apiVersion: extensions.istio.io/v1alpha1 kind: WasmPlugin metadata: creationTimestamp: "2026-06-03T19:51:28Z" generation: 589 labels: kuadrant.io/managed: "true" managedFields: - apiVersion: extensions.istio.io/v1alpha1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:labels: .: {} f:kuadrant.io/managed: {} f:ownerReferences: .: {} k:{"uid":"70dd5b59-5ba0-4aad-84e0-dc7b162209b2"}: {} f:spec: .: {} f:phase: {} f:pluginConfig: .: {} f:actionSets: {} f:services: .: {} f:auth-service: .: {} f:endpoint: {} f:failureMode: {} f:timeout: {} f:type: {} f:ratelimit-check-service: .: {} f:endpoint: {} f:failureMode: {} f:timeout: {} f:type: {} f:ratelimit-report-service: .: {} f:endpoint: {} f:failureMode: {} f:timeout: {} f:type: {} f:ratelimit-service: .: {} f:endpoint: {} f:failureMode: {} f:timeout: {} f:type: {} f:targetRefs: {} f:url: {} manager: manager operation: Update time: "2026-06-03T20:18:35Z" name: kuadrant-maas-default-gateway namespace: openshift-ingress ownerReferences: - apiVersion: gateway.networking.k8s.io/v1 blockOwnerDeletion: true controller: true kind: Gateway name: maas-default-gateway uid: 70dd5b59-5ba0-4aad-84e0-dc7b162209b2 resourceVersion: "53095" uid: 23cbd6bd-9bef-411b-836c-515e0f7c7a72 spec: phase: STATS pluginConfig: actionSets: - actions: - scope: cccb9f888be4be56e16cc32e380709be54a35972abf80517f8c40fc107282b39 service: auth-service sources: - authpolicy.kuadrant.io:openshift-ingress/gateway-default-auth - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: "0" predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-unconfigured-facebook-opt-125m-simulated-kserve-route service: ratelimit-check-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: responseBodyJSON("/usage/total_tokens") predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-unconfigured-facebook-opt-125m-simulated-kserve-route service: ratelimit-report-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny name: 28216084b6bf715c299aca4e5d52e293c9b1ec8fd221cdb0b7c182a9aea7dbd0 routeRuleConditions: hostnames: - maas.apps.63212ffb-4e4c-4aad-9a75-b5a33a5b1cad.prod.konfluxeaas.com predicates: - request.url_path.startsWith('/llm/e2e-unconfigured-facebook-opt-125m-simulated/v1/chat/completions') - actions: - scope: 9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a service: auth-service sources: - authpolicy.kuadrant.io:openshift-ingress/gateway-default-auth - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: "0" predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-unconfigured-facebook-opt-125m-simulated-kserve-route service: ratelimit-check-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: responseBodyJSON("/usage/total_tokens") predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-unconfigured-facebook-opt-125m-simulated-kserve-route service: ratelimit-report-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny name: a200d1ead173aa86aca57ad56ac2e4461dff22728cf4eae5bdf1ed0ca5576fe6 routeRuleConditions: hostnames: - maas.apps.63212ffb-4e4c-4aad-9a75-b5a33a5b1cad.prod.konfluxeaas.com predicates: - request.url_path.startsWith('/llm/e2e-unconfigured-facebook-opt-125m-simulated/v1/chat/completions') - actions: - scope: d81a415a9d6b7bd916041b26b5a288b98c3b5bc233efb3bb1e7ca74fc032a437 service: auth-service sources: - authpolicy.kuadrant.io:openshift-ingress/gateway-default-auth - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: "0" predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-unconfigured-facebook-opt-125m-simulated-kserve-route service: ratelimit-check-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: responseBodyJSON("/usage/total_tokens") predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-unconfigured-facebook-opt-125m-simulated-kserve-route service: ratelimit-report-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny name: 42608254337a69955c7ab37e36d866576800654bae31780d6c0e3dd4acc6f979 routeRuleConditions: hostnames: - maas.apps.63212ffb-4e4c-4aad-9a75-b5a33a5b1cad.prod.konfluxeaas.com predicates: - request.url_path.startsWith('/llm/e2e-unconfigured-facebook-opt-125m-simulated/v1/completions') - actions: - scope: 01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5 service: auth-service sources: - authpolicy.kuadrant.io:openshift-ingress/gateway-default-auth - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: "0" predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-unconfigured-facebook-opt-125m-simulated-kserve-route service: ratelimit-check-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: responseBodyJSON("/usage/total_tokens") predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-unconfigured-facebook-opt-125m-simulated-kserve-route service: ratelimit-report-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny name: 301dc840e6155a79f61d958a922a6d49aec702905df9ecf3d14bf2f960919b25 routeRuleConditions: hostnames: - maas.apps.63212ffb-4e4c-4aad-9a75-b5a33a5b1cad.prod.konfluxeaas.com predicates: - request.url_path.startsWith('/llm/e2e-unconfigured-facebook-opt-125m-simulated/v1/completions') - actions: - scope: aae65b7ddc0033e778bd82057b67fb5cd3e029782d6fd444ddefece908444945 service: auth-service sources: - authpolicy.kuadrant.io:openshift-ingress/gateway-default-auth - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: "0" predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-unconfigured-facebook-opt-125m-simulated-kserve-route service: ratelimit-check-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: responseBodyJSON("/usage/total_tokens") predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-unconfigured-facebook-opt-125m-simulated-kserve-route service: ratelimit-report-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny name: 76ce2bc6251f79541b9c46d04302558b60493f610b3b02fd042e62448e496196 routeRuleConditions: hostnames: - maas.apps.63212ffb-4e4c-4aad-9a75-b5a33a5b1cad.prod.konfluxeaas.com predicates: - request.url_path.startsWith('/llm/e2e-unconfigured-facebook-opt-125m-simulated/v1/responses') - actions: - scope: e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be service: auth-service sources: - authpolicy.kuadrant.io:openshift-ingress/gateway-default-auth - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: "0" predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-unconfigured-facebook-opt-125m-simulated-kserve-route service: ratelimit-check-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: responseBodyJSON("/usage/total_tokens") predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-unconfigured-facebook-opt-125m-simulated-kserve-route service: ratelimit-report-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny name: 1d36c300f55fdc7ea983f8eaf961b7f7212e6e6d6d6dca8e54f5fc902b631e87 routeRuleConditions: hostnames: - maas.apps.63212ffb-4e4c-4aad-9a75-b5a33a5b1cad.prod.konfluxeaas.com predicates: - request.url_path.startsWith('/llm/e2e-unconfigured-facebook-opt-125m-simulated/v1/responses') - actions: - scope: 290fcbcface9546d9c9667b9925aed6bb7d99d80cc4eac41ce432606d6568f6d service: auth-service sources: - authpolicy.kuadrant.io:llm/maas-auth-premium-simulated-simulated-premium - conditionalData: - data: - expression: key: tokenlimit.models_as_a_service_premium_simulator_subscription_premium_simulated_simulated_premium_tokens__a2a80825 value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: "0" predicates: - auth.identity.selected_subscription_key == "models-as-a-service/premium-simulator-subscription@llm/premium-simulated-simulated-premium" && !request.path.endsWith("/v1/models") scope: llm/premium-simulated-simulated-premium-kserve-route service: ratelimit-check-service sources: - tokenratelimitpolicy.kuadrant.io:llm/maas-trlp-premium-simulated-simulated-premium - conditionalData: - data: - expression: key: tokenlimit.models_as_a_service_premium_simulator_subscription_premium_simulated_simulated_premium_tokens__a2a80825 value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: responseBodyJSON("/usage/total_tokens") predicates: - auth.identity.selected_subscription_key == "models-as-a-service/premium-simulator-subscription@llm/premium-simulated-simulated-premium" && !request.path.endsWith("/v1/models") scope: llm/premium-simulated-simulated-premium-kserve-route service: ratelimit-report-service sources: - tokenratelimitpolicy.kuadrant.io:llm/maas-trlp-premium-simulated-simulated-premium name: 53424368c2be92ff92961338d723d9b7f3e4f03aa95748465aec2af1de67d049 routeRuleConditions: hostnames: - maas.apps.63212ffb-4e4c-4aad-9a75-b5a33a5b1cad.prod.konfluxeaas.com predicates: - request.url_path.startsWith('/llm/premium-simulated-simulated-premium/v1/chat/completions') - actions: - scope: edcceb5a2e0cf1edde0fc3ed43068ce5b123a6fdc41949959c2c3b7a5a48bf24 service: auth-service sources: - authpolicy.kuadrant.io:llm/maas-auth-premium-simulated-simulated-premium - conditionalData: - data: - expression: key: tokenlimit.models_as_a_service_premium_simulator_subscription_premium_simulated_simulated_premium_tokens__a2a80825 value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: "0" predicates: - auth.identity.selected_subscription_key == "models-as-a-service/premium-simulator-subscription@llm/premium-simulated-simulated-premium" && !request.path.endsWith("/v1/models") scope: llm/premium-simulated-simulated-premium-kserve-route service: ratelimit-check-service sources: - tokenratelimitpolicy.kuadrant.io:llm/maas-trlp-premium-simulated-simulated-premium - conditionalData: - data: - expression: key: tokenlimit.models_as_a_service_premium_simulator_subscription_premium_simulated_simulated_premium_tokens__a2a80825 value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: responseBodyJSON("/usage/total_tokens") predicates: - auth.identity.selected_subscription_key == "models-as-a-service/premium-simulator-subscription@llm/premium-simulated-simulated-premium" && !request.path.endsWith("/v1/models") scope: llm/premium-simulated-simulated-premium-kserve-route service: ratelimit-report-service sources: - tokenratelimitpolicy.kuadrant.io:llm/maas-trlp-premium-simulated-simulated-premium name: 50407ed8d6fa92decb7354f1ffb21ddaa3874c768d1e0b1986810589acf5dc6a routeRuleConditions: hostnames: - maas.apps.63212ffb-4e4c-4aad-9a75-b5a33a5b1cad.prod.konfluxeaas.com predicates: - request.url_path.startsWith('/llm/premium-simulated-simulated-premium/v1/chat/completions') - actions: - scope: 80f10756c0e833d16937036ed66f1daf5bef95559ef05a5e852766b97b9bdaef service: auth-service sources: - authpolicy.kuadrant.io:llm/maas-auth-premium-simulated-simulated-premium - conditionalData: - data: - expression: key: tokenlimit.models_as_a_service_premium_simulator_subscription_premium_simulated_simulated_premium_tokens__a2a80825 value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: "0" predicates: - auth.identity.selected_subscription_key == "models-as-a-service/premium-simulator-subscription@llm/premium-simulated-simulated-premium" && !request.path.endsWith("/v1/models") scope: llm/premium-simulated-simulated-premium-kserve-route service: ratelimit-check-service sources: - tokenratelimitpolicy.kuadrant.io:llm/maas-trlp-premium-simulated-simulated-premium - conditionalData: - data: - expression: key: tokenlimit.models_as_a_service_premium_simulator_subscription_premium_simulated_simulated_premium_tokens__a2a80825 value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: responseBodyJSON("/usage/total_tokens") predicates: - auth.identity.selected_subscription_key == "models-as-a-service/premium-simulator-subscription@llm/premium-simulated-simulated-premium" && !request.path.endsWith("/v1/models") scope: llm/premium-simulated-simulated-premium-kserve-route service: ratelimit-report-service sources: - tokenratelimitpolicy.kuadrant.io:llm/maas-trlp-premium-simulated-simulated-premium name: eca1bcc64c46642e06d0cde0bee5a69a9bff1def20315da6ffd0d9d6d50070a4 routeRuleConditions: hostnames: - maas.apps.63212ffb-4e4c-4aad-9a75-b5a33a5b1cad.prod.konfluxeaas.com predicates: - request.url_path.startsWith('/llm/premium-simulated-simulated-premium/v1/completions') - actions: - scope: bdc91161f6d2aa93e1f0bdc761e87370999b7b62803bc46a203347b0f626e17d service: auth-service sources: - authpolicy.kuadrant.io:llm/maas-auth-premium-simulated-simulated-premium - conditionalData: - data: - expression: key: tokenlimit.models_as_a_service_premium_simulator_subscription_premium_simulated_simulated_premium_tokens__a2a80825 value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: "0" predicates: - auth.identity.selected_subscription_key == "models-as-a-service/premium-simulator-subscription@llm/premium-simulated-simulated-premium" && !request.path.endsWith("/v1/models") scope: llm/premium-simulated-simulated-premium-kserve-route service: ratelimit-check-service sources: - tokenratelimitpolicy.kuadrant.io:llm/maas-trlp-premium-simulated-simulated-premium - conditionalData: - data: - expression: key: tokenlimit.models_as_a_service_premium_simulator_subscription_premium_simulated_simulated_premium_tokens__a2a80825 value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: responseBodyJSON("/usage/total_tokens") predicates: - auth.identity.selected_subscription_key == "models-as-a-service/premium-simulator-subscription@llm/premium-simulated-simulated-premium" && !request.path.endsWith("/v1/models") scope: llm/premium-simulated-simulated-premium-kserve-route service: ratelimit-report-service sources: - tokenratelimitpolicy.kuadrant.io:llm/maas-trlp-premium-simulated-simulated-premium name: 6d890f3eb105a32a0397165b8b01ea8306266a4d54e655bd4f38f03330103217 routeRuleConditions: hostnames: - maas.apps.63212ffb-4e4c-4aad-9a75-b5a33a5b1cad.prod.konfluxeaas.com predicates: - request.url_path.startsWith('/llm/premium-simulated-simulated-premium/v1/completions') - actions: - scope: 4dc577fd60594d78a4a8bebe396f4b5a928f41bdc3f95c06d717cf1ddc3158b2 service: auth-service sources: - authpolicy.kuadrant.io:llm/maas-auth-premium-simulated-simulated-premium - conditionalData: - data: - expression: key: tokenlimit.models_as_a_service_premium_simulator_subscription_premium_simulated_simulated_premium_tokens__a2a80825 value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: "0" predicates: - auth.identity.selected_subscription_key == "models-as-a-service/premium-simulator-subscription@llm/premium-simulated-simulated-premium" && !request.path.endsWith("/v1/models") scope: llm/premium-simulated-simulated-premium-kserve-route service: ratelimit-check-service sources: - tokenratelimitpolicy.kuadrant.io:llm/maas-trlp-premium-simulated-simulated-premium - conditionalData: - data: - expression: key: tokenlimit.models_as_a_service_premium_simulator_subscription_premium_simulated_simulated_premium_tokens__a2a80825 value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: responseBodyJSON("/usage/total_tokens") predicates: - auth.identity.selected_subscription_key == "models-as-a-service/premium-simulator-subscription@llm/premium-simulated-simulated-premium" && !request.path.endsWith("/v1/models") scope: llm/premium-simulated-simulated-premium-kserve-route service: ratelimit-report-service sources: - tokenratelimitpolicy.kuadrant.io:llm/maas-trlp-premium-simulated-simulated-premium name: 13657990aa71b913f99fd1ccb2ad187a036cdd9480b437c80b272d721bc4b925 routeRuleConditions: hostnames: - maas.apps.63212ffb-4e4c-4aad-9a75-b5a33a5b1cad.prod.konfluxeaas.com predicates: - request.url_path.startsWith('/llm/premium-simulated-simulated-premium/v1/responses') - actions: - scope: 98bc217fbd0e2cf75ea4dcf982124867212376a116bb6e3b753f8445aead6170 service: auth-service sources: - authpolicy.kuadrant.io:llm/maas-auth-premium-simulated-simulated-premium - conditionalData: - data: - expression: key: tokenlimit.models_as_a_service_premium_simulator_subscription_premium_simulated_simulated_premium_tokens__a2a80825 value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: "0" predicates: - auth.identity.selected_subscription_key == "models-as-a-service/premium-simulator-subscription@llm/premium-simulated-simulated-premium" && !request.path.endsWith("/v1/models") scope: llm/premium-simulated-simulated-premium-kserve-route service: ratelimit-check-service sources: - tokenratelimitpolicy.kuadrant.io:llm/maas-trlp-premium-simulated-simulated-premium - conditionalData: - data: - expression: key: tokenlimit.models_as_a_service_premium_simulator_subscription_premium_simulated_simulated_premium_tokens__a2a80825 value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: responseBodyJSON("/usage/total_tokens") predicates: - auth.identity.selected_subscription_key == "models-as-a-service/premium-simulator-subscription@llm/premium-simulated-simulated-premium" && !request.path.endsWith("/v1/models") scope: llm/premium-simulated-simulated-premium-kserve-route service: ratelimit-report-service sources: - tokenratelimitpolicy.kuadrant.io:llm/maas-trlp-premium-simulated-simulated-premium name: 3f7fc5a0a51c4ed9fb6e0b57f7c544556c79f0aa4eee075e755e191a1e267d82 routeRuleConditions: hostnames: - maas.apps.63212ffb-4e4c-4aad-9a75-b5a33a5b1cad.prod.konfluxeaas.com predicates: - request.url_path.startsWith('/llm/premium-simulated-simulated-premium/v1/responses') - actions: - scope: 5aa0fd746a1cbe4557cf771f0b5f5c4020da5a6444c58d701a6d039232d7faab service: auth-service sources: - authpolicy.kuadrant.io:llm/maas-auth-facebook-opt-125m-simulated - conditionalData: - data: - expression: key: tokenlimit.models_as_a_service_simulator_subscription_facebook_opt_125m_simulated_tokens__87db8427 value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: "0" predicates: - auth.identity.selected_subscription_key == "models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated" && !request.path.endsWith("/v1/models") scope: llm/facebook-opt-125m-simulated-kserve-route service: ratelimit-check-service sources: - tokenratelimitpolicy.kuadrant.io:llm/maas-trlp-facebook-opt-125m-simulated - conditionalData: - data: - expression: key: tokenlimit.models_as_a_service_simulator_subscription_facebook_opt_125m_simulated_tokens__87db8427 value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: responseBodyJSON("/usage/total_tokens") predicates: - auth.identity.selected_subscription_key == "models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated" && !request.path.endsWith("/v1/models") scope: llm/facebook-opt-125m-simulated-kserve-route service: ratelimit-report-service sources: - tokenratelimitpolicy.kuadrant.io:llm/maas-trlp-facebook-opt-125m-simulated name: cb6ffa40d8d74a0127b20b7c4cdeaf83ff16ff606505830c18b635c2e240bc72 routeRuleConditions: hostnames: - maas.apps.63212ffb-4e4c-4aad-9a75-b5a33a5b1cad.prod.konfluxeaas.com predicates: - request.url_path.startsWith('/llm/facebook-opt-125m-simulated/v1/chat/completions') - actions: - scope: 18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76 service: auth-service sources: - authpolicy.kuadrant.io:llm/maas-auth-facebook-opt-125m-simulated - conditionalData: - data: - expression: key: tokenlimit.models_as_a_service_simulator_subscription_facebook_opt_125m_simulated_tokens__87db8427 value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: "0" predicates: - auth.identity.selected_subscription_key == "models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated" && !request.path.endsWith("/v1/models") scope: llm/facebook-opt-125m-simulated-kserve-route service: ratelimit-check-service sources: - tokenratelimitpolicy.kuadrant.io:llm/maas-trlp-facebook-opt-125m-simulated - conditionalData: - data: - expression: key: tokenlimit.models_as_a_service_simulator_subscription_facebook_opt_125m_simulated_tokens__87db8427 value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: responseBodyJSON("/usage/total_tokens") predicates: - auth.identity.selected_subscription_key == "models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated" && !request.path.endsWith("/v1/models") scope: llm/facebook-opt-125m-simulated-kserve-route service: ratelimit-report-service sources: - tokenratelimitpolicy.kuadrant.io:llm/maas-trlp-facebook-opt-125m-simulated name: 48437378e333f9bc9d83e01de23eb312388807c95f0bbd7aa721fb877626b121 routeRuleConditions: hostnames: - maas.apps.63212ffb-4e4c-4aad-9a75-b5a33a5b1cad.prod.konfluxeaas.com predicates: - request.url_path.startsWith('/llm/facebook-opt-125m-simulated/v1/chat/completions') - actions: - scope: e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a service: auth-service sources: - authpolicy.kuadrant.io:openshift-ingress/gateway-default-auth - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: "0" predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-distinct-2-simulated-kserve-route service: ratelimit-check-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: responseBodyJSON("/usage/total_tokens") predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-distinct-2-simulated-kserve-route service: ratelimit-report-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny name: 619caf3063085fe59702104aa64f9b0c60bb09ccf2e7a785b0d9d6d28f0f40e2 routeRuleConditions: hostnames: - maas.apps.63212ffb-4e4c-4aad-9a75-b5a33a5b1cad.prod.konfluxeaas.com predicates: - request.url_path.startsWith('/llm/e2e-distinct-2-simulated/v1/chat/completions') - actions: - scope: df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346 service: auth-service sources: - authpolicy.kuadrant.io:openshift-ingress/gateway-default-auth - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: "0" predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-distinct-2-simulated-kserve-route service: ratelimit-check-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: responseBodyJSON("/usage/total_tokens") predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-distinct-2-simulated-kserve-route service: ratelimit-report-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny name: 7a1b1371cfca56f308d2bbee127e58c496ba8fcb56829804a6060a9340aa5d22 routeRuleConditions: hostnames: - maas.apps.63212ffb-4e4c-4aad-9a75-b5a33a5b1cad.prod.konfluxeaas.com predicates: - request.url_path.startsWith('/llm/e2e-distinct-2-simulated/v1/chat/completions') - actions: - scope: 9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5 service: auth-service sources: - authpolicy.kuadrant.io:openshift-ingress/gateway-default-auth - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: "0" predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-unconfigured-facebook-opt-125m-simulated-kserve-route service: ratelimit-check-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: responseBodyJSON("/usage/total_tokens") predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-unconfigured-facebook-opt-125m-simulated-kserve-route service: ratelimit-report-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny name: 66464be76eeaa35fabbb1755b124f9a64409a5fbeceb22a7d008950afeb7bf43 routeRuleConditions: hostnames: - maas.apps.63212ffb-4e4c-4aad-9a75-b5a33a5b1cad.prod.konfluxeaas.com predicates: - request.url_path.startsWith('/llm/e2e-unconfigured-facebook-opt-125m-simulated') - actions: - scope: 8b68b883dd0441c7b1f53f6adc6c3add12f8912a17afae4d05f1f1bbc1b53f9a service: auth-service sources: - authpolicy.kuadrant.io:openshift-ingress/gateway-default-auth - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: "0" predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-unconfigured-facebook-opt-125m-simulated-kserve-route service: ratelimit-check-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: responseBodyJSON("/usage/total_tokens") predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-unconfigured-facebook-opt-125m-simulated-kserve-route service: ratelimit-report-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny name: 1ca5ded0574b2cf50deb58c77205f4e80d28ca89e00421cee1306286d45764a5 routeRuleConditions: hostnames: - maas.apps.63212ffb-4e4c-4aad-9a75-b5a33a5b1cad.prod.konfluxeaas.com predicates: - request.url_path.startsWith('/llm/e2e-unconfigured-facebook-opt-125m-simulated') - actions: - scope: 319a353672fc7601c875fa3f8b807adf60b64f093f022b2a1c3dfef3ac8cd4f4 service: auth-service sources: - authpolicy.kuadrant.io:openshift-ingress/gateway-default-auth - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: "0" predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-trlp-test-simulated-kserve-route service: ratelimit-check-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: responseBodyJSON("/usage/total_tokens") predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-trlp-test-simulated-kserve-route service: ratelimit-report-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny name: 3cea823069b1b911a3ea2a22730724faebffbe0a56cf99be178493f7f77fe974 routeRuleConditions: hostnames: - maas.apps.63212ffb-4e4c-4aad-9a75-b5a33a5b1cad.prod.konfluxeaas.com predicates: - request.url_path.startsWith('/llm/e2e-trlp-test-simulated/v1/chat/completions') - actions: - scope: 4c297061aecf4870589c6c3c778bd16a5e111a166b5adab99e23173a5d9a9b82 service: auth-service sources: - authpolicy.kuadrant.io:openshift-ingress/gateway-default-auth - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: "0" predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-trlp-test-simulated-kserve-route service: ratelimit-check-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: responseBodyJSON("/usage/total_tokens") predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-trlp-test-simulated-kserve-route service: ratelimit-report-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny name: eb88de592ac2a02069b67690c674e00629d3d11e234fb920ea148d72cfe26811 routeRuleConditions: hostnames: - maas.apps.63212ffb-4e4c-4aad-9a75-b5a33a5b1cad.prod.konfluxeaas.com predicates: - request.url_path.startsWith('/llm/e2e-trlp-test-simulated/v1/chat/completions') - actions: - scope: 0740694b94da2b1f6093b148b85b9ec044f97848654ae7c0cc966ee03e0c4830 service: auth-service sources: - authpolicy.kuadrant.io:openshift-ingress/gateway-default-auth - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: "0" predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-distinct-simulated-kserve-route service: ratelimit-check-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: responseBodyJSON("/usage/total_tokens") predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-distinct-simulated-kserve-route service: ratelimit-report-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny name: 15b3823411a22a0bcdada3f0f5128faf0f82bf69a0b2f678c527c6dc8d43a51b routeRuleConditions: hostnames: - maas.apps.63212ffb-4e4c-4aad-9a75-b5a33a5b1cad.prod.konfluxeaas.com predicates: - request.url_path.startsWith('/llm/e2e-distinct-simulated/v1/chat/completions') - actions: - scope: 3dc75fc8307b952a3e873400cf417e90f2861e8a225abec4b22708deb7901db7 service: auth-service sources: - authpolicy.kuadrant.io:openshift-ingress/gateway-default-auth - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: "0" predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-distinct-simulated-kserve-route service: ratelimit-check-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: responseBodyJSON("/usage/total_tokens") predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-distinct-simulated-kserve-route service: ratelimit-report-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny name: 50eaf32748c5ffc2ae9cc5fb600436a19e428d0646ce2f1945d7782b17121275 routeRuleConditions: hostnames: - maas.apps.63212ffb-4e4c-4aad-9a75-b5a33a5b1cad.prod.konfluxeaas.com predicates: - request.url_path.startsWith('/llm/e2e-distinct-simulated/v1/chat/completions') - actions: - scope: aa8134dca1e9e412ac99acf6a54001c807c3fb733db7d2dce945f529dd033597 service: auth-service sources: - authpolicy.kuadrant.io:llm/maas-auth-facebook-opt-125m-simulated - conditionalData: - data: - expression: key: tokenlimit.models_as_a_service_simulator_subscription_facebook_opt_125m_simulated_tokens__87db8427 value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: "0" predicates: - auth.identity.selected_subscription_key == "models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated" && !request.path.endsWith("/v1/models") scope: llm/facebook-opt-125m-simulated-kserve-route service: ratelimit-check-service sources: - tokenratelimitpolicy.kuadrant.io:llm/maas-trlp-facebook-opt-125m-simulated - conditionalData: - data: - expression: key: tokenlimit.models_as_a_service_simulator_subscription_facebook_opt_125m_simulated_tokens__87db8427 value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: responseBodyJSON("/usage/total_tokens") predicates: - auth.identity.selected_subscription_key == "models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated" && !request.path.endsWith("/v1/models") scope: llm/facebook-opt-125m-simulated-kserve-route service: ratelimit-report-service sources: - tokenratelimitpolicy.kuadrant.io:llm/maas-trlp-facebook-opt-125m-simulated name: 19c6512ccb6235d81792eba4938f21e5595d4060ae7d3f660f1df61376a28ac5 routeRuleConditions: hostnames: - maas.apps.63212ffb-4e4c-4aad-9a75-b5a33a5b1cad.prod.konfluxeaas.com predicates: - request.url_path.startsWith('/llm/facebook-opt-125m-simulated/v1/completions') - actions: - scope: cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a service: auth-service sources: - authpolicy.kuadrant.io:llm/maas-auth-facebook-opt-125m-simulated - conditionalData: - data: - expression: key: tokenlimit.models_as_a_service_simulator_subscription_facebook_opt_125m_simulated_tokens__87db8427 value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: "0" predicates: - auth.identity.selected_subscription_key == "models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated" && !request.path.endsWith("/v1/models") scope: llm/facebook-opt-125m-simulated-kserve-route service: ratelimit-check-service sources: - tokenratelimitpolicy.kuadrant.io:llm/maas-trlp-facebook-opt-125m-simulated - conditionalData: - data: - expression: key: tokenlimit.models_as_a_service_simulator_subscription_facebook_opt_125m_simulated_tokens__87db8427 value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: responseBodyJSON("/usage/total_tokens") predicates: - auth.identity.selected_subscription_key == "models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated" && !request.path.endsWith("/v1/models") scope: llm/facebook-opt-125m-simulated-kserve-route service: ratelimit-report-service sources: - tokenratelimitpolicy.kuadrant.io:llm/maas-trlp-facebook-opt-125m-simulated name: 87ccf267738bc2f99bebc5f4b4c534c53c1b2fa1a51995003092bafeef5f3fc5 routeRuleConditions: hostnames: - maas.apps.63212ffb-4e4c-4aad-9a75-b5a33a5b1cad.prod.konfluxeaas.com predicates: - request.url_path.startsWith('/llm/facebook-opt-125m-simulated/v1/completions') - actions: - scope: e716e70ac29d4c7bea453bb99861c5f15b3d9860b623d5ef2c7badd4e1cb9bc9 service: auth-service sources: - authpolicy.kuadrant.io:llm/maas-auth-facebook-opt-125m-simulated - conditionalData: - data: - expression: key: tokenlimit.models_as_a_service_simulator_subscription_facebook_opt_125m_simulated_tokens__87db8427 value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: "0" predicates: - auth.identity.selected_subscription_key == "models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated" && !request.path.endsWith("/v1/models") scope: llm/facebook-opt-125m-simulated-kserve-route service: ratelimit-check-service sources: - tokenratelimitpolicy.kuadrant.io:llm/maas-trlp-facebook-opt-125m-simulated - conditionalData: - data: - expression: key: tokenlimit.models_as_a_service_simulator_subscription_facebook_opt_125m_simulated_tokens__87db8427 value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: responseBodyJSON("/usage/total_tokens") predicates: - auth.identity.selected_subscription_key == "models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated" && !request.path.endsWith("/v1/models") scope: llm/facebook-opt-125m-simulated-kserve-route service: ratelimit-report-service sources: - tokenratelimitpolicy.kuadrant.io:llm/maas-trlp-facebook-opt-125m-simulated name: 00ebdee73b710db67e245b10f5d4caa0178754bf19ad9dee51f87b2814a854f8 routeRuleConditions: hostnames: - maas.apps.63212ffb-4e4c-4aad-9a75-b5a33a5b1cad.prod.konfluxeaas.com predicates: - request.url_path.startsWith('/llm/facebook-opt-125m-simulated/v1/responses') - actions: - scope: 311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418 service: auth-service sources: - authpolicy.kuadrant.io:llm/maas-auth-facebook-opt-125m-simulated - conditionalData: - data: - expression: key: tokenlimit.models_as_a_service_simulator_subscription_facebook_opt_125m_simulated_tokens__87db8427 value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: "0" predicates: - auth.identity.selected_subscription_key == "models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated" && !request.path.endsWith("/v1/models") scope: llm/facebook-opt-125m-simulated-kserve-route service: ratelimit-check-service sources: - tokenratelimitpolicy.kuadrant.io:llm/maas-trlp-facebook-opt-125m-simulated - conditionalData: - data: - expression: key: tokenlimit.models_as_a_service_simulator_subscription_facebook_opt_125m_simulated_tokens__87db8427 value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: responseBodyJSON("/usage/total_tokens") predicates: - auth.identity.selected_subscription_key == "models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated" && !request.path.endsWith("/v1/models") scope: llm/facebook-opt-125m-simulated-kserve-route service: ratelimit-report-service sources: - tokenratelimitpolicy.kuadrant.io:llm/maas-trlp-facebook-opt-125m-simulated name: 0a11de3fc4c3c61084ddd6b1eb33b3139d7c1dc26bf90af8a564d728c61023af routeRuleConditions: hostnames: - maas.apps.63212ffb-4e4c-4aad-9a75-b5a33a5b1cad.prod.konfluxeaas.com predicates: - request.url_path.startsWith('/llm/facebook-opt-125m-simulated/v1/responses') - actions: - scope: 331dc257e65f55f80700a586f7807093eda7b3d8e7d91215dc3c47731508480c service: auth-service sources: - authpolicy.kuadrant.io:openshift-ingress/gateway-default-auth - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: "0" predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-distinct-2-simulated-kserve-route service: ratelimit-check-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: responseBodyJSON("/usage/total_tokens") predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-distinct-2-simulated-kserve-route service: ratelimit-report-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny name: 38eb3214ebb8c0db99bbe19325b7332dec303e1a44b2e73b2dc4329c1b6dffda routeRuleConditions: hostnames: - maas.apps.63212ffb-4e4c-4aad-9a75-b5a33a5b1cad.prod.konfluxeaas.com predicates: - request.url_path.startsWith('/llm/e2e-distinct-2-simulated/v1/completions') - actions: - scope: c245170da89e49f061561989e94654ede8e3261330d5fce018b1d279501abd0e service: auth-service sources: - authpolicy.kuadrant.io:openshift-ingress/gateway-default-auth - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: "0" predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-distinct-2-simulated-kserve-route service: ratelimit-check-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: responseBodyJSON("/usage/total_tokens") predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-distinct-2-simulated-kserve-route service: ratelimit-report-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny name: bc1d733483b4ce55800505c3252b41dd1b0a23fe2455ab4716fe75a9b1a27cf7 routeRuleConditions: hostnames: - maas.apps.63212ffb-4e4c-4aad-9a75-b5a33a5b1cad.prod.konfluxeaas.com predicates: - request.url_path.startsWith('/llm/e2e-distinct-2-simulated/v1/completions') - actions: - scope: bf72a6316f6ed79299511e58d068836cdc71dbca5e23944f783c9340ffa0aee1 service: auth-service sources: - authpolicy.kuadrant.io:openshift-ingress/gateway-default-auth - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: "0" predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-trlp-test-simulated-kserve-route service: ratelimit-check-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: responseBodyJSON("/usage/total_tokens") predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-trlp-test-simulated-kserve-route service: ratelimit-report-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny name: 90f9790baf37d7f0d6e7a1aa031295b038b216b3caa02bb04128f5fce2fe8653 routeRuleConditions: hostnames: - maas.apps.63212ffb-4e4c-4aad-9a75-b5a33a5b1cad.prod.konfluxeaas.com predicates: - request.url_path.startsWith('/llm/e2e-trlp-test-simulated/v1/completions') - actions: - scope: cb857b3e9077f5383c92f635f721c5106c8cce20a9467a6d67f8c67ebc9d46c7 service: auth-service sources: - authpolicy.kuadrant.io:openshift-ingress/gateway-default-auth - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: "0" predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-trlp-test-simulated-kserve-route service: ratelimit-check-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: responseBodyJSON("/usage/total_tokens") predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-trlp-test-simulated-kserve-route service: ratelimit-report-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny name: 5cfb80e7e111f4ff6c7bf71b901288563465fbe4ea8cf15cdde53f4cb9cd42ea routeRuleConditions: hostnames: - maas.apps.63212ffb-4e4c-4aad-9a75-b5a33a5b1cad.prod.konfluxeaas.com predicates: - request.url_path.startsWith('/llm/e2e-trlp-test-simulated/v1/completions') - actions: - scope: 414449ae595d12294cda43c4706566f5644d67ef6848de245e6caee2cdb069f8 service: auth-service sources: - authpolicy.kuadrant.io:openshift-ingress/gateway-default-auth - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: "0" predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-distinct-2-simulated-kserve-route service: ratelimit-check-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: responseBodyJSON("/usage/total_tokens") predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-distinct-2-simulated-kserve-route service: ratelimit-report-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny name: 8a8df572d7247c91fb9d30f0383f77113f90181e56207d963325e3d0bc7bd22b routeRuleConditions: hostnames: - maas.apps.63212ffb-4e4c-4aad-9a75-b5a33a5b1cad.prod.konfluxeaas.com predicates: - request.url_path.startsWith('/llm/e2e-distinct-2-simulated/v1/responses') - actions: - scope: 35d34d59676c333235d7c9f02273e0380bb39f27cfd30856fedc0f7c0e5f79aa service: auth-service sources: - authpolicy.kuadrant.io:openshift-ingress/gateway-default-auth - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: "0" predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-distinct-2-simulated-kserve-route service: ratelimit-check-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: responseBodyJSON("/usage/total_tokens") predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-distinct-2-simulated-kserve-route service: ratelimit-report-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny name: b3a9b533b324856a9cf147bc7cf7159807da0c2a20cbd8edfe9206ce176d63ee routeRuleConditions: hostnames: - maas.apps.63212ffb-4e4c-4aad-9a75-b5a33a5b1cad.prod.konfluxeaas.com predicates: - request.url_path.startsWith('/llm/e2e-distinct-2-simulated/v1/responses') - actions: - scope: c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76 service: auth-service sources: - authpolicy.kuadrant.io:openshift-ingress/gateway-default-auth - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: "0" predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-distinct-simulated-kserve-route service: ratelimit-check-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: responseBodyJSON("/usage/total_tokens") predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-distinct-simulated-kserve-route service: ratelimit-report-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny name: 112d037775876ccedaf4a5bd6823b1d4a12a1aa55ea1e890d21d83a707994bb1 routeRuleConditions: hostnames: - maas.apps.63212ffb-4e4c-4aad-9a75-b5a33a5b1cad.prod.konfluxeaas.com predicates: - request.url_path.startsWith('/llm/e2e-distinct-simulated/v1/completions') - actions: - scope: 3c0d47082320c9bb02d3788ab2b052c696af91abc2ae438437ae71a26936c7c2 service: auth-service sources: - authpolicy.kuadrant.io:openshift-ingress/gateway-default-auth - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: "0" predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-distinct-simulated-kserve-route service: ratelimit-check-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: responseBodyJSON("/usage/total_tokens") predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-distinct-simulated-kserve-route service: ratelimit-report-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny name: a388a0539842b2560128fcf723102239e96e0d2d9b5fc0c4f69bf7a865b547bd routeRuleConditions: hostnames: - maas.apps.63212ffb-4e4c-4aad-9a75-b5a33a5b1cad.prod.konfluxeaas.com predicates: - request.url_path.startsWith('/llm/e2e-distinct-simulated/v1/completions') - actions: - scope: 6cb5c4c9ff83dac784e73ce73f1d83f0bef8b0f7a10e074445fe944fab33ef4e service: auth-service sources: - authpolicy.kuadrant.io:openshift-ingress/gateway-default-auth - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: "0" predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-trlp-test-simulated-kserve-route service: ratelimit-check-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: responseBodyJSON("/usage/total_tokens") predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-trlp-test-simulated-kserve-route service: ratelimit-report-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny name: 8af485b6990d7170af2eb8d269971dc4cc1153b6412d3953bd795ece47e4d562 routeRuleConditions: hostnames: - maas.apps.63212ffb-4e4c-4aad-9a75-b5a33a5b1cad.prod.konfluxeaas.com predicates: - request.url_path.startsWith('/llm/e2e-trlp-test-simulated/v1/responses') - actions: - scope: df733b2c652bfe2458c9e19932b1091e939c1a62178d6879462b3b4f73fca4bb service: auth-service sources: - authpolicy.kuadrant.io:openshift-ingress/gateway-default-auth - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: "0" predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-trlp-test-simulated-kserve-route service: ratelimit-check-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: responseBodyJSON("/usage/total_tokens") predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-trlp-test-simulated-kserve-route service: ratelimit-report-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny name: 51dab7b0d03d4b06f8b5a459b7db9e50784d60e4f211eeab873249e96013d055 routeRuleConditions: hostnames: - maas.apps.63212ffb-4e4c-4aad-9a75-b5a33a5b1cad.prod.konfluxeaas.com predicates: - request.url_path.startsWith('/llm/e2e-trlp-test-simulated/v1/responses') - actions: - scope: d3b195a61a7f24c6bf1fba40f9f2e2565facb6af92e959c1546ac398a9172618 service: auth-service sources: - authpolicy.kuadrant.io:openshift-ingress/gateway-default-auth - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: "0" predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-distinct-simulated-kserve-route service: ratelimit-check-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: responseBodyJSON("/usage/total_tokens") predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-distinct-simulated-kserve-route service: ratelimit-report-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny name: b06725a6f58f0e51bd4f888a8bb2c1e84124dc32973f150742dfa51e4c7acc9b routeRuleConditions: hostnames: - maas.apps.63212ffb-4e4c-4aad-9a75-b5a33a5b1cad.prod.konfluxeaas.com predicates: - request.url_path.startsWith('/llm/e2e-distinct-simulated/v1/responses') - actions: - scope: 0f8e1a2bede8509cb76d997b959699aa0135fff9780ffed78ed7277e9c897b5e service: auth-service sources: - authpolicy.kuadrant.io:openshift-ingress/gateway-default-auth - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: "0" predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-distinct-simulated-kserve-route service: ratelimit-check-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: responseBodyJSON("/usage/total_tokens") predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-distinct-simulated-kserve-route service: ratelimit-report-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny name: bf9799141ff2dc632772820f7f4eedb6f137abd5985b24802323250c7d120a62 routeRuleConditions: hostnames: - maas.apps.63212ffb-4e4c-4aad-9a75-b5a33a5b1cad.prod.konfluxeaas.com predicates: - request.url_path.startsWith('/llm/e2e-distinct-simulated/v1/responses') - actions: - scope: c2fa62f1c5f5915dac9085511eb547dc6a04d451cabce32f7fc86613d440b2a7 service: auth-service sources: - authpolicy.kuadrant.io:llm/maas-auth-premium-simulated-simulated-premium - conditionalData: - data: - expression: key: tokenlimit.models_as_a_service_premium_simulator_subscription_premium_simulated_simulated_premium_tokens__a2a80825 value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: "0" predicates: - auth.identity.selected_subscription_key == "models-as-a-service/premium-simulator-subscription@llm/premium-simulated-simulated-premium" && !request.path.endsWith("/v1/models") scope: llm/premium-simulated-simulated-premium-kserve-route service: ratelimit-check-service sources: - tokenratelimitpolicy.kuadrant.io:llm/maas-trlp-premium-simulated-simulated-premium - conditionalData: - data: - expression: key: tokenlimit.models_as_a_service_premium_simulator_subscription_premium_simulated_simulated_premium_tokens__a2a80825 value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: responseBodyJSON("/usage/total_tokens") predicates: - auth.identity.selected_subscription_key == "models-as-a-service/premium-simulator-subscription@llm/premium-simulated-simulated-premium" && !request.path.endsWith("/v1/models") scope: llm/premium-simulated-simulated-premium-kserve-route service: ratelimit-report-service sources: - tokenratelimitpolicy.kuadrant.io:llm/maas-trlp-premium-simulated-simulated-premium name: bc8d239a167856810ade584fbafad26e3b0b9031fe7196f9fc6aedefd11b3b9e routeRuleConditions: hostnames: - maas.apps.63212ffb-4e4c-4aad-9a75-b5a33a5b1cad.prod.konfluxeaas.com predicates: - request.url_path.startsWith('/llm/premium-simulated-simulated-premium') - actions: - scope: 7371c34ce8e4df2309ee8f952c87f921947b289427b6e9ea579dcb9970fc1b86 service: auth-service sources: - authpolicy.kuadrant.io:llm/maas-auth-premium-simulated-simulated-premium - conditionalData: - data: - expression: key: tokenlimit.models_as_a_service_premium_simulator_subscription_premium_simulated_simulated_premium_tokens__a2a80825 value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: "0" predicates: - auth.identity.selected_subscription_key == "models-as-a-service/premium-simulator-subscription@llm/premium-simulated-simulated-premium" && !request.path.endsWith("/v1/models") scope: llm/premium-simulated-simulated-premium-kserve-route service: ratelimit-check-service sources: - tokenratelimitpolicy.kuadrant.io:llm/maas-trlp-premium-simulated-simulated-premium - conditionalData: - data: - expression: key: tokenlimit.models_as_a_service_premium_simulator_subscription_premium_simulated_simulated_premium_tokens__a2a80825 value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: responseBodyJSON("/usage/total_tokens") predicates: - auth.identity.selected_subscription_key == "models-as-a-service/premium-simulator-subscription@llm/premium-simulated-simulated-premium" && !request.path.endsWith("/v1/models") scope: llm/premium-simulated-simulated-premium-kserve-route service: ratelimit-report-service sources: - tokenratelimitpolicy.kuadrant.io:llm/maas-trlp-premium-simulated-simulated-premium name: 6f31371e7f39ceb24212fe4bba99921fb8c887ea65c38704ce22e48537eceba9 routeRuleConditions: hostnames: - maas.apps.63212ffb-4e4c-4aad-9a75-b5a33a5b1cad.prod.konfluxeaas.com predicates: - request.url_path.startsWith('/llm/premium-simulated-simulated-premium') - actions: - scope: 3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3 service: auth-service sources: - authpolicy.kuadrant.io:llm/maas-auth-facebook-opt-125m-simulated - conditionalData: - data: - expression: key: tokenlimit.models_as_a_service_simulator_subscription_facebook_opt_125m_simulated_tokens__87db8427 value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: "0" predicates: - auth.identity.selected_subscription_key == "models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated" && !request.path.endsWith("/v1/models") scope: llm/facebook-opt-125m-simulated-kserve-route service: ratelimit-check-service sources: - tokenratelimitpolicy.kuadrant.io:llm/maas-trlp-facebook-opt-125m-simulated - conditionalData: - data: - expression: key: tokenlimit.models_as_a_service_simulator_subscription_facebook_opt_125m_simulated_tokens__87db8427 value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: responseBodyJSON("/usage/total_tokens") predicates: - auth.identity.selected_subscription_key == "models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated" && !request.path.endsWith("/v1/models") scope: llm/facebook-opt-125m-simulated-kserve-route service: ratelimit-report-service sources: - tokenratelimitpolicy.kuadrant.io:llm/maas-trlp-facebook-opt-125m-simulated name: 856a3df397bae07fe80d53051b4d2b2ae31313e86d381bf0bbd8a6a868eb9d94 routeRuleConditions: hostnames: - maas.apps.63212ffb-4e4c-4aad-9a75-b5a33a5b1cad.prod.konfluxeaas.com predicates: - request.url_path.startsWith('/llm/facebook-opt-125m-simulated') - actions: - scope: 4e93f1986841c16506ee726a8192ec71d2a8bafa10275979a4129ddd337542b4 service: auth-service sources: - authpolicy.kuadrant.io:llm/maas-auth-facebook-opt-125m-simulated - conditionalData: - data: - expression: key: tokenlimit.models_as_a_service_simulator_subscription_facebook_opt_125m_simulated_tokens__87db8427 value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: "0" predicates: - auth.identity.selected_subscription_key == "models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated" && !request.path.endsWith("/v1/models") scope: llm/facebook-opt-125m-simulated-kserve-route service: ratelimit-check-service sources: - tokenratelimitpolicy.kuadrant.io:llm/maas-trlp-facebook-opt-125m-simulated - conditionalData: - data: - expression: key: tokenlimit.models_as_a_service_simulator_subscription_facebook_opt_125m_simulated_tokens__87db8427 value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: responseBodyJSON("/usage/total_tokens") predicates: - auth.identity.selected_subscription_key == "models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated" && !request.path.endsWith("/v1/models") scope: llm/facebook-opt-125m-simulated-kserve-route service: ratelimit-report-service sources: - tokenratelimitpolicy.kuadrant.io:llm/maas-trlp-facebook-opt-125m-simulated name: ca7f4067ef9c0d2d3d85e65def170eb06564f4d3b19a29f9116bb77d75ff8941 routeRuleConditions: hostnames: - maas.apps.63212ffb-4e4c-4aad-9a75-b5a33a5b1cad.prod.konfluxeaas.com predicates: - request.url_path.startsWith('/llm/facebook-opt-125m-simulated') - actions: - scope: a89b0896df0d8cd430f1c81b6eb292ddc044daed393537d009a6330718f58d4b service: auth-service sources: - authpolicy.kuadrant.io:openshift-ingress/gateway-default-auth - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: "0" predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-distinct-2-simulated-kserve-route service: ratelimit-check-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: responseBodyJSON("/usage/total_tokens") predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-distinct-2-simulated-kserve-route service: ratelimit-report-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny name: 3a2310dab98b0ed1beebd3f930b217aa4e391fe6377bef38f0b1749301afc34d routeRuleConditions: hostnames: - maas.apps.63212ffb-4e4c-4aad-9a75-b5a33a5b1cad.prod.konfluxeaas.com predicates: - request.url_path.startsWith('/llm/e2e-distinct-2-simulated') - actions: - scope: 0de63d98b80c1813dded1200a5c220a9aa223eb7c7585984033d3ea7769c1fc1 service: auth-service sources: - authpolicy.kuadrant.io:openshift-ingress/gateway-default-auth - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: "0" predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-distinct-2-simulated-kserve-route service: ratelimit-check-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: responseBodyJSON("/usage/total_tokens") predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-distinct-2-simulated-kserve-route service: ratelimit-report-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny name: 3327f44bdf8a06342dd11506cdda47619c34ded47747bc68dc0f9971767a7be4 routeRuleConditions: hostnames: - maas.apps.63212ffb-4e4c-4aad-9a75-b5a33a5b1cad.prod.konfluxeaas.com predicates: - request.url_path.startsWith('/llm/e2e-distinct-2-simulated') - actions: - scope: 5fea747cb803a5ee3aeb620187bd9ec74ccccd10a92474ef528215a7ff146c8f service: auth-service sources: - authpolicy.kuadrant.io:openshift-ingress/gateway-default-auth - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: "0" predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-trlp-test-simulated-kserve-route service: ratelimit-check-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: responseBodyJSON("/usage/total_tokens") predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-trlp-test-simulated-kserve-route service: ratelimit-report-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny name: 39fb8d21de5a3755f792bf2d5731d05995c2df43f275aae0eeea8ac8899d9e6f routeRuleConditions: hostnames: - maas.apps.63212ffb-4e4c-4aad-9a75-b5a33a5b1cad.prod.konfluxeaas.com predicates: - request.url_path.startsWith('/llm/e2e-trlp-test-simulated') - actions: - scope: 8e95faaf26521b922fc4f7d90dead5fa65fb63ced54ef1b0da6c336892092b5e service: auth-service sources: - authpolicy.kuadrant.io:openshift-ingress/gateway-default-auth - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: "0" predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-trlp-test-simulated-kserve-route service: ratelimit-check-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: responseBodyJSON("/usage/total_tokens") predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-trlp-test-simulated-kserve-route service: ratelimit-report-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny name: 25d55ff25b3f34ab92865f2a0b8a5e0d104dc9decd21a9dd9f506b6f7feebd18 routeRuleConditions: hostnames: - maas.apps.63212ffb-4e4c-4aad-9a75-b5a33a5b1cad.prod.konfluxeaas.com predicates: - request.url_path.startsWith('/llm/e2e-trlp-test-simulated') - actions: - scope: 86cbb62fb4d82d4dc402b3281444539a5625c4bb4c86bbc4912c70e690a2e374 service: auth-service sources: - authpolicy.kuadrant.io:openshift-ingress/gateway-default-auth - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: "0" predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-distinct-simulated-kserve-route service: ratelimit-check-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: responseBodyJSON("/usage/total_tokens") predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-distinct-simulated-kserve-route service: ratelimit-report-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny name: e5d558f841766abdcd8be6637e0b0fe1bf3e9131f18d91143080e1da47e6b1fd routeRuleConditions: hostnames: - maas.apps.63212ffb-4e4c-4aad-9a75-b5a33a5b1cad.prod.konfluxeaas.com predicates: - request.url_path.startsWith('/llm/e2e-distinct-simulated') - actions: - scope: 3f374f385b8664c1b7ec9843869a0ecb4fefe048f5ceabd740bcf9c10e846108 service: auth-service sources: - authpolicy.kuadrant.io:openshift-ingress/gateway-default-auth - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: "0" predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-distinct-simulated-kserve-route service: ratelimit-check-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: responseBodyJSON("/usage/total_tokens") predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: llm/e2e-distinct-simulated-kserve-route service: ratelimit-report-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny name: 547ef5e16f2715a77b05063a6af261a82b62e5c4ea32e4d834969a7ebfb1663e routeRuleConditions: hostnames: - maas.apps.63212ffb-4e4c-4aad-9a75-b5a33a5b1cad.prod.konfluxeaas.com predicates: - request.url_path.startsWith('/llm/e2e-distinct-simulated') - actions: - predicates: - request.path != "/maas-api/health" || request.method != "GET" scope: c9f2cdb36f800bc8ef8831e6117ec4c6cc521d8cd63b718b7906225d0f25e59f service: auth-service sources: - authpolicy.kuadrant.io:opendatahub/maas-api-auth-policy - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: "0" predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: opendatahub/maas-api-route service: ratelimit-check-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: responseBodyJSON("/usage/total_tokens") predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: opendatahub/maas-api-route service: ratelimit-report-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny name: 73a9df9b55c4e940786fd087f291b8393dffc38cb7d14bdc0d59e9fdf80eb2c4 routeRuleConditions: hostnames: - maas.apps.63212ffb-4e4c-4aad-9a75-b5a33a5b1cad.prod.konfluxeaas.com predicates: - request.url_path.startsWith('/v1/models') - actions: - predicates: - request.path != "/maas-api/health" || request.method != "GET" scope: 49ff072d7b97a47682d640010c73aef47c6376b17652297065fa57d4c846dd80 service: auth-service sources: - authpolicy.kuadrant.io:opendatahub/maas-api-auth-policy - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: "0" predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: opendatahub/maas-api-route service: ratelimit-check-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: responseBodyJSON("/usage/total_tokens") predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: opendatahub/maas-api-route service: ratelimit-report-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny name: 567d7e1179262b3de1aea5f57b5a511154b6858bf456e8ea1f39429e1e3e47f5 routeRuleConditions: hostnames: - maas.apps.63212ffb-4e4c-4aad-9a75-b5a33a5b1cad.prod.konfluxeaas.com predicates: - request.url_path.startsWith('/v1/models') - actions: - predicates: - request.path != "/maas-api/health" || request.method != "GET" scope: 4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d service: auth-service sources: - authpolicy.kuadrant.io:opendatahub/maas-api-auth-policy - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: "0" predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: opendatahub/maas-api-route service: ratelimit-check-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: responseBodyJSON("/usage/total_tokens") predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: opendatahub/maas-api-route service: ratelimit-report-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny name: 9e691f9fe6d1326eda06cc6d2e2d1117d8d3d5312d46882594f2c62da9301dba routeRuleConditions: hostnames: - maas.apps.63212ffb-4e4c-4aad-9a75-b5a33a5b1cad.prod.konfluxeaas.com predicates: - request.url_path.startsWith('/maas-api') - actions: - predicates: - request.path != "/maas-api/health" || request.method != "GET" scope: d44d6970f0ac9b448c729a344c019166492f90c7945285882c656b64a6725911 service: auth-service sources: - authpolicy.kuadrant.io:opendatahub/maas-api-auth-policy - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: "0" predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: opendatahub/maas-api-route service: ratelimit-check-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny - conditionalData: - data: - expression: key: tokenlimit.deny_all_by_default__6d45535f value: "1" - expression: key: auth.identity.userid value: auth.identity.userid - expression: key: ratelimit.hits_addend value: responseBodyJSON("/usage/total_tokens") predicates: - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")' scope: opendatahub/maas-api-route service: ratelimit-report-service sources: - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny name: eca1025273e22f72cfc2f10030b49a7b8fb08a0b1257f65a7d85d8d8e0d35f45 routeRuleConditions: hostnames: - maas.apps.63212ffb-4e4c-4aad-9a75-b5a33a5b1cad.prod.konfluxeaas.com predicates: - request.url_path.startsWith('/maas-api') services: auth-service: endpoint: kuadrant-auth-service failureMode: deny timeout: 200ms type: auth ratelimit-check-service: endpoint: kuadrant-ratelimit-service failureMode: deny timeout: 100ms type: ratelimit-check ratelimit-report-service: endpoint: kuadrant-ratelimit-service failureMode: deny timeout: 100ms type: ratelimit-report ratelimit-service: endpoint: kuadrant-ratelimit-service failureMode: allow timeout: 100ms type: ratelimit targetRefs: - group: gateway.networking.k8s.io kind: Gateway name: maas-default-gateway url: quay.io/kuadrant/wasm-shim:v0.12.1