apiVersion: kuadrant.io/v1alpha1
kind: TokenRateLimitPolicy
metadata:
  annotations:
    maas.opendatahub.io/subscriptions: models-as-a-service/simulator-subscription
  creationTimestamp: "2026-10-30T18:40:16Z"
  generation: 1
  labels:
    app.kubernetes.io/component: token-rate-limit-policy
    app.kubernetes.io/managed-by: maas-controller
    app.kubernetes.io/part-of: maas-subscription
    maas.opendatahub.io/gateway-name: maas-default-gateway
    maas.opendatahub.io/gateway-namespace: openshift-ingress
    maas.opendatahub.io/model: facebook-opt-125m-simulated
    maas.opendatahub.io/model-namespace: llm
  managedFields:
  - apiVersion: kuadrant.io/v1alpha1
    fieldsType: FieldsV1
    fieldsV1:
      f:metadata:
        f:annotations:
          .: {}
          f:maas.opendatahub.io/subscriptions: {}
        f:labels:
          .: {}
          f:app.kubernetes.io/component: {}
          f:app.kubernetes.io/managed-by: {}
          f:app.kubernetes.io/part-of: {}
          f:maas.opendatahub.io/gateway-name: {}
          f:maas.opendatahub.io/gateway-namespace: {}
          f:maas.opendatahub.io/model: {}
          f:maas.opendatahub.io/model-namespace: {}
        f:ownerReferences:
          .: {}
          k:{"uid":"35ab9fe6-cd00-4173-a29b-5ee53728eb3b"}: {}
      f:spec:
        .: {}
        f:limits:
          .: {}
          f:tokens-100-per-1m:
            .: {}
            f:counters: {}
            f:rates: {}
            f:when: {}
        f:targetRef:
          .: {}
          f:group: {}
          f:kind: {}
          f:name: {}
    manager: manager
    operation: Update
    time: "2026-10-30T18:40:16Z"
  - apiVersion: kuadrant.io/v1alpha1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        .: {}
        f:conditions:
          .: {}
          k:{"type":"Accepted"}:
            .: {}
            f:lastTransitionTime: {}
            f:message: {}
            f:reason: {}
            f:status: {}
            f:type: {}
          k:{"type":"Enforced"}:
            .: {}
            f:lastTransitionTime: {}
            f:message: {}
            f:reason: {}
            f:status: {}
            f:type: {}
        f:observedGeneration: {}
    manager: manager
    operation: Update
    subresource: status
    time: "2026-10-30T18:47:12Z"
  name: maas-trlp-facebook-opt-125m-simulated
  namespace: llm
  ownerReferences:
  - apiVersion: gateway.networking.k8s.io/v1
    blockOwnerDeletion: true
    controller: true
    kind: HTTPRoute
    name: facebook-opt-125m-simulated-kserve-route
    uid: 35ab9fe6-cd00-4173-a29b-5ee53728eb3b
  resourceVersion: "38947"
  uid: eda0e75c-35cb-4d6a-8a4a-ed88b7216786
spec:
  limits:
    tokens-100-per-1m:
      counters:
      - expression: auth.identity.selected_subscription_id
      - expression: auth.identity.userid
      rates:
      - limit: 100
        window: 1m
      when:
      - predicate: auth.identity.selected_subscription_id == "3f98c74fda8361a9" &&
          !request.path.endsWith("/v1/models")
  targetRef:
    group: gateway.networking.k8s.io
    kind: HTTPRoute
    name: facebook-opt-125m-simulated-kserve-route
status:
  conditions:
  - lastTransitionTime: "2026-10-30T18:40:20Z"
    message: TokenRateLimitPolicy has been accepted
    reason: Accepted
    status: "True"
    type: Accepted
  - lastTransitionTime: "2026-10-30T18:47:12Z"
    message: TokenRateLimitPolicy has been successfully enforced
    reason: Enforced
    status: "True"
    type: Enforced
  observedGeneration: 1