e7e-a528-c6a4c49764e9.prod.konfluxeaas.com predicates: - request.url_path.startsWith('/llm/e2e-distinct-2-simulated/v1/chat/completions') - actions: - scope: 8b68b883dd0441c7b1f53f6adc6c3add12f8912a17afae4d05f1f1bbc1b53f9a service: auth-service sources: - authpolicy.kuadrant.io:openshift-ingress/gateway-default-auth - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: "0" predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-unconfigured-facebook-opt-125m-simulated-kserve-route service: ratelimit-check-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: responseBodyJSON("/usage/total_tokens") predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-unconfigured-facebook-opt-125m-simulated-kserve-route service: ratelimit-report-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny name: cc37342719f9aae3255dbd2552a162f565e5ce2d70d6c120fb560e9319934502 routeRuleConditions: hostnames: - maas.apps.e6084d49-758e-4e7e-a528-c6a4c49764e9.prod.konfluxeaas.com predicates: - request.url_path.startsWith('/llm/e2e-unconfigured-facebook-opt-125m-simulated') - actions: - scope: 9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5 service: auth-service sources: - authpolicy.kuadrant.io:openshift-ingress/gateway-default-auth - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: "0" predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-unconfigured-facebook-opt-125m-simulated-kserve-route service: ratelimit-check-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: responseBodyJSON("/usage/total_tokens") predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-unconfigured-facebook-opt-125m-simulated-kserve-route service: ratelimit-report-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny name: 14e3ee25afe98763bdaed8534982b4f091ed3f3c1eb90e95e9fb6e72147eb087 routeRuleConditions: hostnames: - maas.apps.e6084d49-758e-4e7e-a528-c6a4c49764e9.prod.konfluxeaas.com predicates: - request.url_path.startsWith('/llm/e2e-unconfigured-facebook-opt-125m-simulated') - actions: - scope: 4c297061aecf4870589c6c3c778bd16a5e111a166b5adab99e23173a5d9a9b82 service: auth-service sources: - authpolicy.kuadrant.io:openshift-ingress/gateway-default-auth - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: "0" predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-trlp-test-simulated-kserve-route service: ratelimit-check-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: responseBodyJSON("/usage/total_tokens") predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-trlp-test-simulated-kserve-route service: ratelimit-report-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny name: 51589db4a47208ebc2905bf3b054c45b4147e4459cc70a1acee1bc1a7066adec routeRuleConditions: hostnames: - maas.apps.e6084d49-758e-4e7e-a528-c6a4c49764e9.prod.konfluxeaas.com predicates: - request.url_path.startsWith('/llm/e2e-trlp-test-simulated/v1/chat/completions') - actions: - scope: 319a353672fc7601c875fa3f8b807adf60b64f093f022b2a1c3dfef3ac8cd4f4 service: auth-service sources: - authpolicy.kuadrant.io:openshift-ingress/gateway-default-auth - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: "0" predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-trlp-test-simulated-kserve-route service: ratelimit-check-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: responseBodyJSON("/usage/total_tokens") predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-trlp-test-simulated-kserve-route service: ratelimit-report-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny name: ee0f90cca3a1919b04da700345ff5652808416eb36f90cd56814223ce3cb2167 routeRuleConditions: hostnames: - maas.apps.e6084d49-758e-4e7e-a528-c6a4c49764e9.prod.konfluxeaas.com predicates: - request.url_path.startsWith('/llm/e2e-trlp-test-simulated/v1/chat/completions') - actions: - scope: 3dc75fc8307b952a3e873400cf417e90f2861e8a225abec4b22708deb7901db7 service: auth-service sources: - authpolicy.kuadrant.io:openshift-ingress/gateway-default-auth - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: "0" predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-distinct-simulated-kserve-route service: ratelimit-check-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: responseBodyJSON("/usage/total_tokens") predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-distinct-simulated-kserve-route service: ratelimit-report-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny name: 1166d59c78f56ca7d20e6c621037adb69030d5ede7b3ea236570981af3fd8034 routeRuleConditions: hostnames: - maas.apps.e6084d49-758e-4e7e-a528-c6a4c49764e9.prod.konfluxeaas.com predicates: - request.url_path.startsWith('/llm/e2e-distinct-simulated/v1/chat/completions') - actions: - scope: 0740694b94da2b1f6093b148b85b9ec044f97848654ae7c0cc966ee03e0c4830 service: auth-service sources: - authpolicy.kuadrant.io:openshift-ingress/gateway-default-auth - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: "0" predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-distinct-simulated-kserve-route service: ratelimit-check-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: responseBodyJSON("/usage/total_tokens") predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-distinct-simulated-kserve-route service: ratelimit-report-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny name: 6f1b91adf3508fb7c4ca36aaab009e35bcfd9bf674b0cd517db774890f25c1aa routeRuleConditions: hostnames: - maas.apps.e6084d49-758e-4e7e-a528-c6a4c49764e9.prod.konfluxeaas.com predicates: - request.url_path.startsWith('/llm/e2e-distinct-simulated/v1/chat/completions') - actions: - scope: aa8134dca1e9e412ac99acf6a54001c807c3fb733db7d2dce945f529dd033597 service: auth-service sources: - authpolicy.kuadrant.io:llm/maas-auth-facebook-opt-125m-simulated - conditionalData: - data: - expression: key: tokenlimit.models_as_a_service_simulator_subscription_facebook_opt_125m_simulated_tokens__87db8427 value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: "0" predicates: - auth.identity.selected_subscription_key == "models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated" && !request.path.endsWith("/v1/models") scope: llm/facebook-opt-125m-simulated-kserve-route service: ratelimit-check-service sources: - tokenratelimitpolicy.kuadrant.io:llm/maas-trlp-facebook-opt-125m-simulated - conditionalData: - data: - expression: key: tokenlimit.models_as_a_service_simulator_subscription_facebook_opt_125m_simulated_tokens__87db8427 value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: responseBodyJSON("/usage/total_tokens") predicates: - auth.identity.selected_subscription_key == "models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated" && !request.path.endsWith("/v1/models") scope: llm/facebook-opt-125m-simulated-kserve-route service: ratelimit-report-service sources: - tokenratelimitpolicy.kuadrant.io:llm/maas-trlp-facebook-opt-125m-simulated name: da559c12c936d7b6086e759a99312f35b46289c49015fd30d6b5a3e104698bbf routeRuleConditions: hostnames: - maas.apps.e6084d49-758e-4e7e-a528-c6a4c49764e9.prod.konfluxeaas.com predicates: - request.url_path.startsWith('/llm/facebook-opt-125m-simulated/v1/completions') - actions: - scope: cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a service: auth-service sources: - authpolicy.kuadrant.io:llm/maas-auth-facebook-opt-125m-simulated - conditionalData: - data: - expression: key: tokenlimit.models_as_a_service_simulator_subscription_facebook_opt_125m_simulated_tokens__87db8427 value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: "0" predicates: - auth.identity.selected_subscription_key == "models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated" && !request.path.endsWith("/v1/models") scope: llm/facebook-opt-125m-simulated-kserve-route service: ratelimit-check-service sources: - tokenratelimitpolicy.kuadrant.io:llm/maas-trlp-facebook-opt-125m-simulated - conditionalData: - data: - expression: key: tokenlimit.models_as_a_service_simulator_subscription_facebook_opt_125m_simulated_tokens__87db8427 value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: responseBodyJSON("/usage/total_tokens") predicates: - auth.identity.selected_subscription_key == "models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated" && !request.path.endsWith("/v1/models") scope: llm/facebook-opt-125m-simulated-kserve-route service: ratelimit-report-service sources: - tokenratelimitpolicy.kuadrant.io:llm/maas-trlp-facebook-opt-125m-simulated name: 5528e2b38dfe044d58f3f679ac16b985fba3a88a17bf8ca1a91cf49a08925151 routeRuleConditions: hostnames: - maas.apps.e6084d49-758e-4e7e-a528-c6a4c49764e9.prod.konfluxeaas.com predicates: - request.url_path.startsWith('/llm/facebook-opt-125m-simulated/v1/completions') - actions: - scope: 311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418 service: auth-service sources: - authpolicy.kuadrant.io:llm/maas-auth-facebook-opt-125m-simulated - conditionalData: - data: - expression: key: tokenlimit.models_as_a_service_simulator_subscription_facebook_opt_125m_simulated_tokens__87db8427 value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: "0" predicates: - auth.identity.selected_subscription_key == "models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated" && !request.path.endsWith("/v1/models") scope: llm/facebook-opt-125m-simulated-kserve-route service: ratelimit-check-service sources: - tokenratelimitpolicy.kuadrant.io:llm/maas-trlp-facebook-opt-125m-simulated - conditionalData: - data: - expression: key: tokenlimit.models_as_a_service_simulator_subscription_facebook_opt_125m_simulated_tokens__87db8427 value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: responseBodyJSON("/usage/total_tokens") predicates: - auth.identity.selected_subscription_key == "models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated" && !request.path.endsWith("/v1/models") scope: llm/facebook-opt-125m-simulated-kserve-route service: ratelimit-report-service sources: - tokenratelimitpolicy.kuadrant.io:llm/maas-trlp-facebook-opt-125m-simulated name: 772513449ac7deb6e998e0cd98dff3c6afd4d8b02050630a02bfada69024d718 routeRuleConditions: hostnames: - maas.apps.e6084d49-758e-4e7e-a528-c6a4c49764e9.prod.konfluxeaas.com predicates: - request.url_path.startsWith('/llm/facebook-opt-125m-simulated/v1/responses') - actions: - scope: e716e70ac29d4c7bea453bb99861c5f15b3d9860b623d5ef2c7badd4e1cb9bc9 service: auth-service sources: - authpolicy.kuadrant.io:llm/maas-auth-facebook-opt-125m-simulated - conditionalData: - data: - expression: key: tokenlimit.models_as_a_service_simulator_subscription_facebook_opt_125m_simulated_tokens__87db8427 value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: "0" predicates: - auth.identity.selected_subscription_key == "models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated" && !request.path.endsWith("/v1/models") scope: llm/facebook-opt-125m-simulated-kserve-route service: ratelimit-check-service sources: - tokenratelimitpolicy.kuadrant.io:llm/maas-trlp-facebook-opt-125m-simulated - conditionalData: - data: - expression: key: tokenlimit.models_as_a_service_simulator_subscription_facebook_opt_125m_simulated_tokens__87db8427 value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: responseBodyJSON("/usage/total_tokens") predicates: - auth.identity.selected_subscription_key == "models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated" && !request.path.endsWith("/v1/models") scope: llm/facebook-opt-125m-simulated-kserve-route service: ratelimit-report-service sources: - tokenratelimitpolicy.kuadrant.io:llm/maas-trlp-facebook-opt-125m-simulated name: ca97e1392f875be647d009107eb5914418b7f89595fac297252133a1557e735f routeRuleConditions: hostnames: - maas.apps.e6084d49-758e-4e7e-a528-c6a4c49764e9.prod.konfluxeaas.com predicates: - request.url_path.startsWith('/llm/facebook-opt-125m-simulated/v1/responses') - actions: - scope: 331dc257e65f55f80700a586f7807093eda7b3d8e7d91215dc3c47731508480c service: auth-service sources: - authpolicy.kuadrant.io:openshift-ingress/gateway-default-auth - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: "0" predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-distinct-2-simulated-kserve-route service: ratelimit-check-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: responseBodyJSON("/usage/total_tokens") predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-distinct-2-simulated-kserve-route service: ratelimit-report-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny name: 877f47b693a668d1e8895c11d066c8f2fce5c913c58b790f1b5726efe1084099 routeRuleConditions: hostnames: - maas.apps.e6084d49-758e-4e7e-a528-c6a4c49764e9.prod.konfluxeaas.com predicates: - request.url_path.startsWith('/llm/e2e-distinct-2-simulated/v1/completions') - actions: - scope: c245170da89e49f061561989e94654ede8e3261330d5fce018b1d279501abd0e service: auth-service sources: - authpolicy.kuadrant.io:openshift-ingress/gateway-default-auth - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: "0" predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-distinct-2-simulated-kserve-route service: ratelimit-check-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: responseBodyJSON("/usage/total_tokens") predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-distinct-2-simulated-kserve-route service: ratelimit-report-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny name: a8ccbabc8673cdef7f1c34b5ca246f1054d1bf1d5cbcc0e93a197144b608ad26 routeRuleConditions: hostnames: - maas.apps.e6084d49-758e-4e7e-a528-c6a4c49764e9.prod.konfluxeaas.com predicates: - request.url_path.startsWith('/llm/e2e-distinct-2-simulated/v1/completions') - actions: - scope: bf72a6316f6ed79299511e58d068836cdc71dbca5e23944f783c9340ffa0aee1 service: auth-service sources: - authpolicy.kuadrant.io:openshift-ingress/gateway-default-auth - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: "0" predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-trlp-test-simulated-kserve-route service: ratelimit-check-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: responseBodyJSON("/usage/total_tokens") predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-trlp-test-simulated-kserve-route service: ratelimit-report-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny name: 7c6d86a42f17a73b5d831b0f2db05fdcd2048aa6e5c35dea9883591e06641c4c routeRuleConditions: hostnames: - maas.apps.e6084d49-758e-4e7e-a528-c6a4c49764e9.prod.konfluxeaas.com predicates: - request.url_path.startsWith('/llm/e2e-trlp-test-simulated/v1/completions') - actions: - scope: cb857b3e9077f5383c92f635f721c5106c8cce20a9467a6d67f8c67ebc9d46c7 service: auth-service sources: - authpolicy.kuadrant.io:openshift-ingress/gateway-default-auth - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: "0" predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-trlp-test-simulated-kserve-route service: ratelimit-check-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: responseBodyJSON("/usage/total_tokens") predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-trlp-test-simulated-kserve-route service: ratelimit-report-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny name: 70c2afc6eef902a2b83dbb622906002a0ac61e3bcc73e89b82164059c817e066 routeRuleConditions: hostnames: - maas.apps.e6084d49-758e-4e7e-a528-c6a4c49764e9.prod.konfluxeaas.com predicates: - request.url_path.startsWith('/llm/e2e-trlp-test-simulated/v1/completions') - actions: - scope: 35d34d59676c333235d7c9f02273e0380bb39f27cfd30856fedc0f7c0e5f79aa service: auth-service sources: - authpolicy.kuadrant.io:openshift-ingress/gateway-default-auth - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: "0" predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-distinct-2-simulated-kserve-route service: ratelimit-check-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: responseBodyJSON("/usage/total_tokens") predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-distinct-2-simulated-kserve-route service: ratelimit-report-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny name: 00497c3b4cff7d99199ba7d0d2abccb6967cdac20f53b8f0eba90d5f8ed88701 routeRuleConditions: hostnames: - maas.apps.e6084d49-758e-4e7e-a528-c6a4c49764e9.prod.konfluxeaas.com predicates: - request.url_path.startsWith('/llm/e2e-distinct-2-simulated/v1/responses') - actions: - scope: 414449ae595d12294cda43c4706566f5644d67ef6848de245e6caee2cdb069f8 service: auth-service sources: - authpolicy.kuadrant.io:openshift-ingress/gateway-default-auth - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: "0" predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-distinct-2-simulated-kserve-route service: ratelimit-check-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: responseBodyJSON("/usage/total_tokens") predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-distinct-2-simulated-kserve-route service: ratelimit-report-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny name: 87e7425f6b9290d8f5bae9002b4e5bd24779f3408bf13b7f0b8efcb85b247585 routeRuleConditions: hostnames: - maas.apps.e6084d49-758e-4e7e-a528-c6a4c49764e9.prod.konfluxeaas.com predicates: - request.url_path.startsWith('/llm/e2e-distinct-2-simulated/v1/responses') - actions: - scope: c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76 service: auth-service sources: - authpolicy.kuadrant.io:openshift-ingress/gateway-default-auth - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: "0" predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-distinct-simulated-kserve-route service: ratelimit-check-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: responseBodyJSON("/usage/total_tokens") predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-distinct-simulated-kserve-route service: ratelimit-report-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny name: 5dcdfdaae1fda580a13f638b665e959524ad95f62741fb94cf7eb41dd23963c0 routeRuleConditions: hostnames: - maas.apps.e6084d49-758e-4e7e-a528-c6a4c49764e9.prod.konfluxeaas.com predicates: - request.url_path.startsWith('/llm/e2e-distinct-simulated/v1/completions') - actions: - scope: 3c0d47082320c9bb02d3788ab2b052c696af91abc2ae438437ae71a26936c7c2 service: auth-service sources: - authpolicy.kuadrant.io:openshift-ingress/gateway-default-auth - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: "0" predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-distinct-simulated-kserve-route service: ratelimit-check-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: responseBodyJSON("/usage/total_tokens") predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-distinct-simulated-kserve-route service: ratelimit-report-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny name: 22f2c4b482e8c3551fe9495798e32e6fa7beb50b0ede032f9212cf13151a0596 routeRuleConditions: hostnames: - maas.apps.e6084d49-758e-4e7e-a528-c6a4c49764e9.prod.konfluxeaas.com predicates: - request.url_path.startsWith('/llm/e2e-distinct-simulated/v1/completions') - actions: - scope: 6cb5c4c9ff83dac784e73ce73f1d83f0bef8b0f7a10e074445fe944fab33ef4e service: auth-service sources: - authpolicy.kuadrant.io:openshift-ingress/gateway-default-auth - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: "0" predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-trlp-test-simulated-kserve-route service: ratelimit-check-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: responseBodyJSON("/usage/total_tokens") predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-trlp-test-simulated-kserve-route service: ratelimit-report-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny name: d78340c5135b885ac3a1251a64a24b7b8bd087288c4385ab5ff1fcea19b21c87 routeRuleConditions: hostnames: - maas.apps.e6084d49-758e-4e7e-a528-c6a4c49764e9.prod.konfluxeaas.com predicates: - request.url_path.startsWith('/llm/e2e-trlp-test-simulated/v1/responses') - actions: - scope: df733b2c652bfe2458c9e19932b1091e939c1a62178d6879462b3b4f73fca4bb service: auth-service sources: - authpolicy.kuadrant.io:openshift-ingress/gateway-default-auth - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: "0" predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-trlp-test-simulated-kserve-route service: ratelimit-check-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: responseBodyJSON("/usage/total_tokens") predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-trlp-test-simulated-kserve-route service: ratelimit-report-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny name: 2d8b75f041cd00320c93cde2470d06d6e2718244951ea737f3db86b63413c054 routeRuleConditions: hostnames: - maas.apps.e6084d49-758e-4e7e-a528-c6a4c49764e9.prod.konfluxeaas.com predicates: - request.url_path.startsWith('/llm/e2e-trlp-test-simulated/v1/responses') - actions: - scope: 0f8e1a2bede8509cb76d997b959699aa0135fff9780ffed78ed7277e9c897b5e service: auth-service sources: - authpolicy.kuadrant.io:openshift-ingress/gateway-default-auth - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: "0" predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-distinct-simulated-kserve-route service: ratelimit-check-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: responseBodyJSON("/usage/total_tokens") predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-distinct-simulated-kserve-route service: ratelimit-report-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny name: b7afe54ac5d416287bd934aafe72df4af9388aa4727181fdd63cc7ff7e1078bb routeRuleConditions: hostnames: - maas.apps.e6084d49-758e-4e7e-a528-c6a4c49764e9.prod.konfluxeaas.com predicates: - request.url_path.startsWith('/llm/e2e-distinct-simulated/v1/responses') - actions: - scope: d3b195a61a7f24c6bf1fba40f9f2e2565facb6af92e959c1546ac398a9172618 service: auth-service sources: - authpolicy.kuadrant.io:openshift-ingress/gateway-default-auth - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: "0" predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-distinct-simulated-kserve-route service: ratelimit-check-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: responseBodyJSON("/usage/total_tokens") predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-distinct-simulated-kserve-route service: ratelimit-report-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny name: 15f1a2a567686b18d67aa6eef9067fafe8338a96e6d44f373c5db3ca99f20f40 routeRuleConditions: hostnames: - maas.apps.e6084d49-758e-4e7e-a528-c6a4c49764e9.prod.konfluxeaas.com predicates: - request.url_path.startsWith('/llm/e2e-distinct-simulated/v1/responses') - actions: - scope: 7371c34ce8e4df2309ee8f952c87f921947b289427b6e9ea579dcb9970fc1b86 service: auth-service sources: - authpolicy.kuadrant.io:llm/maas-auth-premium-simulated-simulated-premium - conditionalData: - data: - expression: key: tokenlimit.models_as_a_service_premium_simulator_subscription_premium_simulated_simulated_premium_tokens__a2a80825 value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: "0" predicates: - auth.identity.selected_subscription_key == "models-as-a-service/premium-simulator-subscription@llm/premium-simulated-simulated-premium" && !request.path.endsWith("/v1/models") scope: llm/premium-simulated-simulated-premium-kserve-route service: ratelimit-check-service sources: - tokenratelimitpolicy.kuadrant.io:llm/maas-trlp-premium-simulated-simulated-premium - conditionalData: - data: - expression: key: tokenlimit.models_as_a_service_premium_simulator_subscription_premium_simulated_simulated_premium_tokens__a2a80825 value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: responseBodyJSON("/usage/total_tokens") predicates: - auth.identity.selected_subscription_key == "models-as-a-service/premium-simulator-subscription@llm/premium-simulated-simulated-premium" && !request.path.endsWith("/v1/models") scope: llm/premium-simulated-simulated-premium-kserve-route service: ratelimit-report-service sources: - tokenratelimitpolicy.kuadrant.io:llm/maas-trlp-premium-simulated-simulated-premium name: 8a3cdec9ba503619824264e730dd86a155e40b1a60098514ab090029154c5cb9 routeRuleConditions: hostnames: - maas.apps.e6084d49-758e-4e7e-a528-c6a4c49764e9.prod.konfluxeaas.com predicates: - request.url_path.startsWith('/llm/premium-simulated-simulated-premium') - actions: - scope: c2fa62f1c5f5915dac9085511eb547dc6a04d451cabce32f7fc86613d440b2a7 service: auth-service sources: - authpolicy.kuadrant.io:llm/maas-auth-premium-simulated-simulated-premium - conditionalData: - data: - expression: key: tokenlimit.models_as_a_service_premium_simulator_subscription_premium_simulated_simulated_premium_tokens__a2a80825 value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: "0" predicates: - auth.identity.selected_subscription_key == "models-as-a-service/premium-simulator-subscription@llm/premium-simulated-simulated-premium" && !request.path.endsWith("/v1/models") scope: llm/premium-simulated-simulated-premium-kserve-route service: ratelimit-check-service sources: - tokenratelimitpolicy.kuadrant.io:llm/maas-trlp-premium-simulated-simulated-premium - conditionalData: - data: - expression: key: tokenlimit.models_as_a_service_premium_simulator_subscription_premium_simulated_simulated_premium_tokens__a2a80825 value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: responseBodyJSON("/usage/total_tokens") predicates: - auth.identity.selected_subscription_key == "models-as-a-service/premium-simulator-subscription@llm/premium-simulated-simulated-premium" && !request.path.endsWith("/v1/models") scope: llm/premium-simulated-simulated-premium-kserve-route service: ratelimit-report-service sources: - tokenratelimitpolicy.kuadrant.io:llm/maas-trlp-premium-simulated-simulated-premium name: f8d8b5cb78fb98e85f275c9e77c6182ceb2012b1dfa515ae461f8e4be3a2147a routeRuleConditions: hostnames: - maas.apps.e6084d49-758e-4e7e-a528-c6a4c49764e9.prod.konfluxeaas.com predicates: - request.url_path.startsWith('/llm/premium-simulated-simulated-premium') - actions: - scope: 4e93f1986841c16506ee726a8192ec71d2a8bafa10275979a4129ddd337542b4 service: auth-service sources: - authpolicy.kuadrant.io:llm/maas-auth-facebook-opt-125m-simulated - conditionalData: - data: - expression: key: tokenlimit.models_as_a_service_simulator_subscription_facebook_opt_125m_simulated_tokens__87db8427 value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: "0" predicates: - auth.identity.selected_subscription_key == "models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated" && !request.path.endsWith("/v1/models") scope: llm/facebook-opt-125m-simulated-kserve-route service: ratelimit-check-service sources: - tokenratelimitpolicy.kuadrant.io:llm/maas-trlp-facebook-opt-125m-simulated - conditionalData: - data: - expression: key: tokenlimit.models_as_a_service_simulator_subscription_facebook_opt_125m_simulated_tokens__87db8427 value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: responseBodyJSON("/usage/total_tokens") predicates: - auth.identity.selected_subscription_key == "models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated" && !request.path.endsWith("/v1/models") scope: llm/facebook-opt-125m-simulated-kserve-route service: ratelimit-report-service sources: - tokenratelimitpolicy.kuadrant.io:llm/maas-trlp-facebook-opt-125m-simulated name: 374c8d751521e93b4b8ff1a551778ff2eb0b97f2d49961f627c549cd099f315a routeRuleConditions: hostnames: - maas.apps.e6084d49-758e-4e7e-a528-c6a4c49764e9.prod.konfluxeaas.com predicates: - request.url_path.startsWith('/llm/facebook-opt-125m-simulated') - actions: - scope: 3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3 service: auth-service sources: - authpolicy.kuadrant.io:llm/maas-auth-facebook-opt-125m-simulated - conditionalData: - data: - expression: key: tokenlimit.models_as_a_service_simulator_subscription_facebook_opt_125m_simulated_tokens__87db8427 value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: "0" predicates: - auth.identity.selected_subscription_key == "models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated" && !request.path.endsWith("/v1/models") scope: llm/facebook-opt-125m-simulated-kserve-route service: ratelimit-check-service sources: - tokenratelimitpolicy.kuadrant.io:llm/maas-trlp-facebook-opt-125m-simulated - conditionalData: - data: - expression: key: tokenlimit.models_as_a_service_simulator_subscription_facebook_opt_125m_simulated_tokens__87db8427 value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: responseBodyJSON("/usage/total_tokens") predicates: - auth.identity.selected_subscription_key == "models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated" && !request.path.endsWith("/v1/models") scope: llm/facebook-opt-125m-simulated-kserve-route service: ratelimit-report-service sources: - tokenratelimitpolicy.kuadrant.io:llm/maas-trlp-facebook-opt-125m-simulated name: b546b106e96a30af37605cc8ef0e2f0956a3d63642510d0938dfd038dcb001ef routeRuleConditions: hostnames: - maas.apps.e6084d49-758e-4e7e-a528-c6a4c49764e9.prod.konfluxeaas.com predicates: - request.url_path.startsWith('/llm/facebook-opt-125m-simulated') - actions: - scope: 0de63d98b80c1813dded1200a5c220a9aa223eb7c7585984033d3ea7769c1fc1 service: auth-service sources: - authpolicy.kuadrant.io:openshift-ingress/gateway-default-auth - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: "0" predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-distinct-2-simulated-kserve-route service: ratelimit-check-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: responseBodyJSON("/usage/total_tokens") predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-distinct-2-simulated-kserve-route service: ratelimit-report-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny name: a756931ce3c82332be15ab770447f7e9407cc87354582f08b8db07d6d28b24af routeRuleConditions: hostnames: - maas.apps.e6084d49-758e-4e7e-a528-c6a4c49764e9.prod.konfluxeaas.com predicates: - request.url_path.startsWith('/llm/e2e-distinct-2-simulated') - actions: - scope: a89b0896df0d8cd430f1c81b6eb292ddc044daed393537d009a6330718f58d4b service: auth-service sources: - authpolicy.kuadrant.io:openshift-ingress/gateway-default-auth - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: "0" predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-distinct-2-simulated-kserve-route service: ratelimit-check-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: responseBodyJSON("/usage/total_tokens") predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-distinct-2-simulated-kserve-route service: ratelimit-report-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny name: d0ec6e70d560a526afbdb7b7e394eaff6e6cc288e8735ad9d80618901dce35cc routeRuleConditions: hostnames: - maas.apps.e6084d49-758e-4e7e-a528-c6a4c49764e9.prod.konfluxeaas.com predicates: - request.url_path.startsWith('/llm/e2e-distinct-2-simulated') - actions: - scope: 8e95faaf26521b922fc4f7d90dead5fa65fb63ced54ef1b0da6c336892092b5e service: auth-service sources: - authpolicy.kuadrant.io:openshift-ingress/gateway-default-auth - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: "0" predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-trlp-test-simulated-kserve-route service: ratelimit-check-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: responseBodyJSON("/usage/total_tokens") predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-trlp-test-simulated-kserve-route service: ratelimit-report-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny name: c498d70756f6d88cf9f7b5fe8720d77e7b8564ea04d805c8b15524f95e8a2991 routeRuleConditions: hostnames: - maas.apps.e6084d49-758e-4e7e-a528-c6a4c49764e9.prod.konfluxeaas.com predicates: - request.url_path.startsWith('/llm/e2e-trlp-test-simulated') - actions: - scope: 5fea747cb803a5ee3aeb620187bd9ec74ccccd10a92474ef528215a7ff146c8f service: auth-service sources: - authpolicy.kuadrant.io:openshift-ingress/gateway-default-auth - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: "0" predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-trlp-test-simulated-kserve-route service: ratelimit-check-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: responseBodyJSON("/usage/total_tokens") predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-trlp-test-simulated-kserve-route service: ratelimit-report-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny name: 0056486497636b8055ebc5b0f54299b3a25063c12652ca7c1a11ea0598b971b6 routeRuleConditions: hostnames: - maas.apps.e6084d49-758e-4e7e-a528-c6a4c49764e9.prod.konfluxeaas.com predicates: - request.url_path.startsWith('/llm/e2e-trlp-test-simulated') - actions: - scope: 3f374f385b8664c1b7ec9843869a0ecb4fefe048f5ceabd740bcf9c10e846108 service: auth-service sources: - authpolicy.kuadrant.io:openshift-ingress/gateway-default-auth - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: "0" predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-distinct-simulated-kserve-route service: ratelimit-check-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: responseBodyJSON("/usage/total_tokens") predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-distinct-simulated-kserve-route service: ratelimit-report-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny name: 468159ae896a5de33e441fcc2884f000c7fd3cb7e8f7605a318e507b2077fa1f routeRuleConditions: hostnames: - maas.apps.e6084d49-758e-4e7e-a528-c6a4c49764e9.prod.konfluxeaas.com predicates: - request.url_path.startsWith('/llm/e2e-distinct-simulated') - actions: - scope: 86cbb62fb4d82d4dc402b3281444539a5625c4bb4c86bbc4912c70e690a2e374 service: auth-service sources: - authpolicy.kuadrant.io:openshift-ingress/gateway-default-auth - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: "0" predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-distinct-simulated-kserve-route service: ratelimit-check-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: responseBodyJSON("/usage/total_tokens") predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-distinct-simulated-kserve-route service: ratelimit-report-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny name: b787156470324062308d788431585619fd59e8795f763cae999fb94bbaca89ce routeRuleConditions: hostnames: - maas.apps.e6084d49-758e-4e7e-a528-c6a4c49764e9.prod.konfluxeaas.com predicates: - request.url_path.startsWith('/llm/e2e-distinct-simulated') - actions: - predicates: - request.path != "/maas-api/health" || request.method != "GET" scope: c9f2cdb36f800bc8ef8831e6117ec4c6cc521d8cd63b718b7906225d0f25e59f service: auth-service sources: - authpolicy.kuadrant.io:opendatahub/maas-api-auth-policy - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: "0" predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: opendatahub/maas-api-route service: ratelimit-check-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: responseBodyJSON("/usage/total_tokens") predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: opendatahub/maas-api-route service: ratelimit-report-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny name: ba6bffa02b5e4c4df32ee2b1ba9a3fa0fc307806f41730280fcb74ae74edcada routeRuleConditions: hostnames: - maas.apps.e6084d49-758e-4e7e-a528-c6a4c49764e9.prod.konfluxeaas.com predicates: - request.url_path.startsWith('/v1/models') - actions: - predicates: - request.path != "/maas-api/health" || request.method != "GET" scope: 49ff072d7b97a47682d640010c73aef47c6376b17652297065fa57d4c846dd80 service: auth-service sources: - authpolicy.kuadrant.io:opendatahub/maas-api-auth-policy - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: "0" predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: opendatahub/maas-api-route service: ratelimit-check-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: responseBodyJSON("/usage/total_tokens") predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: opendatahub/maas-api-route service: ratelimit-report-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny name: 9c6c2d690042c652bb9af1b8d929b75457e855952fd86c2eeaa26fad3856bc8a routeRuleConditions: hostnames: - maas.apps.e6084d49-758e-4e7e-a528-c6a4c49764e9.prod.konfluxeaas.com predicates: - request.url_path.startsWith('/v1/models') - actions: - predicates: - request.path != "/maas-api/health" || request.method != "GET" scope: d44d6970f0ac9b448c729a344c019166492f90c7945285882c656b64a6725911 service: auth-service sources: - authpolicy.kuadrant.io:opendatahub/maas-api-auth-policy - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: "0" predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: opendatahub/maas-api-route service: ratelimit-check-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: responseBodyJSON("/usage/total_tokens") predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: opendatahub/maas-api-route service: ratelimit-report-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny name: 2b8599b466cd3c3f68653a93ec8e99ae5462d3f8e3c974cdec5f525ec5ee91b0 routeRuleConditions: hostnames: - maas.apps.e6084d49-758e-4e7e-a528-c6a4c49764e9.prod.konfluxeaas.com predicates: - request.url_path.startsWith('/maas-api') - actions: - predicates: - request.path != "/maas-api/health" || request.method != "GET" scope: 4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d service: auth-service sources: - authpolicy.kuadrant.io:opendatahub/maas-api-auth-policy - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: "0" predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: opendatahub/maas-api-route service: ratelimit-check-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: responseBodyJSON("/usage/total_tokens") predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: opendatahub/maas-api-route service: ratelimit-report-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny name: 2b91d872dc42a8730116af992783a00fe4db8577e076dda28fc49a5d4415264b routeRuleConditions: hostnames: - maas.apps.e6084d49-758e-4e7e-a528-c6a4c49764e9.prod.konfluxeaas.com predicates: - request.url_path.startsWith('/maas-api') services: auth-service: endpoint: kuadrant-auth-service failureMode: deny timeout: 200ms type: auth ratelimit-check-service: endpoint: kuadrant-ratelimit-service failureMode: deny timeout: 100ms type: ratelimit-check ratelimit-report-service: endpoint: kuadrant-ratelimit-service failureMode: deny timeout: 100ms type: ratelimit-report ratelimit-service: endpoint: kuadrant-ratelimit-service failureMode: allow timeout: 100ms type: ratelimit targetRefs: - group: gateway.networking.k8s.io kind: Gateway name: maas-default-gateway url: quay.io/kuadrant/wasm-shim:v0.12.1