---
apiVersion: maas.opendatahub.io/v1alpha1
kind: MaaSAuthPolicy
metadata:
  annotations:
    kubectl.kubernetes.io/last-applied-configuration: |
      {"apiVersion":"maas.opendatahub.io/v1alpha1","kind":"MaaSAuthPolicy","metadata":{"annotations":{"openshift.io/description":"Grants all authenticated users access to the free-tier simulator model","openshift.io/display-name":"Simulator Access (Free)"},"name":"simulator-access","namespace":"models-as-a-service"},"spec":{"modelRefs":[{"name":"facebook-opt-125m-simulated","namespace":"llm"}],"subjects":{"groups":[{"name":"system:authenticated"}],"users":[]}}}
    openshift.io/description: Grants all authenticated users access to the free-tier
      simulator model
    openshift.io/display-name: Simulator Access (Free)
  creationTimestamp: "2026-11-04T02:25:35Z"
  finalizers:
  - maas.opendatahub.io/authpolicy-cleanup
  generation: 2
  managedFields:
  - apiVersion: maas.opendatahub.io/v1alpha1
    fieldsType: FieldsV1
    fieldsV1:
      f:metadata:
        f:annotations:
          .: {}
          f:kubectl.kubernetes.io/last-applied-configuration: {}
          f:openshift.io/description: {}
          f:openshift.io/display-name: {}
      f:spec:
        .: {}
        f:modelRefs: {}
        f:subjects:
          .: {}
          f:groups: {}
    manager: kubectl-client-side-apply
    operation: Update
    time: "2026-11-04T02:25:35Z"
  - apiVersion: maas.opendatahub.io/v1alpha1
    fieldsType: FieldsV1
    fieldsV1:
      f:metadata:
        f:finalizers:
          .: {}
          v:"maas.opendatahub.io/authpolicy-cleanup": {}
    manager: manager
    operation: Update
    time: "2026-11-04T02:25:35Z"
  - apiVersion: maas.opendatahub.io/v1alpha1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        .: {}
        f:conditions: {}
        f:phase: {}
    manager: manager
    operation: Update
    subresource: status
    time: "2026-11-04T02:45:30Z"
  name: simulator-access
  namespace: models-as-a-service
  resourceVersion: "50200"
  uid: 7050797a-42f8-4b38-8d31-f2eecd3a2625
spec:
  modelRefs:
  - name: facebook-opt-125m-simulated
    namespace: llm
  subjects:
    groups:
    - name: system:authenticated
status:
  conditions:
  - lastTransitionTime: "2026-11-04T02:45:30Z"
    message: successfully reconciled
    observedGeneration: 2
    reason: Reconciled
    status: "True"
    type: Ready
  - lastTransitionTime: "2026-11-04T02:26:25Z"
    message: No conflicting AuthPolicies detected on MaaS-managed HTTPRoutes
    observedGeneration: 2
    reason: NoConflict
    status: "False"
    type: ConflictingAuthPolicy
  phase: Active