/workspace/source/test/e2e/tests/test_namespace_scoping.py:214: test_namespace_scoping validates single-tenant dormant mode; skipped when ENABLE_TENANT_NAMESPACE_DISCOVERY=true/workspace/source/test/e2e/tests/test_namespace_scoping.py:247: test_namespace_scoping validates single-tenant dormant mode; skipped when ENABLE_TENANT_NAMESPACE_DISCOVERY=true/workspace/source/test/e2e/tests/test_namespace_scoping.py:287: test_namespace_scoping validates single-tenant dormant mode; skipped when ENABLE_TENANT_NAMESPACE_DISCOVERY=true/workspace/source/test/e2e/tests/test_namespace_scoping.py:324: test_namespace_scoping validates single-tenant dormant mode; skipped when ENABLE_TENANT_NAMESPACE_DISCOVERY=true/workspace/source/test/e2e/tests/test_namespace_scoping.py:382: test_namespace_scoping validates single-tenant dormant mode; skipped when ENABLE_TENANT_NAMESPACE_DISCOVERY=true/workspace/source/test/e2e/tests/test_namespace_scoping.py:456: test_namespace_scoping validates single-tenant dormant mode; skipped when ENABLE_TENANT_NAMESPACE_DISCOVERY=true/workspace/source/test/e2e/tests/test_tenant_discovery.py:79: Skipping when Gateway uses ClusterIP + OpenShift Route (unsupported configuration). This mixes incompatible routing paradigms. Gateway has no external hostname in spec.listeners, so /v1/tenants returns an error. Supported configuration: LoadBalancer service with hostname in spec.listeners./workspace/source/test/e2e/tests/test_tenant_discovery.py:155: Skipping when Gateway uses ClusterIP + OpenShift Route (unsupported configuration). This mixes incompatible routing paradigms. Gateway has no external hostname in spec.listeners, so /v1/tenants returns an error. Supported configuration: LoadBalancer service with hostname in spec.listeners./workspace/source/test/e2e/tests/test_external_oidc.py:251: EXTERNAL_OIDC is not true/workspace/source/test/e2e/tests/test_external_oidc.py:262: EXTERNAL_OIDC is not true/workspace/source/test/e2e/tests/test_external_oidc.py:276: EXTERNAL_OIDC is not true/workspace/source/test/e2e/tests/test_external_oidc.py:289: EXTERNAL_OIDC is not true/workspace/source/test/e2e/tests/test_external_oidc.py:302: EXTERNAL_OIDC is not true/workspace/source/test/e2e/tests/test_external_oidc.py:335: EXTERNAL_OIDC is not true/workspace/source/test/e2e/tests/test_external_oidc.py:377: EXTERNAL_OIDC is not true/workspace/source/test/e2e/tests/test_external_oidc.py:424: EXTERNAL_OIDC is not true/workspace/source/test/e2e/tests/test_external_oidc.py:460: EXTERNAL_OIDC is not true/workspace/source/test/e2e/tests/test_external_oidc.py:525: EXTERNAL_OIDC is not true/workspace/source/test/e2e/tests/test_external_oidc.py:556: EXTERNAL_OIDC is not true/workspace/source/test/e2e/tests/test_external_oidc.py:582: EXTERNAL_OIDC is not true/workspace/source/test/e2e/tests/test_external_oidc.py:643: EXTERNAL_OIDC is not true/workspace/source/test/e2e/tests/test_external_oidc.py:679: EXTERNAL_OIDC is not true/workspace/source/test/e2e/tests/test_external_oidc.py:717: EXTERNAL_OIDC is not true/workspace/source/test/e2e/tests/test_external_oidc.py:754: EXTERNAL_OIDC is not true/workspace/source/test/e2e/tests/test_external_oidc.py:802: EXTERNAL_OIDC is not true/workspace/source/test/e2e/tests/test_external_oidc.py:890: EXTERNAL_OIDC not enabled/workspace/source/test/e2e/tests/test_external_oidc.py:942: EXTERNAL_OIDC not enabled/workspace/source/test/e2e/tests/test_external_oidc.py:978: EXTERNAL_OIDC not enabled/workspace/source/test/e2e/tests/test_external_oidc.py:1032: EXTERNAL_OIDC not enabled/workspace/source/test/e2e/tests/test_tenant_namespace_discovery.py:189: OIDC_ISSUER_URL not set; per-tenant OIDC E2E requires external OIDC deployself = <test_api_keys.TestAPIKeyExpiration object at 0x7f4b5cc38460> api_keys_base_url = 'https://e2e-worker-w0-d9b17d.apps.14a5f5ca-6dd0-44ed-9183-7da521c7716f.prod.konfluxeaas.com/maas-api/v1/api-keys' headers = {'Authorization': 'Bearer eyJhbGciOiJSUzI1NiIsImtpZCI6IkU1V015Ulg2NGRuUHc3R09uSXp5aXVHU2lVeUl1clV4UFBSdkQ3eDhiLVkifQ.e...8k6tzH4QkIb3GXThgCJ3w4CvLZYnVzHCp0c_xXk_VDzuq7ojlYjUHHkS2irQaYXMJLWyVxESyO46b53DA', 'Content-Type': 'application/json'} max_expiration_days = 90 def test_expiration_policy_boundaries( self, api_keys_base_url: str, headers: dict, max_expiration_days: int, ): """Validate successful, boundary, rejected, and non-expiring key requests.""" cases = [ ("within-limit", (max_expiration_days // 2) * 24 or 24, True), ("at-limit", max_expiration_days * 24, True), ("exceeds-limit", max_expiration_days * 2 * 24, False), ("without-expiration", None, True), ("short-expiration", 1, True), ] for label, expires_in_hours, should_succeed in cases: payload = { > "name": f"test-{label}-{uuid.uuid4().hex[:8]}", "description": f"Expiration boundary case: {label}", } E NameError: name 'uuid' is not defined test/e2e/tests/test_api_keys.py:785: NameError/workspace/source/test/e2e/tests/test_api_keys.py:1405: Cannot find maas-api pod in odh-ai-gateway-infra: error: error executing jsonpath "{.items[0].metadata.name}": Error executing template: array index out of bounds: index 0, length 0. Printing more information for debugging the template: template was: {.items[0].metadata.name} object given to jsonpath engine was: map[string]interface {}{"apiVersion":"v1", "items":[]interface {}{}, "kind":"List", "metadata":map[string]interface {}{"resourceVersion":""}}/workspace/source/test/e2e/tests/test_subscription.py:1181: gateway-only mode: per-model AuthPolicy is not created/workspace/source/test/e2e/tests/test_tenant_namespace_discovery.py:355: Dormant-mode test mutates controller flags; set ENABLE_TENANT_DISCOVERY_DORMANT_E2E=true/workspace/source/test/e2e/tests/test_tenant_discovery_isolation.py:93: Skipping when Gateway uses ClusterIP + OpenShift Route (unsupported configuration). This mixes incompatible routing paradigms. Gateway has no external hostname in spec.listeners, so /v1/tenants returns an error. Supported configuration: LoadBalancer service with hostname in spec.listeners./workspace/source/test/e2e/tests/test_tenant_discovery_isolation.py:141: Skipping when Gateway uses ClusterIP + OpenShift Route (unsupported configuration). This mixes incompatible routing paradigms. Gateway has no external hostname in spec.listeners, so /v1/tenants returns an error. Supported configuration: LoadBalancer service with hostname in spec.listeners./workspace/source/test/e2e/tests/test_tenant_discovery_isolation.py:228: Skipping when Gateway uses ClusterIP + OpenShift Route (unsupported configuration). This mixes incompatible routing paradigms. Gateway has no external hostname in spec.listeners, so /v1/tenants returns an error. Supported configuration: LoadBalancer service with hostname in spec.listeners.self = <test_subscription_list_endpoints.TestSubscriptionModelAccessFiltering object at 0x7f4b5c5509d0> def test_filters_unauthorized_models(self): """Subscription response only includes models the user is authorized to access.""" sa_name = "e2e-partial-access-sa" sa_ns = "default" maas_ns = _ns() subscription_name = "e2e-partial-access-sub" auth_policy_name = "e2e-partial-access-auth" try: sa_token = _create_sa_token(sa_name, namespace=sa_ns) sa_user = _sa_to_user(sa_name, namespace=sa_ns) _create_test_subscription( subscription_name, [MODEL_REF, DISTINCT_MODEL_REF], users=[sa_user], namespace=maas_ns, ) _create_test_auth_policy( auth_policy_name, MODEL_REF, users=[sa_user], namespace=maas_ns, ) _wait_for_maas_auth_policy_phase(auth_policy_name, require_enforced=False) _wait_for_maas_subscription_phase(subscription_name) api_key = _create_api_key(sa_token, subscription=subscription_name) url = f"{_maas_api_url()}/v1/subscriptions" r = requests.get( url, headers={"Authorization": f"Bearer {api_key}"}, timeout=TIMEOUT, verify=TLS_VERIFY, ) assert r.status_code == 200 data = r.json() test_sub = next( (s for s in data if s["subscription_id_header"] == subscription_name), None, ) > assert test_sub is not None, \ f"Test subscription '{subscription_name}' not found in {[s['subscription_id_header'] for s in data]}" E AssertionError: Test subscription 'e2e-partial-access-sub' not found in [] E assert None is not None test/e2e/tests/test_subscription_list_endpoints.py:520: AssertionErrorself = <test_tenant_auth_isolation.TestTenantAuthIsolation object at 0x7f5896f98be0> tenant_auth_setup = {'policy': 'e2e-auth-iso-d51e92', 'subscription': 'e2e-auth-iso-d51e92', 'tenant_a': {'base_url': 'https://e2e-shared-...ared-b-w3-b79988', 'model_name': 'auth-test-model-b79988', 'model_namespace': 'ai-tenant-e2e-shared-b-w3-b79988', ...}} tenant_api_keys = {'a': {'createdAt': '2026-09-17T14:24:36Z', 'ephemeral': False, 'expiresAt': '2026-12-16T14:24:36Z', 'id': '92ba2d30-2...4:24:36Z', 'ephemeral': False, 'expiresAt': '2026-12-16T14:24:36Z', 'id': '39494c23-3689-426f-b997-eb5fbea6aa48', ...}} def test_api_key_validates_against_correct_tenant(self, tenant_auth_setup, tenant_api_keys): """3.2: API key validates on the tenant endpoint that minted it.""" response = list_subscriptions_at( tenant_auth_setup["tenant_a"]["base_url"], tenant_api_keys["a"]["key"], ) > assert response.status_code == 200, ( f"Tenant A key should work on Tenant A gateway: {response_summary(response)}" ) E AssertionError: Tenant A key should work on Tenant A gateway: status=500 body={"error":"Exception thrown while generating token","exceptionCode":"AUTH_FAILURE","refId":"001"} E assert 500 == 200 E + where 500 = <Response [500]>.status_code test/e2e/tests/test_tenant_auth_isolation.py:194: AssertionError/workspace/source/test/e2e/tests/test_tenant_auth_isolation.py:215: Per-tenant OIDC tokens unavailable — set OIDC_TOKEN_URL (tenant-a) and OIDC_TOKEN_URL_TENANT_B (tenant-b), or OIDC_TOKEN_TENANT_A / OIDC_TOKEN_TENANT_B