apiVersion: extensions.istio.io/v1alpha1 kind: WasmPlugin metadata: creationTimestamp: "2026-06-03T23:13:25Z" generation: 564 labels: kuadrant.io/managed: "true" managedFields: - apiVersion: extensions.istio.io/v1alpha1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:labels: .: {} f:kuadrant.io/managed: {} f:ownerReferences: .: {} k:{"uid":"32d07e3d-0583-4745-9e65-a277aa09b43c"}: {} f:spec: .: {} f:phase: {} f:pluginConfig: .: {} f:actionSets: {} f:services: .: {} f:auth-service: .: {} f:endpoint: {} f:failureMode: {} f:timeout: {} f:type: {} f:ratelimit-check-service: .: {} f:endpoint: {} f:failureMode: {} f:timeout: {} f:type: {} f:ratelimit-report-service: .: {} f:endpoint: {} f:failureMode: {} f:timeout: {} f:type: {} f:ratelimit-service: .: {} f:endpoint: {} f:failureMode: {} f:timeout: {} f:type: {} f:targetRefs: {} f:url: {} manager: manager operation: Update time: "2026-06-03T23:40:02Z" name: kuadrant-maas-default-gateway namespace: openshift-ingress ownerReferences: - apiVersion: gateway.networking.k8s.io/v1 blockOwnerDeletion: true controller: true kind: Gateway name: maas-default-gateway uid: 32d07e3d-0583-4745-9e65-a277aa09b43c resourceVersion: "52182" uid: f210bdb2-4022-400c-a959-2f1d00b758db spec: phase: STATS pluginConfig: actionSets: - actions: - scope: cccb9f888be4be56e16cc32e380709be54a35972abf80517f8c40fc107282b39 service: auth-service sources: - authpolicy.kuadrant.io:openshift-ingress/gateway-default-auth - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: "0" predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-unconfigured-facebook-opt-125m-simulated-kserve-route service: ratelimit-check-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: responseBodyJSON("/usage/total_tokens") predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-unconfigured-facebook-opt-125m-simulated-kserve-route service: ratelimit-report-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny name: 64d90500d8794f2a71f2e0b7efe7d1edf27f0596436f07aadeb338bdfebd0d08 routeRuleConditions: hostnames: - maas.apps.f717e01e-8081-4124-81bf-46fd99b2f8c0.prod.konfluxeaas.com predicates: - request.url_path.startsWith('/llm/e2e-unconfigured-facebook-opt-125m-simulated/v1/chat/completions') - actions: - scope: 9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a service: auth-service sources: - authpolicy.kuadrant.io:openshift-ingress/gateway-default-auth - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: "0" predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-unconfigured-facebook-opt-125m-simulated-kserve-route service: ratelimit-check-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: responseBodyJSON("/usage/total_tokens") predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-unconfigured-facebook-opt-125m-simulated-kserve-route service: ratelimit-report-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny name: aa1d6034caf913c3c36c440b0a3d6ad31deb56f6aba822a00c615ac4e6d92a46 routeRuleConditions: hostnames: - maas.apps.f717e01e-8081-4124-81bf-46fd99b2f8c0.prod.konfluxeaas.com predicates: - request.url_path.startsWith('/llm/e2e-unconfigured-facebook-opt-125m-simulated/v1/chat/completions') - actions: - scope: 01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5 service: auth-service sources: - authpolicy.kuadrant.io:openshift-ingress/gateway-default-auth - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: "0" predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-unconfigured-facebook-opt-125m-simulated-kserve-route service: ratelimit-check-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: responseBodyJSON("/usage/total_tokens") predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-unconfigured-facebook-opt-125m-simulated-kserve-route service: ratelimit-report-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny name: decdd9bbce687be0f9ca4938d5fa1aae1f596c2f1d1e787b632628fc132d964d routeRuleConditions: hostnames: - maas.apps.f717e01e-8081-4124-81bf-46fd99b2f8c0.prod.konfluxeaas.com predicates: - request.url_path.startsWith('/llm/e2e-unconfigured-facebook-opt-125m-simulated/v1/completions') - actions: - scope: d81a415a9d6b7bd916041b26b5a288b98c3b5bc233efb3bb1e7ca74fc032a437 service: auth-service sources: - authpolicy.kuadrant.io:openshift-ingress/gateway-default-auth - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: "0" predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-unconfigured-facebook-opt-125m-simulated-kserve-route service: ratelimit-check-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: responseBodyJSON("/usage/total_tokens") predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-unconfigured-facebook-opt-125m-simulated-kserve-route service: ratelimit-report-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny name: 5c7c01eeb487ee35fabf930dc9342fa54219cf757c35d7455d94482098800d04 routeRuleConditions: hostnames: - maas.apps.f717e01e-8081-4124-81bf-46fd99b2f8c0.prod.konfluxeaas.com predicates: - request.url_path.startsWith('/llm/e2e-unconfigured-facebook-opt-125m-simulated/v1/completions') - actions: - scope: aae65b7ddc0033e778bd82057b67fb5cd3e029782d6fd444ddefece908444945 service: auth-service sources: - authpolicy.kuadrant.io:openshift-ingress/gateway-default-auth - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: "0" predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-unconfigured-facebook-opt-125m-simulated-kserve-route service: ratelimit-check-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: responseBodyJSON("/usage/total_tokens") predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-unconfigured-facebook-opt-125m-simulated-kserve-route service: ratelimit-report-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny name: 642fd3664d39a849d0654dbd8d3b3d28c2c4cf398b39ffeca9d9bffbc51b73af routeRuleConditions: hostnames: - maas.apps.f717e01e-8081-4124-81bf-46fd99b2f8c0.prod.konfluxeaas.com predicates: - request.url_path.startsWith('/llm/e2e-unconfigured-facebook-opt-125m-simulated/v1/responses') - actions: - scope: e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be service: auth-service sources: - authpolicy.kuadrant.io:openshift-ingress/gateway-default-auth - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: "0" predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-unconfigured-facebook-opt-125m-simulated-kserve-route service: ratelimit-check-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: responseBodyJSON("/usage/total_tokens") predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-unconfigured-facebook-opt-125m-simulated-kserve-route service: ratelimit-report-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny name: 54d08f76fed36962e11765c1895a925ff1a48c4f2b013286e0fd39f92b007354 routeRuleConditions: hostnames: - maas.apps.f717e01e-8081-4124-81bf-46fd99b2f8c0.prod.konfluxeaas.com predicates: - request.url_path.startsWith('/llm/e2e-unconfigured-facebook-opt-125m-simulated/v1/responses') - actions: - scope: edcceb5a2e0cf1edde0fc3ed43068ce5b123a6fdc41949959c2c3b7a5a48bf24 service: auth-service sources: - authpolicy.kuadrant.io:llm/maas-auth-premium-simulated-simulated-premium - conditionalData: - data: - expression: key: tokenlimit.models_as_a_service_premium_simulator_subscription_premium_simulated_simulated_premium_tokens__a2a80825 value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: "0" predicates: - auth.identity.selected_subscription_key == "models-as-a-service/premium-simulator-subscription@llm/premium-simulated-simulated-premium" && !request.path.endsWith("/v1/models") scope: llm/premium-simulated-simulated-premium-kserve-route service: ratelimit-check-service sources: - tokenratelimitpolicy.kuadrant.io:llm/maas-trlp-premium-simulated-simulated-premium - conditionalData: - data: - expression: key: tokenlimit.models_as_a_service_premium_simulator_subscription_premium_simulated_simulated_premium_tokens__a2a80825 value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: responseBodyJSON("/usage/total_tokens") predicates: - auth.identity.selected_subscription_key == "models-as-a-service/premium-simulator-subscription@llm/premium-simulated-simulated-premium" && !request.path.endsWith("/v1/models") scope: llm/premium-simulated-simulated-premium-kserve-route service: ratelimit-report-service sources: - tokenratelimitpolicy.kuadrant.io:llm/maas-trlp-premium-simulated-simulated-premium name: 3cdf3540899df868bf39dbea7fbf5575b660e9acdeb4dfbd7215ecfd98108a50 routeRuleConditions: hostnames: - maas.apps.f717e01e-8081-4124-81bf-46fd99b2f8c0.prod.konfluxeaas.com predicates: - request.url_path.startsWith('/llm/premium-simulated-simulated-premium/v1/chat/completions') - actions: - scope: 290fcbcface9546d9c9667b9925aed6bb7d99d80cc4eac41ce432606d6568f6d service: auth-service sources: - authpolicy.kuadrant.io:llm/maas-auth-premium-simulated-simulated-premium - conditionalData: - data: - expression: key: tokenlimit.models_as_a_service_premium_simulator_subscription_premium_simulated_simulated_premium_tokens__a2a80825 value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: "0" predicates: - auth.identity.selected_subscription_key == "models-as-a-service/premium-simulator-subscription@llm/premium-simulated-simulated-premium" && !request.path.endsWith("/v1/models") scope: llm/premium-simulated-simulated-premium-kserve-route service: ratelimit-check-service sources: - tokenratelimitpolicy.kuadrant.io:llm/maas-trlp-premium-simulated-simulated-premium - conditionalData: - data: - expression: key: tokenlimit.models_as_a_service_premium_simulator_subscription_premium_simulated_simulated_premium_tokens__a2a80825 value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: responseBodyJSON("/usage/total_tokens") predicates: - auth.identity.selected_subscription_key == "models-as-a-service/premium-simulator-subscription@llm/premium-simulated-simulated-premium" && !request.path.endsWith("/v1/models") scope: llm/premium-simulated-simulated-premium-kserve-route service: ratelimit-report-service sources: - tokenratelimitpolicy.kuadrant.io:llm/maas-trlp-premium-simulated-simulated-premium name: cf320e74d582be7af0115391aab1f0084471fdb9f6854bd98ac2a28df2f2d981 routeRuleConditions: hostnames: - maas.apps.f717e01e-8081-4124-81bf-46fd99b2f8c0.prod.konfluxeaas.com predicates: - request.url_path.startsWith('/llm/premium-simulated-simulated-premium/v1/chat/completions') - actions: - scope: bdc91161f6d2aa93e1f0bdc761e87370999b7b62803bc46a203347b0f626e17d service: auth-service sources: - authpolicy.kuadrant.io:llm/maas-auth-premium-simulated-simulated-premium - conditionalData: - data: - expression: key: tokenlimit.models_as_a_service_premium_simulator_subscription_premium_simulated_simulated_premium_tokens__a2a80825 value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: "0" predicates: - auth.identity.selected_subscription_key == "models-as-a-service/premium-simulator-subscription@llm/premium-simulated-simulated-premium" && !request.path.endsWith("/v1/models") scope: llm/premium-simulated-simulated-premium-kserve-route service: ratelimit-check-service sources: - tokenratelimitpolicy.kuadrant.io:llm/maas-trlp-premium-simulated-simulated-premium - conditionalData: - data: - expression: key: tokenlimit.models_as_a_service_premium_simulator_subscription_premium_simulated_simulated_premium_tokens__a2a80825 value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: responseBodyJSON("/usage/total_tokens") predicates: - auth.identity.selected_subscription_key == "models-as-a-service/premium-simulator-subscription@llm/premium-simulated-simulated-premium" && !request.path.endsWith("/v1/models") scope: llm/premium-simulated-simulated-premium-kserve-route service: ratelimit-report-service sources: - tokenratelimitpolicy.kuadrant.io:llm/maas-trlp-premium-simulated-simulated-premium name: e50bd31c1380ff64c11e85956378999362dbab53760220a0488460b76373d841 routeRuleConditions: hostnames: - maas.apps.f717e01e-8081-4124-81bf-46fd99b2f8c0.prod.konfluxeaas.com predicates: - request.url_path.startsWith('/llm/premium-simulated-simulated-premium/v1/completions') - actions: - scope: 80f10756c0e833d16937036ed66f1daf5bef95559ef05a5e852766b97b9bdaef service: auth-service sources: - authpolicy.kuadrant.io:llm/maas-auth-premium-simulated-simulated-premium - conditionalData: - data: - expression: key: tokenlimit.models_as_a_service_premium_simulator_subscription_premium_simulated_simulated_premium_tokens__a2a80825 value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: "0" predicates: - auth.identity.selected_subscription_key == "models-as-a-service/premium-simulator-subscription@llm/premium-simulated-simulated-premium" && !request.path.endsWith("/v1/models") scope: llm/premium-simulated-simulated-premium-kserve-route service: ratelimit-check-service sources: - tokenratelimitpolicy.kuadrant.io:llm/maas-trlp-premium-simulated-simulated-premium - conditionalData: - data: - expression: key: tokenlimit.models_as_a_service_premium_simulator_subscription_premium_simulated_simulated_premium_tokens__a2a80825 value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: responseBodyJSON("/usage/total_tokens") predicates: - auth.identity.selected_subscription_key == "models-as-a-service/premium-simulator-subscription@llm/premium-simulated-simulated-premium" && !request.path.endsWith("/v1/models") scope: llm/premium-simulated-simulated-premium-kserve-route service: ratelimit-report-service sources: - tokenratelimitpolicy.kuadrant.io:llm/maas-trlp-premium-simulated-simulated-premium name: 2077e92d4611b07200afd914f742a5f60e31015f2fd49874d5b5a541346603cb routeRuleConditions: hostnames: - maas.apps.f717e01e-8081-4124-81bf-46fd99b2f8c0.prod.konfluxeaas.com predicates: - request.url_path.startsWith('/llm/premium-simulated-simulated-premium/v1/completions') - actions: - scope: 4dc577fd60594d78a4a8bebe396f4b5a928f41bdc3f95c06d717cf1ddc3158b2 service: auth-service sources: - authpolicy.kuadrant.io:llm/maas-auth-premium-simulated-simulated-premium - conditionalData: - data: - expression: key: tokenlimit.models_as_a_service_premium_simulator_subscription_premium_simulated_simulated_premium_tokens__a2a80825 value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: "0" predicates: - auth.identity.selected_subscription_key == "models-as-a-service/premium-simulator-subscription@llm/premium-simulated-simulated-premium" && !request.path.endsWith("/v1/models") scope: llm/premium-simulated-simulated-premium-kserve-route service: ratelimit-check-service sources: - tokenratelimitpolicy.kuadrant.io:llm/maas-trlp-premium-simulated-simulated-premium - conditionalData: - data: - expression: key: tokenlimit.models_as_a_service_premium_simulator_subscription_premium_simulated_simulated_premium_tokens__a2a80825 value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: responseBodyJSON("/usage/total_tokens") predicates: - auth.identity.selected_subscription_key == "models-as-a-service/premium-simulator-subscription@llm/premium-simulated-simulated-premium" && !request.path.endsWith("/v1/models") scope: llm/premium-simulated-simulated-premium-kserve-route service: ratelimit-report-service sources: - tokenratelimitpolicy.kuadrant.io:llm/maas-trlp-premium-simulated-simulated-premium name: aada69dc16f067340266a825e933ee178521821d4ee92e4feda239bed7fccd7e routeRuleConditions: hostnames: - maas.apps.f717e01e-8081-4124-81bf-46fd99b2f8c0.prod.konfluxeaas.com predicates: - request.url_path.startsWith('/llm/premium-simulated-simulated-premium/v1/responses') - actions: - scope: 98bc217fbd0e2cf75ea4dcf982124867212376a116bb6e3b753f8445aead6170 service: auth-service sources: - authpolicy.kuadrant.io:llm/maas-auth-premium-simulated-simulated-premium - conditionalData: - data: - expression: key: tokenlimit.models_as_a_service_premium_simulator_subscription_premium_simulated_simulated_premium_tokens__a2a80825 value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: "0" predicates: - auth.identity.selected_subscription_key == "models-as-a-service/premium-simulator-subscription@llm/premium-simulated-simulated-premium" && !request.path.endsWith("/v1/models") scope: llm/premium-simulated-simulated-premium-kserve-route service: ratelimit-check-service sources: - tokenratelimitpolicy.kuadrant.io:llm/maas-trlp-premium-simulated-simulated-premium - conditionalData: - data: - expression: key: tokenlimit.models_as_a_service_premium_simulator_subscription_premium_simulated_simulated_premium_tokens__a2a80825 value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: responseBodyJSON("/usage/total_tokens") predicates: - auth.identity.selected_subscription_key == "models-as-a-service/premium-simulator-subscription@llm/premium-simulated-simulated-premium" && !request.path.endsWith("/v1/models") scope: llm/premium-simulated-simulated-premium-kserve-route service: ratelimit-report-service sources: - tokenratelimitpolicy.kuadrant.io:llm/maas-trlp-premium-simulated-simulated-premium name: cf24ab9bd6b66e3f789e2f427677fbad55cf47ff1f4efaa32a0286241481289d routeRuleConditions: hostnames: - maas.apps.f717e01e-8081-4124-81bf-46fd99b2f8c0.prod.konfluxeaas.com predicates: - request.url_path.startsWith('/llm/premium-simulated-simulated-premium/v1/responses') - actions: - scope: 18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76 service: auth-service sources: - authpolicy.kuadrant.io:llm/maas-auth-facebook-opt-125m-simulated - conditionalData: - data: - expression: key: tokenlimit.models_as_a_service_simulator_subscription_facebook_opt_125m_simulated_tokens__87db8427 value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: "0" predicates: - auth.identity.selected_subscription_key == "models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated" && !request.path.endsWith("/v1/models") scope: llm/facebook-opt-125m-simulated-kserve-route service: ratelimit-check-service sources: - tokenratelimitpolicy.kuadrant.io:llm/maas-trlp-facebook-opt-125m-simulated - conditionalData: - data: - expression: key: tokenlimit.models_as_a_service_simulator_subscription_facebook_opt_125m_simulated_tokens__87db8427 value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: responseBodyJSON("/usage/total_tokens") predicates: - auth.identity.selected_subscription_key == "models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated" && !request.path.endsWith("/v1/models") scope: llm/facebook-opt-125m-simulated-kserve-route service: ratelimit-report-service sources: - tokenratelimitpolicy.kuadrant.io:llm/maas-trlp-facebook-opt-125m-simulated name: ca904f5b0af4d92bc15cb7c9d859ca455eb4bb007cc23cc01543d3d8df3c7068 routeRuleConditions: hostnames: - maas.apps.f717e01e-8081-4124-81bf-46fd99b2f8c0.prod.konfluxeaas.com predicates: - request.url_path.startsWith('/llm/facebook-opt-125m-simulated/v1/chat/completions') - actions: - scope: 5aa0fd746a1cbe4557cf771f0b5f5c4020da5a6444c58d701a6d039232d7faab service: auth-service sources: - authpolicy.kuadrant.io:llm/maas-auth-facebook-opt-125m-simulated - conditionalData: - data: - expression: key: tokenlimit.models_as_a_service_simulator_subscription_facebook_opt_125m_simulated_tokens__87db8427 value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: "0" predicates: - auth.identity.selected_subscription_key == "models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated" && !request.path.endsWith("/v1/models") scope: llm/facebook-opt-125m-simulated-kserve-route service: ratelimit-check-service sources: - tokenratelimitpolicy.kuadrant.io:llm/maas-trlp-facebook-opt-125m-simulated - conditionalData: - data: - expression: key: tokenlimit.models_as_a_service_simulator_subscription_facebook_opt_125m_simulated_tokens__87db8427 value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: responseBodyJSON("/usage/total_tokens") predicates: - auth.identity.selected_subscription_key == "models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated" && !request.path.endsWith("/v1/models") scope: llm/facebook-opt-125m-simulated-kserve-route service: ratelimit-report-service sources: - tokenratelimitpolicy.kuadrant.io:llm/maas-trlp-facebook-opt-125m-simulated name: 0ef5c1ea021c58ed6406fe27aa11691a3e03d194e00fc87a8c0f668674046876 routeRuleConditions: hostnames: - maas.apps.f717e01e-8081-4124-81bf-46fd99b2f8c0.prod.konfluxeaas.com predicates: - request.url_path.startsWith('/llm/facebook-opt-125m-simulated/v1/chat/completions') - actions: - scope: e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a service: auth-service sources: - authpolicy.kuadrant.io:openshift-ingress/gateway-default-auth - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: "0" predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-distinct-2-simulated-kserve-route service: ratelimit-check-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: responseBodyJSON("/usage/total_tokens") predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-distinct-2-simulated-kserve-route service: ratelimit-report-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny name: d79a1255617eaf03fe688e6a3e55ca91ef3154dc9ad413e72a009122e1f89621 routeRuleConditions: hostnames: - maas.apps.f717e01e-8081-4124-81bf-46fd99b2f8c0.prod.konfluxeaas.com predicates: - request.url_path.startsWith('/llm/e2e-distinct-2-simulated/v1/chat/completions') - actions: - scope: df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346 service: auth-service sources: - authpolicy.kuadrant.io:openshift-ingress/gateway-default-auth - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: "0" predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-distinct-2-simulated-kserve-route service: ratelimit-check-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: responseBodyJSON("/usage/total_tokens") predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-distinct-2-simulated-kserve-route service: ratelimit-report-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny name: 16e79a74b12d114ea56b1ff12d38a52bd2d87252e085ecceb842f55d47f3dbdb routeRuleConditions: hostnames: - maas.apps.f717e01e-8081-4124-81bf-46fd99b2f8c0.prod.konfluxeaas.com predicates: - request.url_path.startsWith('/llm/e2e-distinct-2-simulated/v1/chat/completions') - actions: - scope: 9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5 service: auth-service sources: - authpolicy.kuadrant.io:openshift-ingress/gateway-default-auth - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: "0" predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-unconfigured-facebook-opt-125m-simulated-kserve-route service: ratelimit-check-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: responseBodyJSON("/usage/total_tokens") predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-unconfigured-facebook-opt-125m-simulated-kserve-route service: ratelimit-report-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny name: 3e1fceb3ac9a7e6b4491cdfdb91bb12ee0a20363ddc8d80f735fb837039dd1c4 routeRuleConditions: hostnames: - maas.apps.f717e01e-8081-4124-81bf-46fd99b2f8c0.prod.konfluxeaas.com predicates: - request.url_path.startsWith('/llm/e2e-unconfigured-facebook-opt-125m-simulated') - actions: - scope: 8b68b883dd0441c7b1f53f6adc6c3add12f8912a17afae4d05f1f1bbc1b53f9a service: auth-service sources: - authpolicy.kuadrant.io:openshift-ingress/gateway-default-auth - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: "0" predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-unconfigured-facebook-opt-125m-simulated-kserve-route service: ratelimit-check-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: responseBodyJSON("/usage/total_tokens") predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-unconfigured-facebook-opt-125m-simulated-kserve-route service: ratelimit-report-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny name: 7d33deb72325fadb559191a5826ec43b2e1353bcf271381b372ddb5b97db9963 routeRuleConditions: hostnames: - maas.apps.f717e01e-8081-4124-81bf-46fd99b2f8c0.prod.konfluxeaas.com predicates: - request.url_path.startsWith('/llm/e2e-unconfigured-facebook-opt-125m-simulated') - actions: - scope: 319a353672fc7601c875fa3f8b807adf60b64f093f022b2a1c3dfef3ac8cd4f4 service: auth-service sources: - authpolicy.kuadrant.io:openshift-ingress/gateway-default-auth - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: "0" predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-trlp-test-simulated-kserve-route service: ratelimit-check-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: responseBodyJSON("/usage/total_tokens") predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-trlp-test-simulated-kserve-route service: ratelimit-report-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny name: 8c97ce4fa7398e0cb775f6d9a7b2e6e5730b582c1a3ed95d9223d04c77ae2d49 routeRuleConditions: hostnames: - maas.apps.f717e01e-8081-4124-81bf-46fd99b2f8c0.prod.konfluxeaas.com predicates: - request.url_path.startsWith('/llm/e2e-trlp-test-simulated/v1/chat/completions') - actions: - scope: 4c297061aecf4870589c6c3c778bd16a5e111a166b5adab99e23173a5d9a9b82 service: auth-service sources: - authpolicy.kuadrant.io:openshift-ingress/gateway-default-auth - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: "0" predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-trlp-test-simulated-kserve-route service: ratelimit-check-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: responseBodyJSON("/usage/total_tokens") predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-trlp-test-simulated-kserve-route service: ratelimit-report-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny name: 06d47f010b205648448633f9a6460033c8a51eae441b750f9a677d1eff99f1a2 routeRuleConditions: hostnames: - maas.apps.f717e01e-8081-4124-81bf-46fd99b2f8c0.prod.konfluxeaas.com predicates: - request.url_path.startsWith('/llm/e2e-trlp-test-simulated/v1/chat/completions') - actions: - scope: 0740694b94da2b1f6093b148b85b9ec044f97848654ae7c0cc966ee03e0c4830 service: auth-service sources: - authpolicy.kuadrant.io:openshift-ingress/gateway-default-auth - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: "0" predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-distinct-simulated-kserve-route service: ratelimit-check-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: responseBodyJSON("/usage/total_tokens") predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-distinct-simulated-kserve-route service: ratelimit-report-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny name: a5450a687d5947d894724deb770a9a1798a382f70e73a857e1e6d8de14fe1d60 routeRuleConditions: hostnames: - maas.apps.f717e01e-8081-4124-81bf-46fd99b2f8c0.prod.konfluxeaas.com predicates: - request.url_path.startsWith('/llm/e2e-distinct-simulated/v1/chat/completions') - actions: - scope: 3dc75fc8307b952a3e873400cf417e90f2861e8a225abec4b22708deb7901db7 service: auth-service sources: - authpolicy.kuadrant.io:openshift-ingress/gateway-default-auth - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: "0" predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-distinct-simulated-kserve-route service: ratelimit-check-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: responseBodyJSON("/usage/total_tokens") predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-distinct-simulated-kserve-route service: ratelimit-report-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny name: 4c93cc756c5d93d71118bea4c6a8e5fc7793f9d57c0d004e68245eabf23d38aa routeRuleConditions: hostnames: - maas.apps.f717e01e-8081-4124-81bf-46fd99b2f8c0.prod.konfluxeaas.com predicates: - request.url_path.startsWith('/llm/e2e-distinct-simulated/v1/chat/completions') - actions: - scope: cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a service: auth-service sources: - authpolicy.kuadrant.io:llm/maas-auth-facebook-opt-125m-simulated - conditionalData: - data: - expression: key: tokenlimit.models_as_a_service_simulator_subscription_facebook_opt_125m_simulated_tokens__87db8427 value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: "0" predicates: - auth.identity.selected_subscription_key == "models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated" && !request.path.endsWith("/v1/models") scope: llm/facebook-opt-125m-simulated-kserve-route service: ratelimit-check-service sources: - tokenratelimitpolicy.kuadrant.io:llm/maas-trlp-facebook-opt-125m-simulated - conditionalData: - data: - expression: key: tokenlimit.models_as_a_service_simulator_subscription_facebook_opt_125m_simulated_tokens__87db8427 value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: responseBodyJSON("/usage/total_tokens") predicates: - auth.identity.selected_subscription_key == "models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated" && !request.path.endsWith("/v1/models") scope: llm/facebook-opt-125m-simulated-kserve-route service: ratelimit-report-service sources: - tokenratelimitpolicy.kuadrant.io:llm/maas-trlp-facebook-opt-125m-simulated name: 71a0494f31869280e02d4f279dab2d9b7e9bc6acd3e8c14a7fe08d52f3594454 routeRuleConditions: hostnames: - maas.apps.f717e01e-8081-4124-81bf-46fd99b2f8c0.prod.konfluxeaas.com predicates: - request.url_path.startsWith('/llm/facebook-opt-125m-simulated/v1/completions') - actions: - scope: aa8134dca1e9e412ac99acf6a54001c807c3fb733db7d2dce945f529dd033597 service: auth-service sources: - authpolicy.kuadrant.io:llm/maas-auth-facebook-opt-125m-simulated - conditionalData: - data: - expression: key: tokenlimit.models_as_a_service_simulator_subscription_facebook_opt_125m_simulated_tokens__87db8427 value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: "0" predicates: - auth.identity.selected_subscription_key == "models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated" && !request.path.endsWith("/v1/models") scope: llm/facebook-opt-125m-simulated-kserve-route service: ratelimit-check-service sources: - tokenratelimitpolicy.kuadrant.io:llm/maas-trlp-facebook-opt-125m-simulated - conditionalData: - data: - expression: key: tokenlimit.models_as_a_service_simulator_subscription_facebook_opt_125m_simulated_tokens__87db8427 value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: responseBodyJSON("/usage/total_tokens") predicates: - auth.identity.selected_subscription_key == "models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated" && !request.path.endsWith("/v1/models") scope: llm/facebook-opt-125m-simulated-kserve-route service: ratelimit-report-service sources: - tokenratelimitpolicy.kuadrant.io:llm/maas-trlp-facebook-opt-125m-simulated name: ac7b2df7163503a87771bd81c668f243919b7c0537978d27b14b1535ca66ab8c routeRuleConditions: hostnames: - maas.apps.f717e01e-8081-4124-81bf-46fd99b2f8c0.prod.konfluxeaas.com predicates: - request.url_path.startsWith('/llm/facebook-opt-125m-simulated/v1/completions') - actions: - scope: e716e70ac29d4c7bea453bb99861c5f15b3d9860b623d5ef2c7badd4e1cb9bc9 service: auth-service sources: - authpolicy.kuadrant.io:llm/maas-auth-facebook-opt-125m-simulated - conditionalData: - data: - expression: key: tokenlimit.models_as_a_service_simulator_subscription_facebook_opt_125m_simulated_tokens__87db8427 value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: "0" predicates: - auth.identity.selected_subscription_key == "models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated" && !request.path.endsWith("/v1/models") scope: llm/facebook-opt-125m-simulated-kserve-route service: ratelimit-check-service sources: - tokenratelimitpolicy.kuadrant.io:llm/maas-trlp-facebook-opt-125m-simulated - conditionalData: - data: - expression: key: tokenlimit.models_as_a_service_simulator_subscription_facebook_opt_125m_simulated_tokens__87db8427 value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: responseBodyJSON("/usage/total_tokens") predicates: - auth.identity.selected_subscription_key == "models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated" && !request.path.endsWith("/v1/models") scope: llm/facebook-opt-125m-simulated-kserve-route service: ratelimit-report-service sources: - tokenratelimitpolicy.kuadrant.io:llm/maas-trlp-facebook-opt-125m-simulated name: af4d4b404069b6f3838e33607a9f7ac28ec85ea13942d5081f078bc98ead7647 routeRuleConditions: hostnames: - maas.apps.f717e01e-8081-4124-81bf-46fd99b2f8c0.prod.konfluxeaas.com predicates: - request.url_path.startsWith('/llm/facebook-opt-125m-simulated/v1/responses') - actions: - scope: 311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418 service: auth-service sources: - authpolicy.kuadrant.io:llm/maas-auth-facebook-opt-125m-simulated - conditionalData: - data: - expression: key: tokenlimit.models_as_a_service_simulator_subscription_facebook_opt_125m_simulated_tokens__87db8427 value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: "0" predicates: - auth.identity.selected_subscription_key == "models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated" && !request.path.endsWith("/v1/models") scope: llm/facebook-opt-125m-simulated-kserve-route service: ratelimit-check-service sources: - tokenratelimitpolicy.kuadrant.io:llm/maas-trlp-facebook-opt-125m-simulated - conditionalData: - data: - expression: key: tokenlimit.models_as_a_service_simulator_subscription_facebook_opt_125m_simulated_tokens__87db8427 value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: responseBodyJSON("/usage/total_tokens") predicates: - auth.identity.selected_subscription_key == "models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated" && !request.path.endsWith("/v1/models") scope: llm/facebook-opt-125m-simulated-kserve-route service: ratelimit-report-service sources: - tokenratelimitpolicy.kuadrant.io:llm/maas-trlp-facebook-opt-125m-simulated name: b81dcc1133e3940ed93a18e270fe6a5ae37e56456d46fa5b5d4badf32621e54d routeRuleConditions: hostnames: - maas.apps.f717e01e-8081-4124-81bf-46fd99b2f8c0.prod.konfluxeaas.com predicates: - request.url_path.startsWith('/llm/facebook-opt-125m-simulated/v1/responses') - actions: - scope: 331dc257e65f55f80700a586f7807093eda7b3d8e7d91215dc3c47731508480c service: auth-service sources: - authpolicy.kuadrant.io:openshift-ingress/gateway-default-auth - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: "0" predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-distinct-2-simulated-kserve-route service: ratelimit-check-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: responseBodyJSON("/usage/total_tokens") predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-distinct-2-simulated-kserve-route service: ratelimit-report-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny name: 6de286729cab0c5655feaa54bfe6a15aef7d013522a458a88077dce114c42083 routeRuleConditions: hostnames: - maas.apps.f717e01e-8081-4124-81bf-46fd99b2f8c0.prod.konfluxeaas.com predicates: - request.url_path.startsWith('/llm/e2e-distinct-2-simulated/v1/completions') - actions: - scope: c245170da89e49f061561989e94654ede8e3261330d5fce018b1d279501abd0e service: auth-service sources: - authpolicy.kuadrant.io:openshift-ingress/gateway-default-auth - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: "0" predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-distinct-2-simulated-kserve-route service: ratelimit-check-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: responseBodyJSON("/usage/total_tokens") predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-distinct-2-simulated-kserve-route service: ratelimit-report-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny name: ebd4eadd9b118d5b77bf17b5b114a80b0b316c0d71c5e82b7dcc2efad1bf78ad routeRuleConditions: hostnames: - maas.apps.f717e01e-8081-4124-81bf-46fd99b2f8c0.prod.konfluxeaas.com predicates: - request.url_path.startsWith('/llm/e2e-distinct-2-simulated/v1/completions') - actions: - scope: bf72a6316f6ed79299511e58d068836cdc71dbca5e23944f783c9340ffa0aee1 service: auth-service sources: - authpolicy.kuadrant.io:openshift-ingress/gateway-default-auth - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: "0" predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-trlp-test-simulated-kserve-route service: ratelimit-check-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: responseBodyJSON("/usage/total_tokens") predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-trlp-test-simulated-kserve-route service: ratelimit-report-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny name: 0baf165ae1fa7051722ce378e08a5fa1cc2228f09836cfdc4b9b1eb6e063defa routeRuleConditions: hostnames: - maas.apps.f717e01e-8081-4124-81bf-46fd99b2f8c0.prod.konfluxeaas.com predicates: - request.url_path.startsWith('/llm/e2e-trlp-test-simulated/v1/completions') - actions: - scope: cb857b3e9077f5383c92f635f721c5106c8cce20a9467a6d67f8c67ebc9d46c7 service: auth-service sources: - authpolicy.kuadrant.io:openshift-ingress/gateway-default-auth - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: "0" predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-trlp-test-simulated-kserve-route service: ratelimit-check-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: responseBodyJSON("/usage/total_tokens") predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-trlp-test-simulated-kserve-route service: ratelimit-report-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny name: fe4cfc5752a45256c2fa989919acfe8666391a91433803afb9326d7ce0c3e676 routeRuleConditions: hostnames: - maas.apps.f717e01e-8081-4124-81bf-46fd99b2f8c0.prod.konfluxeaas.com predicates: - request.url_path.startsWith('/llm/e2e-trlp-test-simulated/v1/completions') - actions: - scope: 414449ae595d12294cda43c4706566f5644d67ef6848de245e6caee2cdb069f8 service: auth-service sources: - authpolicy.kuadrant.io:openshift-ingress/gateway-default-auth - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: "0" predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-distinct-2-simulated-kserve-route service: ratelimit-check-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: responseBodyJSON("/usage/total_tokens") predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-distinct-2-simulated-kserve-route service: ratelimit-report-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny name: 9110fd237641817352fd5d727e2bcd1850b7daa8fdfad0934620c5073642f06e routeRuleConditions: hostnames: - maas.apps.f717e01e-8081-4124-81bf-46fd99b2f8c0.prod.konfluxeaas.com predicates: - request.url_path.startsWith('/llm/e2e-distinct-2-simulated/v1/responses') - actions: - scope: 35d34d59676c333235d7c9f02273e0380bb39f27cfd30856fedc0f7c0e5f79aa service: auth-service sources: - authpolicy.kuadrant.io:openshift-ingress/gateway-default-auth - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: "0" predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-distinct-2-simulated-kserve-route service: ratelimit-check-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: responseBodyJSON("/usage/total_tokens") predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-distinct-2-simulated-kserve-route service: ratelimit-report-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny name: 4b00bb99883019327df5b0d1d4affc8fd799ebdaf41be1df8cf873201e35bf31 routeRuleConditions: hostnames: - maas.apps.f717e01e-8081-4124-81bf-46fd99b2f8c0.prod.konfluxeaas.com predicates: - request.url_path.startsWith('/llm/e2e-distinct-2-simulated/v1/responses') - actions: - scope: 3c0d47082320c9bb02d3788ab2b052c696af91abc2ae438437ae71a26936c7c2 service: auth-service sources: - authpolicy.kuadrant.io:openshift-ingress/gateway-default-auth - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: "0" predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-distinct-simulated-kserve-route service: ratelimit-check-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: responseBodyJSON("/usage/total_tokens") predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-distinct-simulated-kserve-route service: ratelimit-report-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny name: 87f79854efea93250f1e2c57a1dfbba72c414f5f6e0c7007718ef506aaa26bcc routeRuleConditions: hostnames: - maas.apps.f717e01e-8081-4124-81bf-46fd99b2f8c0.prod.konfluxeaas.com predicates: - request.url_path.startsWith('/llm/e2e-distinct-simulated/v1/completions') - actions: - scope: c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76 service: auth-service sources: - authpolicy.kuadrant.io:openshift-ingress/gateway-default-auth - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: "0" predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-distinct-simulated-kserve-route service: ratelimit-check-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: responseBodyJSON("/usage/total_tokens") predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-distinct-simulated-kserve-route service: ratelimit-report-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny name: 8f8fa0e79dda7129e3cfa084e59aa828e97f77e4455d54cf9876e8c85552727b routeRuleConditions: hostnames: - maas.apps.f717e01e-8081-4124-81bf-46fd99b2f8c0.prod.konfluxeaas.com predicates: - request.url_path.startsWith('/llm/e2e-distinct-simulated/v1/completions') - actions: - scope: 6cb5c4c9ff83dac784e73ce73f1d83f0bef8b0f7a10e074445fe944fab33ef4e service: auth-service sources: - authpolicy.kuadrant.io:openshift-ingress/gateway-default-auth - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: "0" predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-trlp-test-simulated-kserve-route service: ratelimit-check-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: responseBodyJSON("/usage/total_tokens") predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-trlp-test-simulated-kserve-route service: ratelimit-report-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny name: 900c14eab2208d3256c8687698f40db72c25d8657570b5579cba87a496f6cf4e routeRuleConditions: hostnames: - maas.apps.f717e01e-8081-4124-81bf-46fd99b2f8c0.prod.konfluxeaas.com predicates: - request.url_path.startsWith('/llm/e2e-trlp-test-simulated/v1/responses') - actions: - scope: df733b2c652bfe2458c9e19932b1091e939c1a62178d6879462b3b4f73fca4bb service: auth-service sources: - authpolicy.kuadrant.io:openshift-ingress/gateway-default-auth - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: "0" predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-trlp-test-simulated-kserve-route service: ratelimit-check-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: responseBodyJSON("/usage/total_tokens") predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-trlp-test-simulated-kserve-route service: ratelimit-report-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny name: f5445b4ede1f5eb0e20b04c1947af939e2551dd124a5dbade0124b6c5375630c routeRuleConditions: hostnames: - maas.apps.f717e01e-8081-4124-81bf-46fd99b2f8c0.prod.konfluxeaas.com predicates: - request.url_path.startsWith('/llm/e2e-trlp-test-simulated/v1/responses') - actions: - scope: 0f8e1a2bede8509cb76d997b959699aa0135fff9780ffed78ed7277e9c897b5e service: auth-service sources: - authpolicy.kuadrant.io:openshift-ingress/gateway-default-auth - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: "0" predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-distinct-simulated-kserve-route service: ratelimit-check-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: responseBodyJSON("/usage/total_tokens") predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-distinct-simulated-kserve-route service: ratelimit-report-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny name: 99ae2cfa4baa9e32a5164a8a965d5331e0ac38e420dcb2710777059423b7fd79 routeRuleConditions: hostnames: - maas.apps.f717e01e-8081-4124-81bf-46fd99b2f8c0.prod.konfluxeaas.com predicates: - request.url_path.startsWith('/llm/e2e-distinct-simulated/v1/responses') - actions: - scope: d3b195a61a7f24c6bf1fba40f9f2e2565facb6af92e959c1546ac398a9172618 service: auth-service sources: - authpolicy.kuadrant.io:openshift-ingress/gateway-default-auth - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: "0" predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-distinct-simulated-kserve-route service: ratelimit-check-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: responseBodyJSON("/usage/total_tokens") predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-distinct-simulated-kserve-route service: ratelimit-report-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny name: e47d62a1f1d3627543c19cc04fd8b3660577282a6372c42f709e7d788b65740e routeRuleConditions: hostnames: - maas.apps.f717e01e-8081-4124-81bf-46fd99b2f8c0.prod.konfluxeaas.com predicates: - request.url_path.startsWith('/llm/e2e-distinct-simulated/v1/responses') - actions: - scope: 7371c34ce8e4df2309ee8f952c87f921947b289427b6e9ea579dcb9970fc1b86 service: auth-service sources: - authpolicy.kuadrant.io:llm/maas-auth-premium-simulated-simulated-premium - conditionalData: - data: - expression: key: tokenlimit.models_as_a_service_premium_simulator_subscription_premium_simulated_simulated_premium_tokens__a2a80825 value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: "0" predicates: - auth.identity.selected_subscription_key == "models-as-a-service/premium-simulator-subscription@llm/premium-simulated-simulated-premium" && !request.path.endsWith("/v1/models") scope: llm/premium-simulated-simulated-premium-kserve-route service: ratelimit-check-service sources: - tokenratelimitpolicy.kuadrant.io:llm/maas-trlp-premium-simulated-simulated-premium - conditionalData: - data: - expression: key: tokenlimit.models_as_a_service_premium_simulator_subscription_premium_simulated_simulated_premium_tokens__a2a80825 value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: responseBodyJSON("/usage/total_tokens") predicates: - auth.identity.selected_subscription_key == "models-as-a-service/premium-simulator-subscription@llm/premium-simulated-simulated-premium" && !request.path.endsWith("/v1/models") scope: llm/premium-simulated-simulated-premium-kserve-route service: ratelimit-report-service sources: - tokenratelimitpolicy.kuadrant.io:llm/maas-trlp-premium-simulated-simulated-premium name: 9cdd5e6beb3b19bf6081f1f9519e1018db680cff2ea79e2657d38de0e92fcb7d routeRuleConditions: hostnames: - maas.apps.f717e01e-8081-4124-81bf-46fd99b2f8c0.prod.konfluxeaas.com predicates: - request.url_path.startsWith('/llm/premium-simulated-simulated-premium') - actions: - scope: c2fa62f1c5f5915dac9085511eb547dc6a04d451cabce32f7fc86613d440b2a7 service: auth-service sources: - authpolicy.kuadrant.io:llm/maas-auth-premium-simulated-simulated-premium - conditionalData: - data: - expression: key: tokenlimit.models_as_a_service_premium_simulator_subscription_premium_simulated_simulated_premium_tokens__a2a80825 value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: "0" predicates: - auth.identity.selected_subscription_key == "models-as-a-service/premium-simulator-subscription@llm/premium-simulated-simulated-premium" && !request.path.endsWith("/v1/models") scope: llm/premium-simulated-simulated-premium-kserve-route service: ratelimit-check-service sources: - tokenratelimitpolicy.kuadrant.io:llm/maas-trlp-premium-simulated-simulated-premium - conditionalData: - data: - expression: key: tokenlimit.models_as_a_service_premium_simulator_subscription_premium_simulated_simulated_premium_tokens__a2a80825 value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: responseBodyJSON("/usage/total_tokens") predicates: - auth.identity.selected_subscription_key == "models-as-a-service/premium-simulator-subscription@llm/premium-simulated-simulated-premium" && !request.path.endsWith("/v1/models") scope: llm/premium-simulated-simulated-premium-kserve-route service: ratelimit-report-service sources: - tokenratelimitpolicy.kuadrant.io:llm/maas-trlp-premium-simulated-simulated-premium name: eeff6526d98fdbdc935b0073d2ac278498aa8434f8f838a334b6ea29f513a24e routeRuleConditions: hostnames: - maas.apps.f717e01e-8081-4124-81bf-46fd99b2f8c0.prod.konfluxeaas.com predicates: - request.url_path.startsWith('/llm/premium-simulated-simulated-premium') - actions: - scope: 4e93f1986841c16506ee726a8192ec71d2a8bafa10275979a4129ddd337542b4 service: auth-service sources: - authpolicy.kuadrant.io:llm/maas-auth-facebook-opt-125m-simulated - conditionalData: - data: - expression: key: tokenlimit.models_as_a_service_simulator_subscription_facebook_opt_125m_simulated_tokens__87db8427 value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: "0" predicates: - auth.identity.selected_subscription_key == "models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated" && !request.path.endsWith("/v1/models") scope: llm/facebook-opt-125m-simulated-kserve-route service: ratelimit-check-service sources: - tokenratelimitpolicy.kuadrant.io:llm/maas-trlp-facebook-opt-125m-simulated - conditionalData: - data: - expression: key: tokenlimit.models_as_a_service_simulator_subscription_facebook_opt_125m_simulated_tokens__87db8427 value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: responseBodyJSON("/usage/total_tokens") predicates: - auth.identity.selected_subscription_key == "models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated" && !request.path.endsWith("/v1/models") scope: llm/facebook-opt-125m-simulated-kserve-route service: ratelimit-report-service sources: - tokenratelimitpolicy.kuadrant.io:llm/maas-trlp-facebook-opt-125m-simulated name: cbdba431ec3ea0cf39e8721aa95880988ec8dc34ecb095c0697ed531b18fd26d routeRuleConditions: hostnames: - maas.apps.f717e01e-8081-4124-81bf-46fd99b2f8c0.prod.konfluxeaas.com predicates: - request.url_path.startsWith('/llm/facebook-opt-125m-simulated') - actions: - scope: 3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3 service: auth-service sources: - authpolicy.kuadrant.io:llm/maas-auth-facebook-opt-125m-simulated - conditionalData: - data: - expression: key: tokenlimit.models_as_a_service_simulator_subscription_facebook_opt_125m_simulated_tokens__87db8427 value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: "0" predicates: - auth.identity.selected_subscription_key == "models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated" && !request.path.endsWith("/v1/models") scope: llm/facebook-opt-125m-simulated-kserve-route service: ratelimit-check-service sources: - tokenratelimitpolicy.kuadrant.io:llm/maas-trlp-facebook-opt-125m-simulated - conditionalData: - data: - expression: key: tokenlimit.models_as_a_service_simulator_subscription_facebook_opt_125m_simulated_tokens__87db8427 value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: responseBodyJSON("/usage/total_tokens") predicates: - auth.identity.selected_subscription_key == "models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated" && !request.path.endsWith("/v1/models") scope: llm/facebook-opt-125m-simulated-kserve-route service: ratelimit-report-service sources: - tokenratelimitpolicy.kuadrant.io:llm/maas-trlp-facebook-opt-125m-simulated name: cf7152251f3046e3f21901c35a85899d10d075ee3fde80b2e3ae7dc84b5b07b8 routeRuleConditions: hostnames: - maas.apps.f717e01e-8081-4124-81bf-46fd99b2f8c0.prod.konfluxeaas.com predicates: - request.url_path.startsWith('/llm/facebook-opt-125m-simulated') - actions: - scope: 0de63d98b80c1813dded1200a5c220a9aa223eb7c7585984033d3ea7769c1fc1 service: auth-service sources: - authpolicy.kuadrant.io:openshift-ingress/gateway-default-auth - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: "0" predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-distinct-2-simulated-kserve-route service: ratelimit-check-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: responseBodyJSON("/usage/total_tokens") predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-distinct-2-simulated-kserve-route service: ratelimit-report-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny name: 929f00c0647e65b6f9ad38955c1ce01b661fcc7681769efba9b5cf372318d8e5 routeRuleConditions: hostnames: - maas.apps.f717e01e-8081-4124-81bf-46fd99b2f8c0.prod.konfluxeaas.com predicates: - request.url_path.startsWith('/llm/e2e-distinct-2-simulated') - actions: - scope: a89b0896df0d8cd430f1c81b6eb292ddc044daed393537d009a6330718f58d4b service: auth-service sources: - authpolicy.kuadrant.io:openshift-ingress/gateway-default-auth - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: "0" predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-distinct-2-simulated-kserve-route service: ratelimit-check-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: responseBodyJSON("/usage/total_tokens") predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-distinct-2-simulated-kserve-route service: ratelimit-report-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny name: 04d6fe3f99b3b0166a45edf962df2cb81d2073707fa7a75c993864124c65dce5 routeRuleConditions: hostnames: - maas.apps.f717e01e-8081-4124-81bf-46fd99b2f8c0.prod.konfluxeaas.com predicates: - request.url_path.startsWith('/llm/e2e-distinct-2-simulated') - actions: - scope: 5fea747cb803a5ee3aeb620187bd9ec74ccccd10a92474ef528215a7ff146c8f service: auth-service sources: - authpolicy.kuadrant.io:openshift-ingress/gateway-default-auth - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: "0" predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-trlp-test-simulated-kserve-route service: ratelimit-check-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: responseBodyJSON("/usage/total_tokens") predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-trlp-test-simulated-kserve-route service: ratelimit-report-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny name: fc91084badfa094eaeb856b8f2351816e74f498d16e7931d335f4d15efbd52fc routeRuleConditions: hostnames: - maas.apps.f717e01e-8081-4124-81bf-46fd99b2f8c0.prod.konfluxeaas.com predicates: - request.url_path.startsWith('/llm/e2e-trlp-test-simulated') - actions: - scope: 8e95faaf26521b922fc4f7d90dead5fa65fb63ced54ef1b0da6c336892092b5e service: auth-service sources: - authpolicy.kuadrant.io:openshift-ingress/gateway-default-auth - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: "0" predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-trlp-test-simulated-kserve-route service: ratelimit-check-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: responseBodyJSON("/usage/total_tokens") predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-trlp-test-simulated-kserve-route service: ratelimit-report-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny name: ead980e55abf79aac5472dfa4b38a4e63d18ff4f8bf42c4ef550f9e2cb83f264 routeRuleConditions: hostnames: - maas.apps.f717e01e-8081-4124-81bf-46fd99b2f8c0.prod.konfluxeaas.com predicates: - request.url_path.startsWith('/llm/e2e-trlp-test-simulated') - actions: - scope: 3f374f385b8664c1b7ec9843869a0ecb4fefe048f5ceabd740bcf9c10e846108 service: auth-service sources: - authpolicy.kuadrant.io:openshift-ingress/gateway-default-auth - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: "0" predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-distinct-simulated-kserve-route service: ratelimit-check-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: responseBodyJSON("/usage/total_tokens") predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-distinct-simulated-kserve-route service: ratelimit-report-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny name: febddedb704ff84c0e0e801002efea4d87dfd7bd0f2939ef16af45267b8dffbc routeRuleConditions: hostnames: - maas.apps.f717e01e-8081-4124-81bf-46fd99b2f8c0.prod.konfluxeaas.com predicates: - request.url_path.startsWith('/llm/e2e-distinct-simulated') - actions: - scope: 86cbb62fb4d82d4dc402b3281444539a5625c4bb4c86bbc4912c70e690a2e374 service: auth-service sources: - authpolicy.kuadrant.io:openshift-ingress/gateway-default-auth - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: "0" predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-distinct-simulated-kserve-route service: ratelimit-check-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: responseBodyJSON("/usage/total_tokens") predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-distinct-simulated-kserve-route service: ratelimit-report-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny name: 5166e776b848d1fefbc7c6689e828a4b18d8c01a2e500ee3200c9bf8fc847960 routeRuleConditions: hostnames: - maas.apps.f717e01e-8081-4124-81bf-46fd99b2f8c0.prod.konfluxeaas.com predicates: - request.url_path.startsWith('/llm/e2e-distinct-simulated') - actions: - predicates: - request.path != "/maas-api/health" || request.method != "GET" scope: 49ff072d7b97a47682d640010c73aef47c6376b17652297065fa57d4c846dd80 service: auth-service sources: - authpolicy.kuadrant.io:opendatahub/maas-api-auth-policy - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: "0" predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: opendatahub/maas-api-route service: ratelimit-check-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: responseBodyJSON("/usage/total_tokens") predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: opendatahub/maas-api-route service: ratelimit-report-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny name: 0ab2077687e40500c9410b69f9f4e1a26f542a88b3e302f80dbc67831d0207d6 routeRuleConditions: hostnames: - maas.apps.f717e01e-8081-4124-81bf-46fd99b2f8c0.prod.konfluxeaas.com predicates: - request.url_path.startsWith('/v1/models') - actions: - predicates: - request.path != "/maas-api/health" || request.method != "GET" scope: c9f2cdb36f800bc8ef8831e6117ec4c6cc521d8cd63b718b7906225d0f25e59f service: auth-service sources: - authpolicy.kuadrant.io:opendatahub/maas-api-auth-policy - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: "0" predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: opendatahub/maas-api-route service: ratelimit-check-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: responseBodyJSON("/usage/total_tokens") predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: opendatahub/maas-api-route service: ratelimit-report-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny name: e5cf519cd69eb0a04ee2fd2ce2ce1b478b383ee091751b94df9553b7f309b0bd routeRuleConditions: hostnames: - maas.apps.f717e01e-8081-4124-81bf-46fd99b2f8c0.prod.konfluxeaas.com predicates: - request.url_path.startsWith('/v1/models') - actions: - predicates: - request.path != "/maas-api/health" || request.method != "GET" scope: d44d6970f0ac9b448c729a344c019166492f90c7945285882c656b64a6725911 service: auth-service sources: - authpolicy.kuadrant.io:opendatahub/maas-api-auth-policy - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: "0" predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: opendatahub/maas-api-route service: ratelimit-check-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: responseBodyJSON("/usage/total_tokens") predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: opendatahub/maas-api-route service: ratelimit-report-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny name: 1ddf87d574ae87751f238109809cc623e2762d3529bc1e8e00bb1952e6bbddca routeRuleConditions: hostnames: - maas.apps.f717e01e-8081-4124-81bf-46fd99b2f8c0.prod.konfluxeaas.com predicates: - request.url_path.startsWith('/maas-api') - actions: - predicates: - request.path != "/maas-api/health" || request.method != "GET" scope: 4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d service: auth-service sources: - authpolicy.kuadrant.io:opendatahub/maas-api-auth-policy - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: "0" predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: opendatahub/maas-api-route service: ratelimit-check-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: responseBodyJSON("/usage/total_tokens") predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: opendatahub/maas-api-route service: ratelimit-report-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny name: 1d3de5a3e5a86e68e79f81e4946691d88e420c92360fffc1550d03f1d11a662d routeRuleConditions: hostnames: - maas.apps.f717e01e-8081-4124-81bf-46fd99b2f8c0.prod.konfluxeaas.com predicates: - request.url_path.startsWith('/maas-api') services: auth-service: endpoint: kuadrant-auth-service failureMode: deny timeout: 200ms type: auth ratelimit-check-service: endpoint: kuadrant-ratelimit-service failureMode: deny timeout: 100ms type: ratelimit-check ratelimit-report-service: endpoint: kuadrant-ratelimit-service failureMode: deny timeout: 100ms type: ratelimit-report ratelimit-service: endpoint: kuadrant-ratelimit-service failureMode: allow timeout: 100ms type: ratelimit targetRefs: - group: gateway.networking.k8s.io kind: Gateway name: maas-default-gateway url: quay.io/kuadrant/wasm-shim:v0.12.1