========================================
Cluster / Namespace Info
========================================

--- Current context ---
admin

--- Logged-in user ---
system:admin

--- Cluster domain ---
apps.a155f554-b6ee-46e4-8a19-6158fac407a5.prod.konfluxeaas.com

DEPLOYMENT_NAMESPACE: opendatahub
MAAS_API_DEPLOYMENT_NAMESPACE: odh-ai-gateway-infra
MAAS_SUBSCRIPTION_NAMESPACE: models-as-a-service
AUTHORINO_NAMESPACE: kuadrant-system


========================================
MaaS API Deployment
========================================

--- maas-api pods ---


--- maas-api service ---




========================================
maas-controller
========================================

--- maas-controller pods ---
NAME                               READY   STATUS    RESTARTS   AGE   IP            NODE                           NOMINATED NODE   READINESS GATES
maas-controller-7ddc5589c6-gpjhd   1/1     Running   0          10m   10.132.0.32   ip-10-0-138-121.ec2.internal   <none>           <none>

--- maas-controller namespace env ---
INFRA_NAMESPACE=AUTO



========================================
Kuadrant Policies
========================================

--- AuthPolicies (all namespaces) ---
NAMESPACE           NAME                   ACCEPTED   ENFORCED   TARGETKIND   TARGETNAME             TARGETSECTION   AGE
openshift-ingress   gateway-default-auth   True       False      Gateway      maas-default-gateway                   10m

--- TokenRateLimitPolicies (all namespaces) ---




========================================
MaaS CRs (maas.opendatahub.io)
========================================

--- Configs (cluster-scoped) ---
NAME      AGE
default   10m

--- AITenants (all namespaces) ---
NAMESPACE    NAME                  READY   TENANT NAMESPACE      GATEWAY                AGE
ai-tenants   models-as-a-service   True    models-as-a-service   maas-default-gateway   10m

--- Tenants (all namespaces) ---


--- MaaSAuthPolicies ---


--- MaaSSubscriptions ---


--- MaaSSubscription status details ---


--- MaaSModelRefs (all namespaces) ---


--- MaasTenantConfigs ---
NAME             READY   REASON                    AGE   INFRANAMESPACE
default-tenant   False   PlatformReconcileFailed   10m   odh-ai-gateway-infra

--- MaasTenantConfig status details ---
default-tenant: False - post-render: patch cleanup CronJob CA volume: CronJob has no volumes; expected volume "maas-api-ca"

--- ExternalModels (maas group) ---




========================================
Inference CRs (inference.opendatahub.io)
========================================

--- ExternalModels (inference group) ---


--- ExternalProviders (inference group) ---




========================================
AI Gateway CRs
========================================

--- AIGateways (cluster-scoped) ---


--- LLMBatchGateways (all namespaces) ---




========================================
Test User Information
========================================

No test token available (not logged in via oc)


========================================
Subscription → Model Mapping
========================================

No subscriptions found in models-as-a-service


========================================
Available Models (MaaSModelRefs)
========================================

No MaaSModelRefs found


========================================
Gateway / HTTPRoutes
========================================

--- Gateway ---
NAME                   CLASS               ADDRESS                                                                      PROGRAMMED   AGE
maas-default-gateway   openshift-default   maas-default-gateway-openshift-default.openshift-ingress.svc.cluster.local   True         11m

--- HTTPRoutes (maas-api) ---




========================================
Authorino
========================================

--- Authorino pods ---
---



========================================
Subscription Selector Endpoint Validation
========================================

Expected URL (from resolved maas-api deployment namespace): https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select
  (MAAS_API_DEPLOYMENT_NAMESPACE resolved to: odh-ai-gateway-infra)

--- Sample AuthPolicy subscription-info configuration ---
  Inspecting: openshift-ingress/gateway-default-auth
  Actual URL in AuthPolicy: N/A
  ❌ Request body MISSING requestedModel field (should include model namespace/name)
  Request body preview:
    N/A

--- Connectivity test (from kuadrant-system, simulates Authorino) ---
curl -vsk -m 10 -X POST 'https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select' -H 'Content-Type: application/json' -d '{}'

kubectl run failed or timed out


========================================
DNS Resolution Check
========================================

Resolving: maas-api.odh-ai-gateway-infra.svc.cluster.local
nslookup failed


========================================
Configuration Summary
========================================

This summary helps compare local vs CI runs:

  AITenants (all namespaces): 1
  MaaSModelRefs (all namespaces): 0
  MaaSSubscriptions (models-as-a-service): 0
  MaaSAuthPolicies (models-as-a-service): 0
  Generated Kuadrant AuthPolicies: 1
  ExternalModels - inference (all namespaces): 0
  ExternalProviders - inference (all namespaces): 0

  Subscription selector URL: https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select
  Test user: system:admin