apiVersion: extensions.istio.io/v1alpha1
kind: WasmPlugin
metadata:
  creationTimestamp: "2026-06-10T13:01:41Z"
  generation: 270
  labels:
    kuadrant.io/managed: "true"
  managedFields:
  - apiVersion: extensions.istio.io/v1alpha1
    fieldsType: FieldsV1
    fieldsV1:
      f:metadata:
        f:labels:
          .: {}
          f:kuadrant.io/managed: {}
        f:ownerReferences:
          .: {}
          k:{"uid":"261f4f3b-d47f-4e6e-b1e0-9fc9c4372b1a"}: {}
      f:spec:
        .: {}
        f:phase: {}
        f:pluginConfig:
          .: {}
          f:actionSets: {}
          f:services:
            .: {}
            f:auth-service:
              .: {}
              f:endpoint: {}
              f:failureMode: {}
              f:timeout: {}
              f:type: {}
            f:ratelimit-check-service:
              .: {}
              f:endpoint: {}
              f:failureMode: {}
              f:timeout: {}
              f:type: {}
            f:ratelimit-report-service:
              .: {}
              f:endpoint: {}
              f:failureMode: {}
              f:timeout: {}
              f:type: {}
            f:ratelimit-service:
              .: {}
              f:endpoint: {}
              f:failureMode: {}
              f:timeout: {}
              f:type: {}
        f:targetRefs: {}
        f:url: {}
    manager: manager
    operation: Update
    time: "2026-06-10T13:26:34Z"
  name: kuadrant-maas-default-gateway
  namespace: openshift-ingress
  ownerReferences:
  - apiVersion: gateway.networking.k8s.io/v1
    blockOwnerDeletion: true
    controller: true
    kind: Gateway
    name: maas-default-gateway
    uid: 261f4f3b-d47f-4e6e-b1e0-9fc9c4372b1a
  resourceVersion: "49038"
  uid: 8855a9a0-7c31-4a0e-8846-5b91bf33dd70
spec:
  phase: STATS
  pluginConfig:
    actionSets:
    - actions:
      - scope: 9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a
        service: auth-service
        sources:
        - authpolicy.kuadrant.io:openshift-ingress/gateway-default-auth
      - conditionalData:
        - data:
          - expression:
              key: tokenlimit.deny_all_by_default__6d45535f
              value: "1"
          - expression:
              key: auth.identity.userid
              value: auth.identity.userid
          - expression:
              key: ratelimit.hits_addend
              value: "0"
          predicates:
          - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")'
        scope: llm/e2e-unconfigured-facebook-opt-125m-simulated-kserve-route
        service: ratelimit-check-service
        sources:
        - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny
      - conditionalData:
        - data:
          - expression:
              key: tokenlimit.deny_all_by_default__6d45535f
              value: "1"
          - expression:
              key: auth.identity.userid
              value: auth.identity.userid
          - expression:
              key: ratelimit.hits_addend
              value: responseBodyJSON("/usage/total_tokens")
          predicates:
          - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")'
        scope: llm/e2e-unconfigured-facebook-opt-125m-simulated-kserve-route
        service: ratelimit-report-service
        sources:
        - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny
      name: ca0633123c7c48c8b6e5ea0b2329db4cd543e161f86d8aa6cd144ace5fcc7885
      routeRuleConditions:
        hostnames:
        - maas.apps.f8d52561-2b93-4828-9e65-78847fe84ae1.prod.konfluxeaas.com
        predicates:
        - request.url_path.startsWith('/llm/e2e-unconfigured-facebook-opt-125m-simulated/v1/chat/completions')
    - actions:
      - scope: 01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5
        service: auth-service
        sources:
        - authpolicy.kuadrant.io:openshift-ingress/gateway-default-auth
      - conditionalData:
        - data:
          - expression:
              key: tokenlimit.deny_all_by_default__6d45535f
              value: "1"
          - expression:
              key: auth.identity.userid
              value: auth.identity.userid
          - expression:
              key: ratelimit.hits_addend
              value: "0"
          predicates:
          - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")'
        scope: llm/e2e-unconfigured-facebook-opt-125m-simulated-kserve-route
        service: ratelimit-check-service
        sources:
        - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny
      - conditionalData:
        - data:
          - expression:
              key: tokenlimit.deny_all_by_default__6d45535f
              value: "1"
          - expression:
              key: auth.identity.userid
              value: auth.identity.userid
          - expression:
              key: ratelimit.hits_addend
              value: responseBodyJSON("/usage/total_tokens")
          predicates:
          - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")'
        scope: llm/e2e-unconfigured-facebook-opt-125m-simulated-kserve-route
        service: ratelimit-report-service
        sources:
        - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny
      name: 9b42f927a5e702147b18880c660e80ff8ca75ff4dd580b90d11f60af89e734a7
      routeRuleConditions:
        hostnames:
        - maas.apps.f8d52561-2b93-4828-9e65-78847fe84ae1.prod.konfluxeaas.com
        predicates:
        - request.url_path.startsWith('/llm/e2e-unconfigured-facebook-opt-125m-simulated/v1/completions')
    - actions:
      - scope: e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be
        service: auth-service
        sources:
        - authpolicy.kuadrant.io:openshift-ingress/gateway-default-auth
      - conditionalData:
        - data:
          - expression:
              key: tokenlimit.deny_all_by_default__6d45535f
              value: "1"
          - expression:
              key: auth.identity.userid
              value: auth.identity.userid
          - expression:
              key: ratelimit.hits_addend
              value: "0"
          predicates:
          - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")'
        scope: llm/e2e-unconfigured-facebook-opt-125m-simulated-kserve-route
        service: ratelimit-check-service
        sources:
        - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny
      - conditionalData:
        - data:
          - expression:
              key: tokenlimit.deny_all_by_default__6d45535f
              value: "1"
          - expression:
              key: auth.identity.userid
              value: auth.identity.userid
          - expression:
              key: ratelimit.hits_addend
              value: responseBodyJSON("/usage/total_tokens")
          predicates:
          - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")'
        scope: llm/e2e-unconfigured-facebook-opt-125m-simulated-kserve-route
        service: ratelimit-report-service
        sources:
        - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny
      name: 46a04b3b22df37436115528fb51cd94911942e8656b91beb8f6847cc28853139
      routeRuleConditions:
        hostnames:
        - maas.apps.f8d52561-2b93-4828-9e65-78847fe84ae1.prod.konfluxeaas.com
        predicates:
        - request.url_path.startsWith('/llm/e2e-unconfigured-facebook-opt-125m-simulated/v1/responses')
    - actions:
      - scope: edcceb5a2e0cf1edde0fc3ed43068ce5b123a6fdc41949959c2c3b7a5a48bf24
        service: auth-service
        sources:
        - authpolicy.kuadrant.io:llm/maas-auth-premium-simulated-simulated-premium
      - conditionalData:
        - data:
          - expression:
              key: tokenlimit.models_as_a_service_premium_simulator_subscription_premium_simulated_simulated_premium_tokens__a2a80825
              value: "1"
          - expression:
              key: auth.identity.userid
              value: auth.identity.userid
          - expression:
              key: ratelimit.hits_addend
              value: "0"
          predicates:
          - auth.identity.selected_subscription_key == "models-as-a-service/premium-simulator-subscription@llm/premium-simulated-simulated-premium"
            && !request.path.endsWith("/v1/models")
        scope: llm/premium-simulated-simulated-premium-kserve-route
        service: ratelimit-check-service
        sources:
        - tokenratelimitpolicy.kuadrant.io:llm/maas-trlp-premium-simulated-simulated-premium
      - conditionalData:
        - data:
          - expression:
              key: tokenlimit.models_as_a_service_premium_simulator_subscription_premium_simulated_simulated_premium_tokens__a2a80825
              value: "1"
          - expression:
              key: auth.identity.userid
              value: auth.identity.userid
          - expression:
              key: ratelimit.hits_addend
              value: responseBodyJSON("/usage/total_tokens")
          predicates:
          - auth.identity.selected_subscription_key == "models-as-a-service/premium-simulator-subscription@llm/premium-simulated-simulated-premium"
            && !request.path.endsWith("/v1/models")
        scope: llm/premium-simulated-simulated-premium-kserve-route
        service: ratelimit-report-service
        sources:
        - tokenratelimitpolicy.kuadrant.io:llm/maas-trlp-premium-simulated-simulated-premium
      name: 8137e0b78c19843aa5510205454e2a30047afec25c34078e92b0110938d4d116
      routeRuleConditions:
        hostnames:
        - maas.apps.f8d52561-2b93-4828-9e65-78847fe84ae1.prod.konfluxeaas.com
        predicates:
        - request.url_path.startsWith('/llm/premium-simulated-simulated-premium/v1/chat/completions')
    - actions:
      - scope: 80f10756c0e833d16937036ed66f1daf5bef95559ef05a5e852766b97b9bdaef
        service: auth-service
        sources:
        - authpolicy.kuadrant.io:llm/maas-auth-premium-simulated-simulated-premium
      - conditionalData:
        - data:
          - expression:
              key: tokenlimit.models_as_a_service_premium_simulator_subscription_premium_simulated_simulated_premium_tokens__a2a80825
              value: "1"
          - expression:
              key: auth.identity.userid
              value: auth.identity.userid
          - expression:
              key: ratelimit.hits_addend
              value: "0"
          predicates:
          - auth.identity.selected_subscription_key == "models-as-a-service/premium-simulator-subscription@llm/premium-simulated-simulated-premium"
            && !request.path.endsWith("/v1/models")
        scope: llm/premium-simulated-simulated-premium-kserve-route
        service: ratelimit-check-service
        sources:
        - tokenratelimitpolicy.kuadrant.io:llm/maas-trlp-premium-simulated-simulated-premium
      - conditionalData:
        - data:
          - expression:
              key: tokenlimit.models_as_a_service_premium_simulator_subscription_premium_simulated_simulated_premium_tokens__a2a80825
              value: "1"
          - expression:
              key: auth.identity.userid
              value: auth.identity.userid
          - expression:
              key: ratelimit.hits_addend
              value: responseBodyJSON("/usage/total_tokens")
          predicates:
          - auth.identity.selected_subscription_key == "models-as-a-service/premium-simulator-subscription@llm/premium-simulated-simulated-premium"
            && !request.path.endsWith("/v1/models")
        scope: llm/premium-simulated-simulated-premium-kserve-route
        service: ratelimit-report-service
        sources:
        - tokenratelimitpolicy.kuadrant.io:llm/maas-trlp-premium-simulated-simulated-premium
      name: 681a7fa8730a2ac537c11fa23a060f91b19de24600b1050f946d4e60a5ab3c4b
      routeRuleConditions:
        hostnames:
        - maas.apps.f8d52561-2b93-4828-9e65-78847fe84ae1.prod.konfluxeaas.com
        predicates:
        - request.url_path.startsWith('/llm/premium-simulated-simulated-premium/v1/completions')
    - actions:
      - scope: 4dc577fd60594d78a4a8bebe396f4b5a928f41bdc3f95c06d717cf1ddc3158b2
        service: auth-service
        sources:
        - authpolicy.kuadrant.io:llm/maas-auth-premium-simulated-simulated-premium
      - conditionalData:
        - data:
          - expression:
              key: tokenlimit.models_as_a_service_premium_simulator_subscription_premium_simulated_simulated_premium_tokens__a2a80825
              value: "1"
          - expression:
              key: auth.identity.userid
              value: auth.identity.userid
          - expression:
              key: ratelimit.hits_addend
              value: "0"
          predicates:
          - auth.identity.selected_subscription_key == "models-as-a-service/premium-simulator-subscription@llm/premium-simulated-simulated-premium"
            && !request.path.endsWith("/v1/models")
        scope: llm/premium-simulated-simulated-premium-kserve-route
        service: ratelimit-check-service
        sources:
        - tokenratelimitpolicy.kuadrant.io:llm/maas-trlp-premium-simulated-simulated-premium
      - conditionalData:
        - data:
          - expression:
              key: tokenlimit.models_as_a_service_premium_simulator_subscription_premium_simulated_simulated_premium_tokens__a2a80825
              value: "1"
          - expression:
              key: auth.identity.userid
              value: auth.identity.userid
          - expression:
              key: ratelimit.hits_addend
              value: responseBodyJSON("/usage/total_tokens")
          predicates:
          - auth.identity.selected_subscription_key == "models-as-a-service/premium-simulator-subscription@llm/premium-simulated-simulated-premium"
            && !request.path.endsWith("/v1/models")
        scope: llm/premium-simulated-simulated-premium-kserve-route
        service: ratelimit-report-service
        sources:
        - tokenratelimitpolicy.kuadrant.io:llm/maas-trlp-premium-simulated-simulated-premium
      name: 2dc7c4b17b2e910bad083dc6e5e398ab9ba4e517857a1f3937424b6b00390235
      routeRuleConditions:
        hostnames:
        - maas.apps.f8d52561-2b93-4828-9e65-78847fe84ae1.prod.konfluxeaas.com
        predicates:
        - request.url_path.startsWith('/llm/premium-simulated-simulated-premium/v1/responses')
    - actions:
      - scope: 18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76
        service: auth-service
        sources:
        - authpolicy.kuadrant.io:llm/maas-auth-facebook-opt-125m-simulated
      - conditionalData:
        - data:
          - expression:
              key: tokenlimit.models_as_a_service_simulator_subscription_facebook_opt_125m_simulated_tokens__87db8427
              value: "1"
          - expression:
              key: auth.identity.userid
              value: auth.identity.userid
          - expression:
              key: ratelimit.hits_addend
              value: "0"
          predicates:
          - auth.identity.selected_subscription_key == "models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated"
            && !request.path.endsWith("/v1/models")
        scope: llm/facebook-opt-125m-simulated-kserve-route
        service: ratelimit-check-service
        sources:
        - tokenratelimitpolicy.kuadrant.io:llm/maas-trlp-facebook-opt-125m-simulated
      - conditionalData:
        - data:
          - expression:
              key: tokenlimit.models_as_a_service_simulator_subscription_facebook_opt_125m_simulated_tokens__87db8427
              value: "1"
          - expression:
              key: auth.identity.userid
              value: auth.identity.userid
          - expression:
              key: ratelimit.hits_addend
              value: responseBodyJSON("/usage/total_tokens")
          predicates:
          - auth.identity.selected_subscription_key == "models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated"
            && !request.path.endsWith("/v1/models")
        scope: llm/facebook-opt-125m-simulated-kserve-route
        service: ratelimit-report-service
        sources:
        - tokenratelimitpolicy.kuadrant.io:llm/maas-trlp-facebook-opt-125m-simulated
      name: fa681c8f97bf9016edcadcee75ea58033a27c29f91a6542f3b98290703731f9a
      routeRuleConditions:
        hostnames:
        - maas.apps.f8d52561-2b93-4828-9e65-78847fe84ae1.prod.konfluxeaas.com
        predicates:
        - request.url_path.startsWith('/llm/facebook-opt-125m-simulated/v1/chat/completions')
    - actions:
      - scope: e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a
        service: auth-service
        sources:
        - authpolicy.kuadrant.io:openshift-ingress/gateway-default-auth
      - conditionalData:
        - data:
          - expression:
              key: tokenlimit.deny_all_by_default__6d45535f
              value: "1"
          - expression:
              key: auth.identity.userid
              value: auth.identity.userid
          - expression:
              key: ratelimit.hits_addend
              value: "0"
          predicates:
          - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")'
        scope: llm/e2e-distinct-2-simulated-kserve-route
        service: ratelimit-check-service
        sources:
        - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny
      - conditionalData:
        - data:
          - expression:
              key: tokenlimit.deny_all_by_default__6d45535f
              value: "1"
          - expression:
              key: auth.identity.userid
              value: auth.identity.userid
          - expression:
              key: ratelimit.hits_addend
              value: responseBodyJSON("/usage/total_tokens")
          predicates:
          - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")'
        scope: llm/e2e-distinct-2-simulated-kserve-route
        service: ratelimit-report-service
        sources:
        - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny
      name: 1d1289cd925caad12ab431aa09c89d98c1078828c9dbe237a6de7fba0f538a83
      routeRuleConditions:
        hostnames:
        - maas.apps.f8d52561-2b93-4828-9e65-78847fe84ae1.prod.konfluxeaas.com
        predicates:
        - request.url_path.startsWith('/llm/e2e-distinct-2-simulated/v1/chat/completions')
    - actions:
      - scope: 9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5
        service: auth-service
        sources:
        - authpolicy.kuadrant.io:openshift-ingress/gateway-default-auth
      - conditionalData:
        - data:
          - expression:
              key: tokenlimit.deny_all_by_default__6d45535f
              value: "1"
          - expression:
              key: auth.identity.userid
              value: auth.identity.userid
          - expression:
              key: ratelimit.hits_addend
              value: "0"
          predicates:
          - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")'
        scope: llm/e2e-unconfigured-facebook-opt-125m-simulated-kserve-route
        service: ratelimit-check-service
        sources:
        - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny
      - conditionalData:
        - data:
          - expression:
              key: tokenlimit.deny_all_by_default__6d45535f
              value: "1"
          - expression:
              key: auth.identity.userid
              value: auth.identity.userid
          - expression:
              key: ratelimit.hits_addend
              value: responseBodyJSON("/usage/total_tokens")
          predicates:
          - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")'
        scope: llm/e2e-unconfigured-facebook-opt-125m-simulated-kserve-route
        service: ratelimit-report-service
        sources:
        - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny
      name: 65720bd08fa74f79e7bb857f31e7a70ae2b171c645e2ab040920392d74541900
      routeRuleConditions:
        hostnames:
        - maas.apps.f8d52561-2b93-4828-9e65-78847fe84ae1.prod.konfluxeaas.com
        predicates:
        - request.url_path.startsWith('/llm/e2e-unconfigured-facebook-opt-125m-simulated')
    - actions:
      - scope: 319a353672fc7601c875fa3f8b807adf60b64f093f022b2a1c3dfef3ac8cd4f4
        service: auth-service
        sources:
        - authpolicy.kuadrant.io:openshift-ingress/gateway-default-auth
      - conditionalData:
        - data:
          - expression:
              key: tokenlimit.deny_all_by_default__6d45535f
              value: "1"
          - expression:
              key: auth.identity.userid
              value: auth.identity.userid
          - expression:
              key: ratelimit.hits_addend
              value: "0"
          predicates:
          - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")'
        scope: llm/e2e-trlp-test-simulated-kserve-route
        service: ratelimit-check-service
        sources:
        - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny
      - conditionalData:
        - data:
          - expression:
              key: tokenlimit.deny_all_by_default__6d45535f
              value: "1"
          - expression:
              key: auth.identity.userid
              value: auth.identity.userid
          - expression:
              key: ratelimit.hits_addend
              value: responseBodyJSON("/usage/total_tokens")
          predicates:
          - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")'
        scope: llm/e2e-trlp-test-simulated-kserve-route
        service: ratelimit-report-service
        sources:
        - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny
      name: e5d36ab5129322611a3cd441ae3c69e41ee307ebc2e05e83a24c7eaa41634cfe
      routeRuleConditions:
        hostnames:
        - maas.apps.f8d52561-2b93-4828-9e65-78847fe84ae1.prod.konfluxeaas.com
        predicates:
        - request.url_path.startsWith('/llm/e2e-trlp-test-simulated/v1/chat/completions')
    - actions:
      - scope: 3dc75fc8307b952a3e873400cf417e90f2861e8a225abec4b22708deb7901db7
        service: auth-service
        sources:
        - authpolicy.kuadrant.io:openshift-ingress/gateway-default-auth
      - conditionalData:
        - data:
          - expression:
              key: tokenlimit.deny_all_by_default__6d45535f
              value: "1"
          - expression:
              key: auth.identity.userid
              value: auth.identity.userid
          - expression:
              key: ratelimit.hits_addend
              value: "0"
          predicates:
          - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")'
        scope: llm/e2e-distinct-simulated-kserve-route
        service: ratelimit-check-service
        sources:
        - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny
      - conditionalData:
        - data:
          - expression:
              key: tokenlimit.deny_all_by_default__6d45535f
              value: "1"
          - expression:
              key: auth.identity.userid
              value: auth.identity.userid
          - expression:
              key: ratelimit.hits_addend
              value: responseBodyJSON("/usage/total_tokens")
          predicates:
          - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")'
        scope: llm/e2e-distinct-simulated-kserve-route
        service: ratelimit-report-service
        sources:
        - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny
      name: e78c22e1924829340a267f9ba58d74baf2f46e33d699a33e7b4927769b9db6fa
      routeRuleConditions:
        hostnames:
        - maas.apps.f8d52561-2b93-4828-9e65-78847fe84ae1.prod.konfluxeaas.com
        predicates:
        - request.url_path.startsWith('/llm/e2e-distinct-simulated/v1/chat/completions')
    - actions:
      - scope: cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a
        service: auth-service
        sources:
        - authpolicy.kuadrant.io:llm/maas-auth-facebook-opt-125m-simulated
      - conditionalData:
        - data:
          - expression:
              key: tokenlimit.models_as_a_service_simulator_subscription_facebook_opt_125m_simulated_tokens__87db8427
              value: "1"
          - expression:
              key: auth.identity.userid
              value: auth.identity.userid
          - expression:
              key: ratelimit.hits_addend
              value: "0"
          predicates:
          - auth.identity.selected_subscription_key == "models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated"
            && !request.path.endsWith("/v1/models")
        scope: llm/facebook-opt-125m-simulated-kserve-route
        service: ratelimit-check-service
        sources:
        - tokenratelimitpolicy.kuadrant.io:llm/maas-trlp-facebook-opt-125m-simulated
      - conditionalData:
        - data:
          - expression:
              key: tokenlimit.models_as_a_service_simulator_subscription_facebook_opt_125m_simulated_tokens__87db8427
              value: "1"
          - expression:
              key: auth.identity.userid
              value: auth.identity.userid
          - expression:
              key: ratelimit.hits_addend
              value: responseBodyJSON("/usage/total_tokens")
          predicates:
          - auth.identity.selected_subscription_key == "models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated"
            && !request.path.endsWith("/v1/models")
        scope: llm/facebook-opt-125m-simulated-kserve-route
        service: ratelimit-report-service
        sources:
        - tokenratelimitpolicy.kuadrant.io:llm/maas-trlp-facebook-opt-125m-simulated
      name: fa98517ea88b1a019dd9e08cd3c416bc91ec1effda5439c2faf522cf765e7e54
      routeRuleConditions:
        hostnames:
        - maas.apps.f8d52561-2b93-4828-9e65-78847fe84ae1.prod.konfluxeaas.com
        predicates:
        - request.url_path.startsWith('/llm/facebook-opt-125m-simulated/v1/completions')
    - actions:
      - scope: 311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418
        service: auth-service
        sources:
        - authpolicy.kuadrant.io:llm/maas-auth-facebook-opt-125m-simulated
      - conditionalData:
        - data:
          - expression:
              key: tokenlimit.models_as_a_service_simulator_subscription_facebook_opt_125m_simulated_tokens__87db8427
              value: "1"
          - expression:
              key: auth.identity.userid
              value: auth.identity.userid
          - expression:
              key: ratelimit.hits_addend
              value: "0"
          predicates:
          - auth.identity.selected_subscription_key == "models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated"
            && !request.path.endsWith("/v1/models")
        scope: llm/facebook-opt-125m-simulated-kserve-route
        service: ratelimit-check-service
        sources:
        - tokenratelimitpolicy.kuadrant.io:llm/maas-trlp-facebook-opt-125m-simulated
      - conditionalData:
        - data:
          - expression:
              key: tokenlimit.models_as_a_service_simulator_subscription_facebook_opt_125m_simulated_tokens__87db8427
              value: "1"
          - expression:
              key: auth.identity.userid
              value: auth.identity.userid
          - expression:
              key: ratelimit.hits_addend
              value: responseBodyJSON("/usage/total_tokens")
          predicates:
          - auth.identity.selected_subscription_key == "models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated"
            && !request.path.endsWith("/v1/models")
        scope: llm/facebook-opt-125m-simulated-kserve-route
        service: ratelimit-report-service
        sources:
        - tokenratelimitpolicy.kuadrant.io:llm/maas-trlp-facebook-opt-125m-simulated
      name: 1245e5cfb9c188b81148f50e48168859ef4835f1f825d271ed552c25650b610b
      routeRuleConditions:
        hostnames:
        - maas.apps.f8d52561-2b93-4828-9e65-78847fe84ae1.prod.konfluxeaas.com
        predicates:
        - request.url_path.startsWith('/llm/facebook-opt-125m-simulated/v1/responses')
    - actions:
      - scope: 331dc257e65f55f80700a586f7807093eda7b3d8e7d91215dc3c47731508480c
        service: auth-service
        sources:
        - authpolicy.kuadrant.io:openshift-ingress/gateway-default-auth
      - conditionalData:
        - data:
          - expression:
              key: tokenlimit.deny_all_by_default__6d45535f
              value: "1"
          - expression:
              key: auth.identity.userid
              value: auth.identity.userid
          - expression:
              key: ratelimit.hits_addend
              value: "0"
          predicates:
          - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")'
        scope: llm/e2e-distinct-2-simulated-kserve-route
        service: ratelimit-check-service
        sources:
        - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny
      - conditionalData:
        - data:
          - expression:
              key: tokenlimit.deny_all_by_default__6d45535f
              value: "1"
          - expression:
              key: auth.identity.userid
              value: auth.identity.userid
          - expression:
              key: ratelimit.hits_addend
              value: responseBodyJSON("/usage/total_tokens")
          predicates:
          - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")'
        scope: llm/e2e-distinct-2-simulated-kserve-route
        service: ratelimit-report-service
        sources:
        - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny
      name: 991305120b9190f37d20a60ce1d51f9908fd8a83a2d8d48d912f5f2caec52ba7
      routeRuleConditions:
        hostnames:
        - maas.apps.f8d52561-2b93-4828-9e65-78847fe84ae1.prod.konfluxeaas.com
        predicates:
        - request.url_path.startsWith('/llm/e2e-distinct-2-simulated/v1/completions')
    - actions:
      - scope: bf72a6316f6ed79299511e58d068836cdc71dbca5e23944f783c9340ffa0aee1
        service: auth-service
        sources:
        - authpolicy.kuadrant.io:openshift-ingress/gateway-default-auth
      - conditionalData:
        - data:
          - expression:
              key: tokenlimit.deny_all_by_default__6d45535f
              value: "1"
          - expression:
              key: auth.identity.userid
              value: auth.identity.userid
          - expression:
              key: ratelimit.hits_addend
              value: "0"
          predicates:
          - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")'
        scope: llm/e2e-trlp-test-simulated-kserve-route
        service: ratelimit-check-service
        sources:
        - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny
      - conditionalData:
        - data:
          - expression:
              key: tokenlimit.deny_all_by_default__6d45535f
              value: "1"
          - expression:
              key: auth.identity.userid
              value: auth.identity.userid
          - expression:
              key: ratelimit.hits_addend
              value: responseBodyJSON("/usage/total_tokens")
          predicates:
          - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")'
        scope: llm/e2e-trlp-test-simulated-kserve-route
        service: ratelimit-report-service
        sources:
        - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny
      name: ea2000256d09f7435c3f2539310442251ed20ee2be2540fc0bff5d64ed0757c6
      routeRuleConditions:
        hostnames:
        - maas.apps.f8d52561-2b93-4828-9e65-78847fe84ae1.prod.konfluxeaas.com
        predicates:
        - request.url_path.startsWith('/llm/e2e-trlp-test-simulated/v1/completions')
    - actions:
      - scope: 35d34d59676c333235d7c9f02273e0380bb39f27cfd30856fedc0f7c0e5f79aa
        service: auth-service
        sources:
        - authpolicy.kuadrant.io:openshift-ingress/gateway-default-auth
      - conditionalData:
        - data:
          - expression:
              key: tokenlimit.deny_all_by_default__6d45535f
              value: "1"
          - expression:
              key: auth.identity.userid
              value: auth.identity.userid
          - expression:
              key: ratelimit.hits_addend
              value: "0"
          predicates:
          - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")'
        scope: llm/e2e-distinct-2-simulated-kserve-route
        service: ratelimit-check-service
        sources:
        - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny
      - conditionalData:
        - data:
          - expression:
              key: tokenlimit.deny_all_by_default__6d45535f
              value: "1"
          - expression:
              key: auth.identity.userid
              value: auth.identity.userid
          - expression:
              key: ratelimit.hits_addend
              value: responseBodyJSON("/usage/total_tokens")
          predicates:
          - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")'
        scope: llm/e2e-distinct-2-simulated-kserve-route
        service: ratelimit-report-service
        sources:
        - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny
      name: 8f3d4eba15beb172bf4e002293d7d6f62ec785582b0843b554fddb428c0ef6e9
      routeRuleConditions:
        hostnames:
        - maas.apps.f8d52561-2b93-4828-9e65-78847fe84ae1.prod.konfluxeaas.com
        predicates:
        - request.url_path.startsWith('/llm/e2e-distinct-2-simulated/v1/responses')
    - actions:
      - scope: 3c0d47082320c9bb02d3788ab2b052c696af91abc2ae438437ae71a26936c7c2
        service: auth-service
        sources:
        - authpolicy.kuadrant.io:openshift-ingress/gateway-default-auth
      - conditionalData:
        - data:
          - expression:
              key: tokenlimit.deny_all_by_default__6d45535f
              value: "1"
          - expression:
              key: auth.identity.userid
              value: auth.identity.userid
          - expression:
              key: ratelimit.hits_addend
              value: "0"
          predicates:
          - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")'
        scope: llm/e2e-distinct-simulated-kserve-route
        service: ratelimit-check-service
        sources:
        - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny
      - conditionalData:
        - data:
          - expression:
              key: tokenlimit.deny_all_by_default__6d45535f
              value: "1"
          - expression:
              key: auth.identity.userid
              value: auth.identity.userid
          - expression:
              key: ratelimit.hits_addend
              value: responseBodyJSON("/usage/total_tokens")
          predicates:
          - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")'
        scope: llm/e2e-distinct-simulated-kserve-route
        service: ratelimit-report-service
        sources:
        - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny
      name: 51930f66bcec9a5b2cbed2bad82f3115e9e8456bede62ed8f0968bfd2e5c2c95
      routeRuleConditions:
        hostnames:
        - maas.apps.f8d52561-2b93-4828-9e65-78847fe84ae1.prod.konfluxeaas.com
        predicates:
        - request.url_path.startsWith('/llm/e2e-distinct-simulated/v1/completions')
    - actions:
      - scope: df733b2c652bfe2458c9e19932b1091e939c1a62178d6879462b3b4f73fca4bb
        service: auth-service
        sources:
        - authpolicy.kuadrant.io:openshift-ingress/gateway-default-auth
      - conditionalData:
        - data:
          - expression:
              key: tokenlimit.deny_all_by_default__6d45535f
              value: "1"
          - expression:
              key: auth.identity.userid
              value: auth.identity.userid
          - expression:
              key: ratelimit.hits_addend
              value: "0"
          predicates:
          - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")'
        scope: llm/e2e-trlp-test-simulated-kserve-route
        service: ratelimit-check-service
        sources:
        - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny
      - conditionalData:
        - data:
          - expression:
              key: tokenlimit.deny_all_by_default__6d45535f
              value: "1"
          - expression:
              key: auth.identity.userid
              value: auth.identity.userid
          - expression:
              key: ratelimit.hits_addend
              value: responseBodyJSON("/usage/total_tokens")
          predicates:
          - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")'
        scope: llm/e2e-trlp-test-simulated-kserve-route
        service: ratelimit-report-service
        sources:
        - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny
      name: 98a8a3ef344674c298577e4bae3cec3f61427d9cdcb289ae34583d80debc2096
      routeRuleConditions:
        hostnames:
        - maas.apps.f8d52561-2b93-4828-9e65-78847fe84ae1.prod.konfluxeaas.com
        predicates:
        - request.url_path.startsWith('/llm/e2e-trlp-test-simulated/v1/responses')
    - actions:
      - scope: d3b195a61a7f24c6bf1fba40f9f2e2565facb6af92e959c1546ac398a9172618
        service: auth-service
        sources:
        - authpolicy.kuadrant.io:openshift-ingress/gateway-default-auth
      - conditionalData:
        - data:
          - expression:
              key: tokenlimit.deny_all_by_default__6d45535f
              value: "1"
          - expression:
              key: auth.identity.userid
              value: auth.identity.userid
          - expression:
              key: ratelimit.hits_addend
              value: "0"
          predicates:
          - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")'
        scope: llm/e2e-distinct-simulated-kserve-route
        service: ratelimit-check-service
        sources:
        - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny
      - conditionalData:
        - data:
          - expression:
              key: tokenlimit.deny_all_by_default__6d45535f
              value: "1"
          - expression:
              key: auth.identity.userid
              value: auth.identity.userid
          - expression:
              key: ratelimit.hits_addend
              value: responseBodyJSON("/usage/total_tokens")
          predicates:
          - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")'
        scope: llm/e2e-distinct-simulated-kserve-route
        service: ratelimit-report-service
        sources:
        - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny
      name: 98c0e935c2ff0acea5c50e4c0d1f2bd461c76dc9c92420ce00a5c3682448ed37
      routeRuleConditions:
        hostnames:
        - maas.apps.f8d52561-2b93-4828-9e65-78847fe84ae1.prod.konfluxeaas.com
        predicates:
        - request.url_path.startsWith('/llm/e2e-distinct-simulated/v1/responses')
    - actions:
      - scope: 7371c34ce8e4df2309ee8f952c87f921947b289427b6e9ea579dcb9970fc1b86
        service: auth-service
        sources:
        - authpolicy.kuadrant.io:llm/maas-auth-premium-simulated-simulated-premium
      - conditionalData:
        - data:
          - expression:
              key: tokenlimit.models_as_a_service_premium_simulator_subscription_premium_simulated_simulated_premium_tokens__a2a80825
              value: "1"
          - expression:
              key: auth.identity.userid
              value: auth.identity.userid
          - expression:
              key: ratelimit.hits_addend
              value: "0"
          predicates:
          - auth.identity.selected_subscription_key == "models-as-a-service/premium-simulator-subscription@llm/premium-simulated-simulated-premium"
            && !request.path.endsWith("/v1/models")
        scope: llm/premium-simulated-simulated-premium-kserve-route
        service: ratelimit-check-service
        sources:
        - tokenratelimitpolicy.kuadrant.io:llm/maas-trlp-premium-simulated-simulated-premium
      - conditionalData:
        - data:
          - expression:
              key: tokenlimit.models_as_a_service_premium_simulator_subscription_premium_simulated_simulated_premium_tokens__a2a80825
              value: "1"
          - expression:
              key: auth.identity.userid
              value: auth.identity.userid
          - expression:
              key: ratelimit.hits_addend
              value: responseBodyJSON("/usage/total_tokens")
          predicates:
          - auth.identity.selected_subscription_key == "models-as-a-service/premium-simulator-subscription@llm/premium-simulated-simulated-premium"
            && !request.path.endsWith("/v1/models")
        scope: llm/premium-simulated-simulated-premium-kserve-route
        service: ratelimit-report-service
        sources:
        - tokenratelimitpolicy.kuadrant.io:llm/maas-trlp-premium-simulated-simulated-premium
      name: 83d6ee2b82a6f2d55c3f24769bf4b37a23a4c306c25555796ea7d8adff98ab78
      routeRuleConditions:
        hostnames:
        - maas.apps.f8d52561-2b93-4828-9e65-78847fe84ae1.prod.konfluxeaas.com
        predicates:
        - request.url_path.startsWith('/llm/premium-simulated-simulated-premium')
    - actions:
      - scope: 3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3
        service: auth-service
        sources:
        - authpolicy.kuadrant.io:llm/maas-auth-facebook-opt-125m-simulated
      - conditionalData:
        - data:
          - expression:
              key: tokenlimit.models_as_a_service_simulator_subscription_facebook_opt_125m_simulated_tokens__87db8427
              value: "1"
          - expression:
              key: auth.identity.userid
              value: auth.identity.userid
          - expression:
              key: ratelimit.hits_addend
              value: "0"
          predicates:
          - auth.identity.selected_subscription_key == "models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated"
            && !request.path.endsWith("/v1/models")
        scope: llm/facebook-opt-125m-simulated-kserve-route
        service: ratelimit-check-service
        sources:
        - tokenratelimitpolicy.kuadrant.io:llm/maas-trlp-facebook-opt-125m-simulated
      - conditionalData:
        - data:
          - expression:
              key: tokenlimit.models_as_a_service_simulator_subscription_facebook_opt_125m_simulated_tokens__87db8427
              value: "1"
          - expression:
              key: auth.identity.userid
              value: auth.identity.userid
          - expression:
              key: ratelimit.hits_addend
              value: responseBodyJSON("/usage/total_tokens")
          predicates:
          - auth.identity.selected_subscription_key == "models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated"
            && !request.path.endsWith("/v1/models")
        scope: llm/facebook-opt-125m-simulated-kserve-route
        service: ratelimit-report-service
        sources:
        - tokenratelimitpolicy.kuadrant.io:llm/maas-trlp-facebook-opt-125m-simulated
      name: 52724d58c6fe20e918b83e9fa4d38838322106ae5699c53a1ebd06ac562bace0
      routeRuleConditions:
        hostnames:
        - maas.apps.f8d52561-2b93-4828-9e65-78847fe84ae1.prod.konfluxeaas.com
        predicates:
        - request.url_path.startsWith('/llm/facebook-opt-125m-simulated')
    - actions:
      - scope: a89b0896df0d8cd430f1c81b6eb292ddc044daed393537d009a6330718f58d4b
        service: auth-service
        sources:
        - authpolicy.kuadrant.io:openshift-ingress/gateway-default-auth
      - conditionalData:
        - data:
          - expression:
              key: tokenlimit.deny_all_by_default__6d45535f
              value: "1"
          - expression:
              key: auth.identity.userid
              value: auth.identity.userid
          - expression:
              key: ratelimit.hits_addend
              value: "0"
          predicates:
          - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")'
        scope: llm/e2e-distinct-2-simulated-kserve-route
        service: ratelimit-check-service
        sources:
        - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny
      - conditionalData:
        - data:
          - expression:
              key: tokenlimit.deny_all_by_default__6d45535f
              value: "1"
          - expression:
              key: auth.identity.userid
              value: auth.identity.userid
          - expression:
              key: ratelimit.hits_addend
              value: responseBodyJSON("/usage/total_tokens")
          predicates:
          - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")'
        scope: llm/e2e-distinct-2-simulated-kserve-route
        service: ratelimit-report-service
        sources:
        - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny
      name: 19351aef834c29b9c945e331bbd788d2fe2abf35419f84c67ccf819e09fd9c9d
      routeRuleConditions:
        hostnames:
        - maas.apps.f8d52561-2b93-4828-9e65-78847fe84ae1.prod.konfluxeaas.com
        predicates:
        - request.url_path.startsWith('/llm/e2e-distinct-2-simulated')
    - actions:
      - scope: 5fea747cb803a5ee3aeb620187bd9ec74ccccd10a92474ef528215a7ff146c8f
        service: auth-service
        sources:
        - authpolicy.kuadrant.io:openshift-ingress/gateway-default-auth
      - conditionalData:
        - data:
          - expression:
              key: tokenlimit.deny_all_by_default__6d45535f
              value: "1"
          - expression:
              key: auth.identity.userid
              value: auth.identity.userid
          - expression:
              key: ratelimit.hits_addend
              value: "0"
          predicates:
          - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")'
        scope: llm/e2e-trlp-test-simulated-kserve-route
        service: ratelimit-check-service
        sources:
        - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny
      - conditionalData:
        - data:
          - expression:
              key: tokenlimit.deny_all_by_default__6d45535f
              value: "1"
          - expression:
              key: auth.identity.userid
              value: auth.identity.userid
          - expression:
              key: ratelimit.hits_addend
              value: responseBodyJSON("/usage/total_tokens")
          predicates:
          - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")'
        scope: llm/e2e-trlp-test-simulated-kserve-route
        service: ratelimit-report-service
        sources:
        - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny
      name: af9dc122d1b7b40cea939223043ab6bf0b326c5800ad3e93ae9535f42f25e382
      routeRuleConditions:
        hostnames:
        - maas.apps.f8d52561-2b93-4828-9e65-78847fe84ae1.prod.konfluxeaas.com
        predicates:
        - request.url_path.startsWith('/llm/e2e-trlp-test-simulated')
    - actions:
      - scope: 86cbb62fb4d82d4dc402b3281444539a5625c4bb4c86bbc4912c70e690a2e374
        service: auth-service
        sources:
        - authpolicy.kuadrant.io:openshift-ingress/gateway-default-auth
      - conditionalData:
        - data:
          - expression:
              key: tokenlimit.deny_all_by_default__6d45535f
              value: "1"
          - expression:
              key: auth.identity.userid
              value: auth.identity.userid
          - expression:
              key: ratelimit.hits_addend
              value: "0"
          predicates:
          - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")'
        scope: llm/e2e-distinct-simulated-kserve-route
        service: ratelimit-check-service
        sources:
        - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny
      - conditionalData:
        - data:
          - expression:
              key: tokenlimit.deny_all_by_default__6d45535f
              value: "1"
          - expression:
              key: auth.identity.userid
              value: auth.identity.userid
          - expression:
              key: ratelimit.hits_addend
              value: responseBodyJSON("/usage/total_tokens")
          predicates:
          - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")'
        scope: llm/e2e-distinct-simulated-kserve-route
        service: ratelimit-report-service
        sources:
        - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny
      name: 8528560d1f0f64a9f095e6b86529a066f967c27ec9a59103ff60499a25ac474e
      routeRuleConditions:
        hostnames:
        - maas.apps.f8d52561-2b93-4828-9e65-78847fe84ae1.prod.konfluxeaas.com
        predicates:
        - request.url_path.startsWith('/llm/e2e-distinct-simulated')
    - actions:
      - predicates:
        - request.path != "/maas-api/health" || request.method != "GET"
        scope: 64a4fb0342f88ea589d83c2f8fa31545655652a27e95b54e34ff1aea7a23ce7a
        service: auth-service
        sources:
        - authpolicy.kuadrant.io:redhat-ai-gateway-infra/maas-api-auth-policy
      - conditionalData:
        - data:
          - expression:
              key: tokenlimit.deny_all_by_default__6d45535f
              value: "1"
          - expression:
              key: auth.identity.userid
              value: auth.identity.userid
          - expression:
              key: ratelimit.hits_addend
              value: "0"
          predicates:
          - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")'
        scope: redhat-ai-gateway-infra/maas-api-route
        service: ratelimit-check-service
        sources:
        - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny
      - conditionalData:
        - data:
          - expression:
              key: tokenlimit.deny_all_by_default__6d45535f
              value: "1"
          - expression:
              key: auth.identity.userid
              value: auth.identity.userid
          - expression:
              key: ratelimit.hits_addend
              value: responseBodyJSON("/usage/total_tokens")
          predicates:
          - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")'
        scope: redhat-ai-gateway-infra/maas-api-route
        service: ratelimit-report-service
        sources:
        - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny
      name: f1a50469efc731d924029bf793788da35301cee27d205af9e77a9643be3af415
      routeRuleConditions:
        hostnames:
        - maas.apps.f8d52561-2b93-4828-9e65-78847fe84ae1.prod.konfluxeaas.com
        predicates:
        - request.url_path.startsWith('/v1/models')
    - actions:
      - predicates:
        - request.path != "/maas-api/health" || request.method != "GET"
        scope: 36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612
        service: auth-service
        sources:
        - authpolicy.kuadrant.io:redhat-ai-gateway-infra/maas-api-auth-policy
      - conditionalData:
        - data:
          - expression:
              key: tokenlimit.deny_all_by_default__6d45535f
              value: "1"
          - expression:
              key: auth.identity.userid
              value: auth.identity.userid
          - expression:
              key: ratelimit.hits_addend
              value: "0"
          predicates:
          - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")'
        scope: redhat-ai-gateway-infra/maas-api-route
        service: ratelimit-check-service
        sources:
        - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny
      - conditionalData:
        - data:
          - expression:
              key: tokenlimit.deny_all_by_default__6d45535f
              value: "1"
          - expression:
              key: auth.identity.userid
              value: auth.identity.userid
          - expression:
              key: ratelimit.hits_addend
              value: responseBodyJSON("/usage/total_tokens")
          predicates:
          - '!request.path.startsWith("/maas-api") && !request.path.startsWith("/v1/models")'
        scope: redhat-ai-gateway-infra/maas-api-route
        service: ratelimit-report-service
        sources:
        - tokenratelimitpolicy.kuadrant.io:openshift-ingress/gateway-default-deny
      name: cd732481b9f2c6e5ef471f1b9e837e340c259c7c5cf93e6c9e8e63180a45846d
      routeRuleConditions:
        hostnames:
        - maas.apps.f8d52561-2b93-4828-9e65-78847fe84ae1.prod.konfluxeaas.com
        predicates:
        - request.url_path.startsWith('/maas-api')
    services:
      auth-service:
        endpoint: kuadrant-auth-service
        failureMode: deny
        timeout: 200ms
        type: auth
      ratelimit-check-service:
        endpoint: kuadrant-ratelimit-service
        failureMode: deny
        timeout: 100ms
        type: ratelimit-check
      ratelimit-report-service:
        endpoint: kuadrant-ratelimit-service
        failureMode: deny
        timeout: 100ms
        type: ratelimit-report
      ratelimit-service:
        endpoint: kuadrant-ratelimit-service
        failureMode: allow
        timeout: 100ms
        type: ratelimit
  targetRefs:
  - group: gateway.networking.k8s.io
    kind: Gateway
    name: maas-default-gateway
  url: quay.io/kuadrant/wasm-shim:v0.12.1