apiVersion: extensions.istio.io/v1alpha1
kind: WasmPlugin
metadata:
  creationTimestamp: "2026-06-09T01:27:55Z"
  generation: 308
  labels:
    kuadrant.io/managed: "true"
  managedFields:
  - apiVersion: extensions.istio.io/v1alpha1
    fieldsType: FieldsV1
    fieldsV1:
      f:metadata:
        f:labels:
          .: {}
          f:kuadrant.io/managed: {}
        f:ownerReferences:
          .: {}
          k:{"uid":"90c07b91-388b-4822-b59f-d99c74c781fd"}: {}
      f:spec:
        .: {}
        f:phase: {}
        f:pluginConfig:
          .: {}
          f:actionSets: {}
          f:services:
            .: {}
            f:auth-service:
              .: {}
              f:endpoint: {}
              f:failureMode: {}
              f:timeout: {}
              f:type: {}
            f:ratelimit-check-service:
              .: {}
              f:endpoint: {}
              f:failureMode: {}
              f:timeout: {}
              f:type: {}
            f:ratelimit-report-service:
              .: {}
              f:endpoint: {}
              f:failureMode: {}
              f:timeout: {}
              f:type: {}
            f:ratelimit-service:
              .: {}
              f:endpoint: {}
              f:failureMode: {}
              f:timeout: {}
              f:type: {}
        f:targetRefs: {}
        f:url: {}
    manager: manager
    operation: Update
    time: "2026-06-09T01:53:45Z"
  name: kuadrant-maas-default-gateway
  namespace: openshift-ingress
  ownerReferences:
  - apiVersion: gateway.networking.k8s.io/v1
    blockOwnerDeletion: true
    controller: true
    kind: Gateway
    name: maas-default-gateway
    uid: 90c07b91-388b-4822-b59f-d99c74c781fd
  resourceVersion: "50244"
  uid: 66c6804a-9af2-4cff-b241-598f8d4d5ba3
spec:
  phase: STATS
  pluginConfig:
    actionSets:
    - actions:
      - scope: 9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a
        service: auth-service
        sources:
        - authpolicy.kuadrant.io:openshift-ingress/gateway-default-auth
      - conditionalData:
        - data:
          - expression:
              key: tokenlimit.deny_all_by_default__6d45535f
              value: "1"
          - expression:
              key: auth.identity.userid
              value: auth.identity.userid
          - expression:
              key: ratelimit.hits_addend
              value: "0"
          predicates:
          - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")'
        scope: llm/e2e-unconfigured-facebook-opt-125m-simulated-kserve-route
        service: ratelimit-check-service
        sources:
        - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny
      - conditionalData:
        - data:
          - expression:
              key: tokenlimit.deny_all_by_default__6d45535f
              value: "1"
          - expression:
              key: auth.identity.userid
              value: auth.identity.userid
          - expression:
              key: ratelimit.hits_addend
              value: responseBodyJSON("/usage/total_tokens")
          predicates:
          - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")'
        scope: llm/e2e-unconfigured-facebook-opt-125m-simulated-kserve-route
        service: ratelimit-report-service
        sources:
        - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny
      name: d1891c9b102adb5958cdba3a103575b2f5aaec05968e3f3a8235510b95b3ee36
      routeRuleConditions:
        hostnames:
        - maas.apps.7695ae6b-23bf-4afb-8528-5cb7055fd75a.prod.konfluxeaas.com
        predicates:
        - request.url_path.startsWith('/llm/e2e-unconfigured-facebook-opt-125m-simulated/v1/chat/completions')
    - actions:
      - scope: 01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5
        service: auth-service
        sources:
        - authpolicy.kuadrant.io:openshift-ingress/gateway-default-auth
      - conditionalData:
        - data:
          - expression:
              key: tokenlimit.deny_all_by_default__6d45535f
              value: "1"
          - expression:
              key: auth.identity.userid
              value: auth.identity.userid
          - expression:
              key: ratelimit.hits_addend
              value: "0"
          predicates:
          - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")'
        scope: llm/e2e-unconfigured-facebook-opt-125m-simulated-kserve-route
        service: ratelimit-check-service
        sources:
        - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny
      - conditionalData:
        - data:
          - expression:
              key: tokenlimit.deny_all_by_default__6d45535f
              value: "1"
          - expression:
              key: auth.identity.userid
              value: auth.identity.userid
          - expression:
              key: ratelimit.hits_addend
              value: responseBodyJSON("/usage/total_tokens")
          predicates:
          - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")'
        scope: llm/e2e-unconfigured-facebook-opt-125m-simulated-kserve-route
        service: ratelimit-report-service
        sources:
        - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny
      name: aace8ce3dcde47ccece186661a8abbcdd099b01cc08dadf05f66ee2504c0dcab
      routeRuleConditions:
        hostnames:
        - maas.apps.7695ae6b-23bf-4afb-8528-5cb7055fd75a.prod.konfluxeaas.com
        predicates:
        - request.url_path.startsWith('/llm/e2e-unconfigured-facebook-opt-125m-simulated/v1/completions')
    - actions:
      - scope: e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be
        service: auth-service
        sources:
        - authpolicy.kuadrant.io:openshift-ingress/gateway-default-auth
      - conditionalData:
        - data:
          - expression:
              key: tokenlimit.deny_all_by_default__6d45535f
              value: "1"
          - expression:
              key: auth.identity.userid
              value: auth.identity.userid
          - expression:
              key: ratelimit.hits_addend
              value: "0"
          predicates:
          - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")'
        scope: llm/e2e-unconfigured-facebook-opt-125m-simulated-kserve-route
        service: ratelimit-check-service
        sources:
        - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny
      - conditionalData:
        - data:
          - expression:
              key: tokenlimit.deny_all_by_default__6d45535f
              value: "1"
          - expression:
              key: auth.identity.userid
              value: auth.identity.userid
          - expression:
              key: ratelimit.hits_addend
              value: responseBodyJSON("/usage/total_tokens")
          predicates:
          - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")'
        scope: llm/e2e-unconfigured-facebook-opt-125m-simulated-kserve-route
        service: ratelimit-report-service
        sources:
        - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny
      name: 39c111b29820b7cf31c99a35c431752289cbb38492ed169efc81edd6e6bbaea3
      routeRuleConditions:
        hostnames:
        - maas.apps.7695ae6b-23bf-4afb-8528-5cb7055fd75a.prod.konfluxeaas.com
        predicates:
        - request.url_path.startsWith('/llm/e2e-unconfigured-facebook-opt-125m-simulated/v1/responses')
    - actions:
      - scope: edcceb5a2e0cf1edde0fc3ed43068ce5b123a6fdc41949959c2c3b7a5a48bf24
        service: auth-service
        sources:
        - authpolicy.kuadrant.io:llm/maas-auth-premium-simulated-simulated-premium
      - conditionalData:
        - data:
          - expression:
              key: tokenlimit.models_as_a_service_premium_simulator_subscription_premium_simulated_simulated_premium_tokens__a2a80825
              value: "1"
          - expression:
              key: auth.identity.userid
              value: auth.identity.userid
          - expression:
              key: ratelimit.hits_addend
              value: "0"
          predicates:
          - auth.identity.selected_subscription_key == "models-as-a-service/premium-simulator-subscription@llm/premium-simulated-simulated-premium"
            && !request.path.endsWith("/v1/models")
        scope: llm/premium-simulated-simulated-premium-kserve-route
        service: ratelimit-check-service
        sources:
        - tokenratelimitpolicy.kuadrant.io:llm/maas-trlp-premium-simulated-simulated-premium
      - conditionalData:
        - data:
          - expression:
              key: tokenlimit.models_as_a_service_premium_simulator_subscription_premium_simulated_simulated_premium_tokens__a2a80825
              value: "1"
          - expression:
              key: auth.identity.userid
              value: auth.identity.userid
          - expression:
              key: ratelimit.hits_addend
              value: responseBodyJSON("/usage/total_tokens")
          predicates:
          - auth.identity.selected_subscription_key == "models-as-a-service/premium-simulator-subscription@llm/premium-simulated-simulated-premium"
            && !request.path.endsWith("/v1/models")
        scope: llm/premium-simulated-simulated-premium-kserve-route
        service: ratelimit-report-service
        sources:
        - tokenratelimitpolicy.kuadrant.io:llm/maas-trlp-premium-simulated-simulated-premium
      name: d917e5b380ded7f9b0e7893b0af3872ef7f95b4a11c65500c6681ca264c5013e
      routeRuleConditions:
        hostnames:
        - maas.apps.7695ae6b-23bf-4afb-8528-5cb7055fd75a.prod.konfluxeaas.com
        predicates:
        - request.url_path.startsWith('/llm/premium-simulated-simulated-premium/v1/chat/completions')
    - actions:
      - scope: 80f10756c0e833d16937036ed66f1daf5bef95559ef05a5e852766b97b9bdaef
        service: auth-service
        sources:
        - authpolicy.kuadrant.io:llm/maas-auth-premium-simulated-simulated-premium
      - conditionalData:
        - data:
          - expression:
              key: tokenlimit.models_as_a_service_premium_simulator_subscription_premium_simulated_simulated_premium_tokens__a2a80825
              value: "1"
          - expression:
              key: auth.identity.userid
              value: auth.identity.userid
          - expression:
              key: ratelimit.hits_addend
              value: "0"
          predicates:
          - auth.identity.selected_subscription_key == "models-as-a-service/premium-simulator-subscription@llm/premium-simulated-simulated-premium"
            && !request.path.endsWith("/v1/models")
        scope: llm/premium-simulated-simulated-premium-kserve-route
        service: ratelimit-check-service
        sources:
        - tokenratelimitpolicy.kuadrant.io:llm/maas-trlp-premium-simulated-simulated-premium
      - conditionalData:
        - data:
          - expression:
              key: tokenlimit.models_as_a_service_premium_simulator_subscription_premium_simulated_simulated_premium_tokens__a2a80825
              value: "1"
          - expression:
              key: auth.identity.userid
              value: auth.identity.userid
          - expression:
              key: ratelimit.hits_addend
              value: responseBodyJSON("/usage/total_tokens")
          predicates:
          - auth.identity.selected_subscription_key == "models-as-a-service/premium-simulator-subscription@llm/premium-simulated-simulated-premium"
            && !request.path.endsWith("/v1/models")
        scope: llm/premium-simulated-simulated-premium-kserve-route
        service: ratelimit-report-service
        sources:
        - tokenratelimitpolicy.kuadrant.io:llm/maas-trlp-premium-simulated-simulated-premium
      name: 82662fb457f6b141ddec203bc612f6b4606cb65e150254e39ae03f323a4eed9e
      routeRuleConditions:
        hostnames:
        - maas.apps.7695ae6b-23bf-4afb-8528-5cb7055fd75a.prod.konfluxeaas.com
        predicates:
        - request.url_path.startsWith('/llm/premium-simulated-simulated-premium/v1/completions')
    - actions:
      - scope: 4dc577fd60594d78a4a8bebe396f4b5a928f41bdc3f95c06d717cf1ddc3158b2
        service: auth-service
        sources:
        - authpolicy.kuadrant.io:llm/maas-auth-premium-simulated-simulated-premium
      - conditionalData:
        - data:
          - expression:
              key: tokenlimit.models_as_a_service_premium_simulator_subscription_premium_simulated_simulated_premium_tokens__a2a80825
              value: "1"
          - expression:
              key: auth.identity.userid
              value: auth.identity.userid
          - expression:
              key: ratelimit.hits_addend
              value: "0"
          predicates:
          - auth.identity.selected_subscription_key == "models-as-a-service/premium-simulator-subscription@llm/premium-simulated-simulated-premium"
            && !request.path.endsWith("/v1/models")
        scope: llm/premium-simulated-simulated-premium-kserve-route
        service: ratelimit-check-service
        sources:
        - tokenratelimitpolicy.kuadrant.io:llm/maas-trlp-premium-simulated-simulated-premium
      - conditionalData:
        - data:
          - expression:
              key: tokenlimit.models_as_a_service_premium_simulator_subscription_premium_simulated_simulated_premium_tokens__a2a80825
              value: "1"
          - expression:
              key: auth.identity.userid
              value: auth.identity.userid
          - expression:
              key: ratelimit.hits_addend
              value: responseBodyJSON("/usage/total_tokens")
          predicates:
          - auth.identity.selected_subscription_key == "models-as-a-service/premium-simulator-subscription@llm/premium-simulated-simulated-premium"
            && !request.path.endsWith("/v1/models")
        scope: llm/premium-simulated-simulated-premium-kserve-route
        service: ratelimit-report-service
        sources:
        - tokenratelimitpolicy.kuadrant.io:llm/maas-trlp-premium-simulated-simulated-premium
      name: 7bc8c0da40f88758c12475cc976e064a694dbc7e8bb4494e60004df6bab633c5
      routeRuleConditions:
        hostnames:
        - maas.apps.7695ae6b-23bf-4afb-8528-5cb7055fd75a.prod.konfluxeaas.com
        predicates:
        - request.url_path.startsWith('/llm/premium-simulated-simulated-premium/v1/responses')
    - actions:
      - scope: 18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76
        service: auth-service
        sources:
        - authpolicy.kuadrant.io:llm/maas-auth-facebook-opt-125m-simulated
      - conditionalData:
        - data:
          - expression:
              key: tokenlimit.models_as_a_service_simulator_subscription_facebook_opt_125m_simulated_tokens__87db8427
              value: "1"
          - expression:
              key: auth.identity.userid
              value: auth.identity.userid
          - expression:
              key: ratelimit.hits_addend
              value: "0"
          predicates:
          - auth.identity.selected_subscription_key == "models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated"
            && !request.path.endsWith("/v1/models")
        scope: llm/facebook-opt-125m-simulated-kserve-route
        service: ratelimit-check-service
        sources:
        - tokenratelimitpolicy.kuadrant.io:llm/maas-trlp-facebook-opt-125m-simulated
      - conditionalData:
        - data:
          - expression:
              key: tokenlimit.models_as_a_service_simulator_subscription_facebook_opt_125m_simulated_tokens__87db8427
              value: "1"
          - expression:
              key: auth.identity.userid
              value: auth.identity.userid
          - expression:
              key: ratelimit.hits_addend
              value: responseBodyJSON("/usage/total_tokens")
          predicates:
          - auth.identity.selected_subscription_key == "models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated"
            && !request.path.endsWith("/v1/models")
        scope: llm/facebook-opt-125m-simulated-kserve-route
        service: ratelimit-report-service
        sources:
        - tokenratelimitpolicy.kuadrant.io:llm/maas-trlp-facebook-opt-125m-simulated
      name: 85da597e2bf08aa8d13f8ba07dd82ff47b9704f8b3311361f23d77f6d4f79c1c
      routeRuleConditions:
        hostnames:
        - maas.apps.7695ae6b-23bf-4afb-8528-5cb7055fd75a.prod.konfluxeaas.com
        predicates:
        - request.url_path.startsWith('/llm/facebook-opt-125m-simulated/v1/chat/completions')
    - actions:
      - scope: e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a
        service: auth-service
        sources:
        - authpolicy.kuadrant.io:openshift-ingress/gateway-default-auth
      - conditionalData:
        - data:
          - expression:
              key: tokenlimit.deny_all_by_default__6d45535f
              value: "1"
          - expression:
              key: auth.identity.userid
              value: auth.identity.userid
          - expression:
              key: ratelimit.hits_addend
              value: "0"
          predicates:
          - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")'
        scope: llm/e2e-distinct-2-simulated-kserve-route
        service: ratelimit-check-service
        sources:
        - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny
      - conditionalData:
        - data:
          - expression:
              key: tokenlimit.deny_all_by_default__6d45535f
              value: "1"
          - expression:
              key: auth.identity.userid
              value: auth.identity.userid
          - expression:
              key: ratelimit.hits_addend
              value: responseBodyJSON("/usage/total_tokens")
          predicates:
          - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")'
        scope: llm/e2e-distinct-2-simulated-kserve-route
        service: ratelimit-report-service
        sources:
        - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny
      name: a5fc5c046b4f8eebc2b0a4cac82ef26433bd596e11cd66319ecc574c08e6f8c8
      routeRuleConditions:
        hostnames:
        - maas.apps.7695ae6b-23bf-4afb-8528-5cb7055fd75a.prod.konfluxeaas.com
        predicates:
        - request.url_path.startsWith('/llm/e2e-distinct-2-simulated/v1/chat/completions')
    - actions:
      - scope: 9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5
        service: auth-service
        sources:
        - authpolicy.kuadrant.io:openshift-ingress/gateway-default-auth
      - conditionalData:
        - data:
          - expression:
              key: tokenlimit.deny_all_by_default__6d45535f
              value: "1"
          - expression:
              key: auth.identity.userid
              value: auth.identity.userid
          - expression:
              key: ratelimit.hits_addend
              value: "0"
          predicates:
          - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")'
        scope: llm/e2e-unconfigured-facebook-opt-125m-simulated-kserve-route
        service: ratelimit-check-service
        sources:
        - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny
      - conditionalData:
        - data:
          - expression:
              key: tokenlimit.deny_all_by_default__6d45535f
              value: "1"
          - expression:
              key: auth.identity.userid
              value: auth.identity.userid
          - expression:
              key: ratelimit.hits_addend
              value: responseBodyJSON("/usage/total_tokens")
          predicates:
          - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")'
        scope: llm/e2e-unconfigured-facebook-opt-125m-simulated-kserve-route
        service: ratelimit-report-service
        sources:
        - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny
      name: b82d9a69af4517c994b89ed518a35f541689246a95119ceba7be34f1d5d7e74c
      routeRuleConditions:
        hostnames:
        - maas.apps.7695ae6b-23bf-4afb-8528-5cb7055fd75a.prod.konfluxeaas.com
        predicates:
        - request.url_path.startsWith('/llm/e2e-unconfigured-facebook-opt-125m-simulated')
    - actions:
      - scope: 319a353672fc7601c875fa3f8b807adf60b64f093f022b2a1c3dfef3ac8cd4f4
        service: auth-service
        sources:
        - authpolicy.kuadrant.io:openshift-ingress/gateway-default-auth
      - conditionalData:
        - data:
          - expression:
              key: tokenlimit.deny_all_by_default__6d45535f
              value: "1"
          - expression:
              key: auth.identity.userid
              value: auth.identity.userid
          - expression:
              key: ratelimit.hits_addend
              value: "0"
          predicates:
          - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")'
        scope: llm/e2e-trlp-test-simulated-kserve-route
        service: ratelimit-check-service
        sources:
        - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny
      - conditionalData:
        - data:
          - expression:
              key: tokenlimit.deny_all_by_default__6d45535f
              value: "1"
          - expression:
              key: auth.identity.userid
              value: auth.identity.userid
          - expression:
              key: ratelimit.hits_addend
              value: responseBodyJSON("/usage/total_tokens")
          predicates:
          - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")'
        scope: llm/e2e-trlp-test-simulated-kserve-route
        service: ratelimit-report-service
        sources:
        - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny
      name: da933067d9d21e205dda6c0324e794a4e321e5ccee2b1ad50c4b778b774b4367
      routeRuleConditions:
        hostnames:
        - maas.apps.7695ae6b-23bf-4afb-8528-5cb7055fd75a.prod.konfluxeaas.com
        predicates:
        - request.url_path.startsWith('/llm/e2e-trlp-test-simulated/v1/chat/completions')
    - actions:
      - scope: 3dc75fc8307b952a3e873400cf417e90f2861e8a225abec4b22708deb7901db7
        service: auth-service
        sources:
        - authpolicy.kuadrant.io:openshift-ingress/gateway-default-auth
      - conditionalData:
        - data:
          - expression:
              key: tokenlimit.deny_all_by_default__6d45535f
              value: "1"
          - expression:
              key: auth.identity.userid
              value: auth.identity.userid
          - expression:
              key: ratelimit.hits_addend
              value: "0"
          predicates:
          - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")'
        scope: llm/e2e-distinct-simulated-kserve-route
        service: ratelimit-check-service
        sources:
        - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny
      - conditionalData:
        - data:
          - expression:
              key: tokenlimit.deny_all_by_default__6d45535f
              value: "1"
          - expression:
              key: auth.identity.userid
              value: auth.identity.userid
          - expression:
              key: ratelimit.hits_addend
              value: responseBodyJSON("/usage/total_tokens")
          predicates:
          - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")'
        scope: llm/e2e-distinct-simulated-kserve-route
        service: ratelimit-report-service
        sources:
        - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny
      name: 76d055b3775cb3ccb544d00ac9facaaf2bb53fef65126bb32a13f7067215150e
      routeRuleConditions:
        hostnames:
        - maas.apps.7695ae6b-23bf-4afb-8528-5cb7055fd75a.prod.konfluxeaas.com
        predicates:
        - request.url_path.startsWith('/llm/e2e-distinct-simulated/v1/chat/completions')
    - actions:
      - scope: cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a
        service: auth-service
        sources:
        - authpolicy.kuadrant.io:llm/maas-auth-facebook-opt-125m-simulated
      - conditionalData:
        - data:
          - expression:
              key: tokenlimit.models_as_a_service_simulator_subscription_facebook_opt_125m_simulated_tokens__87db8427
              value: "1"
          - expression:
              key: auth.identity.userid
              value: auth.identity.userid
          - expression:
              key: ratelimit.hits_addend
              value: "0"
          predicates:
          - auth.identity.selected_subscription_key == "models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated"
            && !request.path.endsWith("/v1/models")
        scope: llm/facebook-opt-125m-simulated-kserve-route
        service: ratelimit-check-service
        sources:
        - tokenratelimitpolicy.kuadrant.io:llm/maas-trlp-facebook-opt-125m-simulated
      - conditionalData:
        - data:
          - expression:
              key: tokenlimit.models_as_a_service_simulator_subscription_facebook_opt_125m_simulated_tokens__87db8427
              value: "1"
          - expression:
              key: auth.identity.userid
              value: auth.identity.userid
          - expression:
              key: ratelimit.hits_addend
              value: responseBodyJSON("/usage/total_tokens")
          predicates:
          - auth.identity.selected_subscription_key == "models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated"
            && !request.path.endsWith("/v1/models")
        scope: llm/facebook-opt-125m-simulated-kserve-route
        service: ratelimit-report-service
        sources:
        - tokenratelimitpolicy.kuadrant.io:llm/maas-trlp-facebook-opt-125m-simulated
      name: fe349899bb9c3e5b9e41a96d90009d510b93ec060f9f8d0eade683754aa74af0
      routeRuleConditions:
        hostnames:
        - maas.apps.7695ae6b-23bf-4afb-8528-5cb7055fd75a.prod.konfluxeaas.com
        predicates:
        - request.url_path.startsWith('/llm/facebook-opt-125m-simulated/v1/completions')
    - actions:
      - scope: 311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418
        service: auth-service
        sources:
        - authpolicy.kuadrant.io:llm/maas-auth-facebook-opt-125m-simulated
      - conditionalData:
        - data:
          - expression:
              key: tokenlimit.models_as_a_service_simulator_subscription_facebook_opt_125m_simulated_tokens__87db8427
              value: "1"
          - expression:
              key: auth.identity.userid
              value: auth.identity.userid
          - expression:
              key: ratelimit.hits_addend
              value: "0"
          predicates:
          - auth.identity.selected_subscription_key == "models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated"
            && !request.path.endsWith("/v1/models")
        scope: llm/facebook-opt-125m-simulated-kserve-route
        service: ratelimit-check-service
        sources:
        - tokenratelimitpolicy.kuadrant.io:llm/maas-trlp-facebook-opt-125m-simulated
      - conditionalData:
        - data:
          - expression:
              key: tokenlimit.models_as_a_service_simulator_subscription_facebook_opt_125m_simulated_tokens__87db8427
              value: "1"
          - expression:
              key: auth.identity.userid
              value: auth.identity.userid
          - expression:
              key: ratelimit.hits_addend
              value: responseBodyJSON("/usage/total_tokens")
          predicates:
          - auth.identity.selected_subscription_key == "models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated"
            && !request.path.endsWith("/v1/models")
        scope: llm/facebook-opt-125m-simulated-kserve-route
        service: ratelimit-report-service
        sources:
        - tokenratelimitpolicy.kuadrant.io:llm/maas-trlp-facebook-opt-125m-simulated
      name: 5f0bb2c80531822a708f80900293ad5900e5a25c62c24ed3daf9ace949f2d484
      routeRuleConditions:
        hostnames:
        - maas.apps.7695ae6b-23bf-4afb-8528-5cb7055fd75a.prod.konfluxeaas.com
        predicates:
        - request.url_path.startsWith('/llm/facebook-opt-125m-simulated/v1/responses')
    - actions:
      - scope: 331dc257e65f55f80700a586f7807093eda7b3d8e7d91215dc3c47731508480c
        service: auth-service
        sources:
        - authpolicy.kuadrant.io:openshift-ingress/gateway-default-auth
      - conditionalData:
        - data:
          - expression:
              key: tokenlimit.deny_all_by_default__6d45535f
              value: "1"
          - expression:
              key: auth.identity.userid
              value: auth.identity.userid
          - expression:
              key: ratelimit.hits_addend
              value: "0"
          predicates:
          - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")'
        scope: llm/e2e-distinct-2-simulated-kserve-route
        service: ratelimit-check-service
        sources:
        - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny
      - conditionalData:
        - data:
          - expression:
              key: tokenlimit.deny_all_by_default__6d45535f
              value: "1"
          - expression:
              key: auth.identity.userid
              value: auth.identity.userid
          - expression:
              key: ratelimit.hits_addend
              value: responseBodyJSON("/usage/total_tokens")
          predicates:
          - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")'
        scope: llm/e2e-distinct-2-simulated-kserve-route
        service: ratelimit-report-service
        sources:
        - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny
      name: 8127f83de0fdc6856f36fd6b25b08ee6cc2225992ddde622db033c9faae289b5
      routeRuleConditions:
        hostnames:
        - maas.apps.7695ae6b-23bf-4afb-8528-5cb7055fd75a.prod.konfluxeaas.com
        predicates:
        - request.url_path.startsWith('/llm/e2e-distinct-2-simulated/v1/completions')
    - actions:
      - scope: bf72a6316f6ed79299511e58d068836cdc71dbca5e23944f783c9340ffa0aee1
        service: auth-service
        sources:
        - authpolicy.kuadrant.io:openshift-ingress/gateway-default-auth
      - conditionalData:
        - data:
          - expression:
              key: tokenlimit.deny_all_by_default__6d45535f
              value: "1"
          - expression:
              key: auth.identity.userid
              value: auth.identity.userid
          - expression:
              key: ratelimit.hits_addend
              value: "0"
          predicates:
          - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")'
        scope: llm/e2e-trlp-test-simulated-kserve-route
        service: ratelimit-check-service
        sources:
        - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny
      - conditionalData:
        - data:
          - expression:
              key: tokenlimit.deny_all_by_default__6d45535f
              value: "1"
          - expression:
              key: auth.identity.userid
              value: auth.identity.userid
          - expression:
              key: ratelimit.hits_addend
              value: responseBodyJSON("/usage/total_tokens")
          predicates:
          - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")'
        scope: llm/e2e-trlp-test-simulated-kserve-route
        service: ratelimit-report-service
        sources:
        - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny
      name: 189edbde400e2f322cb72c9e51b692bb89f8e1324d68758432434e35111c04b1
      routeRuleConditions:
        hostnames:
        - maas.apps.7695ae6b-23bf-4afb-8528-5cb7055fd75a.prod.konfluxeaas.com
        predicates:
        - request.url_path.startsWith('/llm/e2e-trlp-test-simulated/v1/completions')
    - actions:
      - scope: 35d34d59676c333235d7c9f02273e0380bb39f27cfd30856fedc0f7c0e5f79aa
        service: auth-service
        sources:
        - authpolicy.kuadrant.io:openshift-ingress/gateway-default-auth
      - conditionalData:
        - data:
          - expression:
              key: tokenlimit.deny_all_by_default__6d45535f
              value: "1"
          - expression:
              key: auth.identity.userid
              value: auth.identity.userid
          - expression:
              key: ratelimit.hits_addend
              value: "0"
          predicates:
          - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")'
        scope: llm/e2e-distinct-2-simulated-kserve-route
        service: ratelimit-check-service
        sources:
        - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny
      - conditionalData:
        - data:
          - expression:
              key: tokenlimit.deny_all_by_default__6d45535f
              value: "1"
          - expression:
              key: auth.identity.userid
              value: auth.identity.userid
          - expression:
              key: ratelimit.hits_addend
              value: responseBodyJSON("/usage/total_tokens")
          predicates:
          - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")'
        scope: llm/e2e-distinct-2-simulated-kserve-route
        service: ratelimit-report-service
        sources:
        - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny
      name: 15f042311b35b2a46d7cc9a4af27cc549d0c033e9c6089139abe03957035e1a5
      routeRuleConditions:
        hostnames:
        - maas.apps.7695ae6b-23bf-4afb-8528-5cb7055fd75a.prod.konfluxeaas.com
        predicates:
        - request.url_path.startsWith('/llm/e2e-distinct-2-simulated/v1/responses')
    - actions:
      - scope: 3c0d47082320c9bb02d3788ab2b052c696af91abc2ae438437ae71a26936c7c2
        service: auth-service
        sources:
        - authpolicy.kuadrant.io:openshift-ingress/gateway-default-auth
      - conditionalData:
        - data:
          - expression:
              key: tokenlimit.deny_all_by_default__6d45535f
              value: "1"
          - expression:
              key: auth.identity.userid
              value: auth.identity.userid
          - expression:
              key: ratelimit.hits_addend
              value: "0"
          predicates:
          - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")'
        scope: llm/e2e-distinct-simulated-kserve-route
        service: ratelimit-check-service
        sources:
        - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny
      - conditionalData:
        - data:
          - expression:
              key: tokenlimit.deny_all_by_default__6d45535f
              value: "1"
          - expression:
              key: auth.identity.userid
              value: auth.identity.userid
          - expression:
              key: ratelimit.hits_addend
              value: responseBodyJSON("/usage/total_tokens")
          predicates:
          - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")'
        scope: llm/e2e-distinct-simulated-kserve-route
        service: ratelimit-report-service
        sources:
        - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny
      name: 2fa52fc919e3ea97c745bd1adc30fb712dc0d4c5bc1cfedeaf8f946f4f3e9fd2
      routeRuleConditions:
        hostnames:
        - maas.apps.7695ae6b-23bf-4afb-8528-5cb7055fd75a.prod.konfluxeaas.com
        predicates:
        - request.url_path.startsWith('/llm/e2e-distinct-simulated/v1/completions')
    - actions:
      - scope: df733b2c652bfe2458c9e19932b1091e939c1a62178d6879462b3b4f73fca4bb
        service: auth-service
        sources:
        - authpolicy.kuadrant.io:openshift-ingress/gateway-default-auth
      - conditionalData:
        - data:
          - expression:
              key: tokenlimit.deny_all_by_default__6d45535f
              value: "1"
          - expression:
              key: auth.identity.userid
              value: auth.identity.userid
          - expression:
              key: ratelimit.hits_addend
              value: "0"
          predicates:
          - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")'
        scope: llm/e2e-trlp-test-simulated-kserve-route
        service: ratelimit-check-service
        sources:
        - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny
      - conditionalData:
        - data:
          - expression:
              key: tokenlimit.deny_all_by_default__6d45535f
              value: "1"
          - expression:
              key: auth.identity.userid
              value: auth.identity.userid
          - expression:
              key: ratelimit.hits_addend
              value: responseBodyJSON("/usage/total_tokens")
          predicates:
          - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")'
        scope: llm/e2e-trlp-test-simulated-kserve-route
        service: ratelimit-report-service
        sources:
        - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny
      name: adf0280cbb3319d86990bf189f92051052f2f02c749700a860685efd36f0077a
      routeRuleConditions:
        hostnames:
        - maas.apps.7695ae6b-23bf-4afb-8528-5cb7055fd75a.prod.konfluxeaas.com
        predicates:
        - request.url_path.startsWith('/llm/e2e-trlp-test-simulated/v1/responses')
    - actions:
      - scope: d3b195a61a7f24c6bf1fba40f9f2e2565facb6af92e959c1546ac398a9172618
        service: auth-service
        sources:
        - authpolicy.kuadrant.io:openshift-ingress/gateway-default-auth
      - conditionalData:
        - data:
          - expression:
              key: tokenlimit.deny_all_by_default__6d45535f
              value: "1"
          - expression:
              key: auth.identity.userid
              value: auth.identity.userid
          - expression:
              key: ratelimit.hits_addend
              value: "0"
          predicates:
          - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")'
        scope: llm/e2e-distinct-simulated-kserve-route
        service: ratelimit-check-service
        sources:
        - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny
      - conditionalData:
        - data:
          - expression:
              key: tokenlimit.deny_all_by_default__6d45535f
              value: "1"
          - expression:
              key: auth.identity.userid
              value: auth.identity.userid
          - expression:
              key: ratelimit.hits_addend
              value: responseBodyJSON("/usage/total_tokens")
          predicates:
          - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")'
        scope: llm/e2e-distinct-simulated-kserve-route
        service: ratelimit-report-service
        sources:
        - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny
      name: fcaeac1c255e6819cc8522637e5bd23ce848bc483960e875eb67d2a3f2d09d09
      routeRuleConditions:
        hostnames:
        - maas.apps.7695ae6b-23bf-4afb-8528-5cb7055fd75a.prod.konfluxeaas.com
        predicates:
        - request.url_path.startsWith('/llm/e2e-distinct-simulated/v1/responses')
    - actions:
      - scope: 7371c34ce8e4df2309ee8f952c87f921947b289427b6e9ea579dcb9970fc1b86
        service: auth-service
        sources:
        - authpolicy.kuadrant.io:llm/maas-auth-premium-simulated-simulated-premium
      - conditionalData:
        - data:
          - expression:
              key: tokenlimit.models_as_a_service_premium_simulator_subscription_premium_simulated_simulated_premium_tokens__a2a80825
              value: "1"
          - expression:
              key: auth.identity.userid
              value: auth.identity.userid
          - expression:
              key: ratelimit.hits_addend
              value: "0"
          predicates:
          - auth.identity.selected_subscription_key == "models-as-a-service/premium-simulator-subscription@llm/premium-simulated-simulated-premium"
            && !request.path.endsWith("/v1/models")
        scope: llm/premium-simulated-simulated-premium-kserve-route
        service: ratelimit-check-service
        sources:
        - tokenratelimitpolicy.kuadrant.io:llm/maas-trlp-premium-simulated-simulated-premium
      - conditionalData:
        - data:
          - expression:
              key: tokenlimit.models_as_a_service_premium_simulator_subscription_premium_simulated_simulated_premium_tokens__a2a80825
              value: "1"
          - expression:
              key: auth.identity.userid
              value: auth.identity.userid
          - expression:
              key: ratelimit.hits_addend
              value: responseBodyJSON("/usage/total_tokens")
          predicates:
          - auth.identity.selected_subscription_key == "models-as-a-service/premium-simulator-subscription@llm/premium-simulated-simulated-premium"
            && !request.path.endsWith("/v1/models")
        scope: llm/premium-simulated-simulated-premium-kserve-route
        service: ratelimit-report-service
        sources:
        - tokenratelimitpolicy.kuadrant.io:llm/maas-trlp-premium-simulated-simulated-premium
      name: 115923971b5ecc24bafecef2ea9bf8ffa6d3d0d1125e32ea49bbe8973506630d
      routeRuleConditions:
        hostnames:
        - maas.apps.7695ae6b-23bf-4afb-8528-5cb7055fd75a.prod.konfluxeaas.com
        predicates:
        - request.url_path.startsWith('/llm/premium-simulated-simulated-premium')
    - actions:
      - scope: 3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3
        service: auth-service
        sources:
        - authpolicy.kuadrant.io:llm/maas-auth-facebook-opt-125m-simulated
      - conditionalData:
        - data:
          - expression:
              key: tokenlimit.models_as_a_service_simulator_subscription_facebook_opt_125m_simulated_tokens__87db8427
              value: "1"
          - expression:
              key: auth.identity.userid
              value: auth.identity.userid
          - expression:
              key: ratelimit.hits_addend
              value: "0"
          predicates:
          - auth.identity.selected_subscription_key == "models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated"
            && !request.path.endsWith("/v1/models")
        scope: llm/facebook-opt-125m-simulated-kserve-route
        service: ratelimit-check-service
        sources:
        - tokenratelimitpolicy.kuadrant.io:llm/maas-trlp-facebook-opt-125m-simulated
      - conditionalData:
        - data:
          - expression:
              key: tokenlimit.models_as_a_service_simulator_subscription_facebook_opt_125m_simulated_tokens__87db8427
              value: "1"
          - expression:
              key: auth.identity.userid
              value: auth.identity.userid
          - expression:
              key: ratelimit.hits_addend
              value: responseBodyJSON("/usage/total_tokens")
          predicates:
          - auth.identity.selected_subscription_key == "models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated"
            && !request.path.endsWith("/v1/models")
        scope: llm/facebook-opt-125m-simulated-kserve-route
        service: ratelimit-report-service
        sources:
        - tokenratelimitpolicy.kuadrant.io:llm/maas-trlp-facebook-opt-125m-simulated
      name: b7d29a2cc4847d45fe5283e2984b61f979aeaf8d70dec31eabd5bea3cee6e3e4
      routeRuleConditions:
        hostnames:
        - maas.apps.7695ae6b-23bf-4afb-8528-5cb7055fd75a.prod.konfluxeaas.com
        predicates:
        - request.url_path.startsWith('/llm/facebook-opt-125m-simulated')
    - actions:
      - scope: a89b0896df0d8cd430f1c81b6eb292ddc044daed393537d009a6330718f58d4b
        service: auth-service
        sources:
        - authpolicy.kuadrant.io:openshift-ingress/gateway-default-auth
      - conditionalData:
        - data:
          - expression:
              key: tokenlimit.deny_all_by_default__6d45535f
              value: "1"
          - expression:
              key: auth.identity.userid
              value: auth.identity.userid
          - expression:
              key: ratelimit.hits_addend
              value: "0"
          predicates:
          - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")'
        scope: llm/e2e-distinct-2-simulated-kserve-route
        service: ratelimit-check-service
        sources:
        - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny
      - conditionalData:
        - data:
          - expression:
              key: tokenlimit.deny_all_by_default__6d45535f
              value: "1"
          - expression:
              key: auth.identity.userid
              value: auth.identity.userid
          - expression:
              key: ratelimit.hits_addend
              value: responseBodyJSON("/usage/total_tokens")
          predicates:
          - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")'
        scope: llm/e2e-distinct-2-simulated-kserve-route
        service: ratelimit-report-service
        sources:
        - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny
      name: deb41b64536365e47790a2435d26b40c74468f766ba0ae096a341aacce61879c
      routeRuleConditions:
        hostnames:
        - maas.apps.7695ae6b-23bf-4afb-8528-5cb7055fd75a.prod.konfluxeaas.com
        predicates:
        - request.url_path.startsWith('/llm/e2e-distinct-2-simulated')
    - actions:
      - scope: 5fea747cb803a5ee3aeb620187bd9ec74ccccd10a92474ef528215a7ff146c8f
        service: auth-service
        sources:
        - authpolicy.kuadrant.io:openshift-ingress/gateway-default-auth
      - conditionalData:
        - data:
          - expression:
              key: tokenlimit.deny_all_by_default__6d45535f
              value: "1"
          - expression:
              key: auth.identity.userid
              value: auth.identity.userid
          - expression:
              key: ratelimit.hits_addend
              value: "0"
          predicates:
          - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")'
        scope: llm/e2e-trlp-test-simulated-kserve-route
        service: ratelimit-check-service
        sources:
        - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny
      - conditionalData:
        - data:
          - expression:
              key: tokenlimit.deny_all_by_default__6d45535f
              value: "1"
          - expression:
              key: auth.identity.userid
              value: auth.identity.userid
          - expression:
              key: ratelimit.hits_addend
              value: responseBodyJSON("/usage/total_tokens")
          predicates:
          - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")'
        scope: llm/e2e-trlp-test-simulated-kserve-route
        service: ratelimit-report-service
        sources:
        - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny
      name: 52da20fb6819c20321a2ed555dd445ce6c4fa6b6e71bffe7cd3222f30c371be4
      routeRuleConditions:
        hostnames:
        - maas.apps.7695ae6b-23bf-4afb-8528-5cb7055fd75a.prod.konfluxeaas.com
        predicates:
        - request.url_path.startsWith('/llm/e2e-trlp-test-simulated')
    - actions:
      - scope: 86cbb62fb4d82d4dc402b3281444539a5625c4bb4c86bbc4912c70e690a2e374
        service: auth-service
        sources:
        - authpolicy.kuadrant.io:openshift-ingress/gateway-default-auth
      - conditionalData:
        - data:
          - expression:
              key: tokenlimit.deny_all_by_default__6d45535f
              value: "1"
          - expression:
              key: auth.identity.userid
              value: auth.identity.userid
          - expression:
              key: ratelimit.hits_addend
              value: "0"
          predicates:
          - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")'
        scope: llm/e2e-distinct-simulated-kserve-route
        service: ratelimit-check-service
        sources:
        - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny
      - conditionalData:
        - data:
          - expression:
              key: tokenlimit.deny_all_by_default__6d45535f
              value: "1"
          - expression:
              key: auth.identity.userid
              value: auth.identity.userid
          - expression:
              key: ratelimit.hits_addend
              value: responseBodyJSON("/usage/total_tokens")
          predicates:
          - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")'
        scope: llm/e2e-distinct-simulated-kserve-route
        service: ratelimit-report-service
        sources:
        - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny
      name: 8084379995fa87b2a5f591620b5c01bafa914f5fe6613f42a2109fe1055463f4
      routeRuleConditions:
        hostnames:
        - maas.apps.7695ae6b-23bf-4afb-8528-5cb7055fd75a.prod.konfluxeaas.com
        predicates:
        - request.url_path.startsWith('/llm/e2e-distinct-simulated')
    - actions:
      - predicates:
        - request.path != "/maas-api/health" || request.method != "GET"
        scope: 64a4fb0342f88ea589d83c2f8fa31545655652a27e95b54e34ff1aea7a23ce7a
        service: auth-service
        sources:
        - authpolicy.kuadrant.io:redhat-ai-gateway-infra/maas-api-auth-policy
      - conditionalData:
        - data:
          - expression:
              key: tokenlimit.deny_all_by_default__6d45535f
              value: "1"
          - expression:
              key: auth.identity.userid
              value: auth.identity.userid
          - expression:
              key: ratelimit.hits_addend
              value: "0"
          predicates:
          - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")'
        scope: redhat-ai-gateway-infra/maas-api-route
        service: ratelimit-check-service
        sources:
        - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny
      - conditionalData:
        - data:
          - expression:
              key: tokenlimit.deny_all_by_default__6d45535f
              value: "1"
          - expression:
              key: auth.identity.userid
              value: auth.identity.userid
          - expression:
              key: ratelimit.hits_addend
              value: responseBodyJSON("/usage/total_tokens")
          predicates:
          - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")'
        scope: redhat-ai-gateway-infra/maas-api-route
        service: ratelimit-report-service
        sources:
        - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny
      name: e555caf2981d23699d931871717a5d8950de345c91f7ee6b56f391a977265683
      routeRuleConditions:
        hostnames:
        - maas.apps.7695ae6b-23bf-4afb-8528-5cb7055fd75a.prod.konfluxeaas.com
        predicates:
        - request.url_path.startsWith('/v1/models')
    - actions:
      - predicates:
        - request.path != "/maas-api/health" || request.method != "GET"
        scope: 36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612
        service: auth-service
        sources:
        - authpolicy.kuadrant.io:redhat-ai-gateway-infra/maas-api-auth-policy
      - conditionalData:
        - data:
          - expression:
              key: tokenlimit.deny_all_by_default__6d45535f
              value: "1"
          - expression:
              key: auth.identity.userid
              value: auth.identity.userid
          - expression:
              key: ratelimit.hits_addend
              value: "0"
          predicates:
          - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")'
        scope: redhat-ai-gateway-infra/maas-api-route
        service: ratelimit-check-service
        sources:
        - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny
      - conditionalData:
        - data:
          - expression:
              key: tokenlimit.deny_all_by_default__6d45535f
              value: "1"
          - expression:
              key: auth.identity.userid
              value: auth.identity.userid
          - expression:
              key: ratelimit.hits_addend
              value: responseBodyJSON("/usage/total_tokens")
          predicates:
          - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")'
        scope: redhat-ai-gateway-infra/maas-api-route
        service: ratelimit-report-service
        sources:
        - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny
      name: ae71b58637ecbd9a597bfe5aa69faeb590a566977fab6b13aa678563f42055e4
      routeRuleConditions:
        hostnames:
        - maas.apps.7695ae6b-23bf-4afb-8528-5cb7055fd75a.prod.konfluxeaas.com
        predicates:
        - request.url_path.startsWith('/maas-api')
    services:
      auth-service:
        endpoint: kuadrant-auth-service
        failureMode: deny
        timeout: 200ms
        type: auth
      ratelimit-check-service:
        endpoint: kuadrant-ratelimit-service
        failureMode: deny
        timeout: 100ms
        type: ratelimit-check
      ratelimit-report-service:
        endpoint: kuadrant-ratelimit-service
        failureMode: deny
        timeout: 100ms
        type: ratelimit-report
      ratelimit-service:
        endpoint: kuadrant-ratelimit-service
        failureMode: allow
        timeout: 100ms
        type: ratelimit
  targetRefs:
  - group: gateway.networking.k8s.io
    kind: Gateway
    name: maas-default-gateway
  url: quay.io/kuadrant/wasm-shim:v0.12.1