--- apiVersion: apiextensions.k8s.io/v1 kind: CustomResourceDefinition metadata: annotations: controller-gen.kubebuilder.io/version: v0.16.4 kubectl.kubernetes.io/last-applied-configuration: | {"apiVersion":"apiextensions.k8s.io/v1","kind":"CustomResourceDefinition","metadata":{"annotations":{"controller-gen.kubebuilder.io/version":"v0.16.4"},"name":"configs.maas.opendatahub.io"},"spec":{"group":"maas.opendatahub.io","names":{"kind":"Config","listKind":"ConfigList","plural":"configs","shortNames":["maasconfig"],"singular":"config"},"scope":"Cluster","versions":[{"additionalPrinterColumns":[{"jsonPath":".status.phase","name":"Phase","type":"string"},{"jsonPath":".metadata.creationTimestamp","name":"Age","type":"date"}],"name":"v1alpha1","schema":{"openAPIV3Schema":{"description":"Config is a cluster-scoped anchor for MaaS platform resources. Namespaced and\ncluster-scoped operands created by maas-controller reference this object as their controller\nowner so Kubernetes garbage collection can tear down the full graph when the Config\nis deleted (subject to finalizers on dependents).","properties":{"apiVersion":{"description":"APIVersion defines the versioned schema of this representation of an object.\nServers should convert recognized schemas to the latest internal value, and\nmay reject unrecognized values.\nMore info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources","type":"string"},"kind":{"description":"Kind is a string value representing the REST resource this object represents.\nServers may infer this from the endpoint the client submits requests to.\nCannot be updated.\nIn CamelCase.\nMore info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds","type":"string"},"metadata":{"type":"object"},"spec":{"description":"ConfigSpec defines the desired state of Config.","properties":{"limitadorScrapeInterval":{"default":"30s","description":"LimitadorScrapeInterval defines the scrape interval for Limitador metrics in the ServiceMonitor.\nDefaults to \"30s\" if not specified.","maxLength":16,"pattern":"^([0-9]+(\\.[0-9]+)?(ms|s|m|h))+$","type":"string"},"usageLogging":{"default":false,"description":"UsageLogging enables cluster-wide per-request structured OTel access logging\nfor usage tracking (token counts, identity, model). When enabled, the\ncontroller deploys an EnvoyFilter on the shared gateway that emits\nstructured usage logs via OTel Access Log Service.\nEnabling this logs identity attributes (user_id, key_id, key_name,\norganization_id, groups, subscription) per request — ensure\nGDPR/privacy compliance before enabling.","type":"boolean"}},"type":"object"},"status":{"description":"ConfigStatus defines the observed state of Config.\nThe platform reads these fields to determine module health and complete the version handshake.","properties":{"conditions":{"description":"Conditions represent the latest available observations of the Config's state.\nRequired conditions: Ready, ProvisioningSucceeded, Degraded.","items":{"description":"Condition contains details for one aspect of the current state of this API Resource.","properties":{"lastTransitionTime":{"description":"lastTransitionTime is the last time the condition transitioned from one status to another.\nThis should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable.","format":"date-time","type":"string"},"message":{"description":"message is a human readable message indicating details about the transition.\nThis may be an empty string.","maxLength":32768,"type":"string"},"observedGeneration":{"description":"observedGeneration represents the .metadata.generation that the condition was set based upon.\nFor instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date\nwith respect to the current state of the instance.","format":"int64","minimum":0,"type":"integer"},"reason":{"description":"reason contains a programmatic identifier indicating the reason for the condition's last transition.\nProducers of specific condition types may define expected values and meanings for this field,\nand whether the values are considered a guaranteed API.\nThe value should be a CamelCase string.\nThis field may not be empty.","maxLength":1024,"minLength":1,"pattern":"^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$","type":"string"},"status":{"description":"status of the condition, one of True, False, Unknown.","enum":["True","False","Unknown"],"type":"string"},"type":{"description":"type of condition in CamelCase or in foo.example.com/CamelCase.","maxLength":316,"pattern":"^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$","type":"string"}},"required":["lastTransitionTime","message","reason","status","type"],"type":"object"},"type":"array"},"observedGeneration":{"description":"ObservedGeneration is the last .metadata.generation the controller reconciled.","format":"int64","type":"integer"},"phase":{"description":"Phase is the top-level lifecycle phase: \"Ready\" or \"Not Ready\".","type":"string"},"releases":{"description":"Releases tracks installed component versions. The entry with name \"platform\"\nparticipates in the platform version handshake.","items":{"description":"ComponentRelease identifies a versioned component managed by the module.\nThe platform reads the entry with Name \"platform\" to complete the version handshake.","properties":{"name":{"description":"Name identifies the component (e.g. \"platform\", \"maas-controller\").","type":"string"},"repoUrl":{"description":"RepoURL is the source repository for this component.","type":"string"},"version":{"description":"Version is the semantic version of the component.","type":"string"}},"required":["name","version"],"type":"object"},"type":"array"}},"type":"object"}},"type":"object","x-kubernetes-validations":[{"message":"Config name must be default","rule":"self.metadata.name == 'default'"}]}},"served":true,"storage":true,"subresources":{"status":{}}}]}} creationTimestamp: "2026-07-16T12:54:22Z" generation: 1 managedFields: - apiVersion: apiextensions.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:acceptedNames: f:kind: {} f:listKind: {} f:plural: {} f:shortNames: {} f:singular: {} f:conditions: k:{"type":"Established"}: .: {} f:lastTransitionTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} k:{"type":"NamesAccepted"}: .: {} f:lastTransitionTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: kube-apiserver operation: Update subresource: status time: "2026-07-16T12:54:22Z" - apiVersion: apiextensions.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: .: {} f:controller-gen.kubebuilder.io/version: {} f:kubectl.kubernetes.io/last-applied-configuration: {} f:spec: f:conversion: .: {} f:strategy: {} f:group: {} f:names: f:kind: {} f:listKind: {} f:plural: {} f:shortNames: {} f:singular: {} f:scope: {} f:versions: {} manager: kubectl-client-side-apply operation: Update time: "2026-07-16T12:54:22Z" name: configs.maas.opendatahub.io resourceVersion: "21292" uid: 9e811edd-87f4-4d01-b22f-b66d3989b1ce spec: conversion: strategy: None group: maas.opendatahub.io names: kind: Config listKind: ConfigList plural: configs shortNames: - maasconfig singular: config scope: Cluster versions: - additionalPrinterColumns: - jsonPath: .status.phase name: Phase type: string - jsonPath: .metadata.creationTimestamp name: Age type: date name: v1alpha1 schema: openAPIV3Schema: description: |- Config is a cluster-scoped anchor for MaaS platform resources. Namespaced and cluster-scoped operands created by maas-controller reference this object as their controller owner so Kubernetes garbage collection can tear down the full graph when the Config is deleted (subject to finalizers on dependents). properties: apiVersion: description: |- APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources type: string kind: description: |- Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds type: string metadata: type: object spec: description: ConfigSpec defines the desired state of Config. properties: limitadorScrapeInterval: default: 30s description: |- LimitadorScrapeInterval defines the scrape interval for Limitador metrics in the ServiceMonitor. Defaults to "30s" if not specified. maxLength: 16 pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$ type: string usageLogging: default: false description: |- UsageLogging enables cluster-wide per-request structured OTel access logging for usage tracking (token counts, identity, model). When enabled, the controller deploys an EnvoyFilter on the shared gateway that emits structured usage logs via OTel Access Log Service. Enabling this logs identity attributes (user_id, key_id, key_name, organization_id, groups, subscription) per request — ensure GDPR/privacy compliance before enabling. type: boolean type: object status: description: |- ConfigStatus defines the observed state of Config. The platform reads these fields to determine module health and complete the version handshake. properties: conditions: description: |- Conditions represent the latest available observations of the Config's state. Required conditions: Ready, ProvisioningSucceeded, Degraded. items: description: Condition contains details for one aspect of the current state of this API Resource. properties: lastTransitionTime: description: |- lastTransitionTime is the last time the condition transitioned from one status to another. This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. format: date-time type: string message: description: |- message is a human readable message indicating details about the transition. This may be an empty string. maxLength: 32768 type: string observedGeneration: description: |- observedGeneration represents the .metadata.generation that the condition was set based upon. For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date with respect to the current state of the instance. format: int64 minimum: 0 type: integer reason: description: |- reason contains a programmatic identifier indicating the reason for the condition's last transition. Producers of specific condition types may define expected values and meanings for this field, and whether the values are considered a guaranteed API. The value should be a CamelCase string. This field may not be empty. maxLength: 1024 minLength: 1 pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ type: string status: description: status of the condition, one of True, False, Unknown. enum: - "True" - "False" - Unknown type: string type: description: type of condition in CamelCase or in foo.example.com/CamelCase. maxLength: 316 pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ type: string required: - lastTransitionTime - message - reason - status - type type: object type: array observedGeneration: description: ObservedGeneration is the last .metadata.generation the controller reconciled. format: int64 type: integer phase: description: 'Phase is the top-level lifecycle phase: "Ready" or "Not Ready".' type: string releases: description: |- Releases tracks installed component versions. The entry with name "platform" participates in the platform version handshake. items: description: |- ComponentRelease identifies a versioned component managed by the module. The platform reads the entry with Name "platform" to complete the version handshake. properties: name: description: Name identifies the component (e.g. "platform", "maas-controller"). type: string repoUrl: description: RepoURL is the source repository for this component. type: string version: description: Version is the semantic version of the component. type: string required: - name - version type: object type: array type: object type: object x-kubernetes-validations: - message: Config name must be default rule: self.metadata.name == 'default' served: true storage: true subresources: status: {} status: acceptedNames: kind: Config listKind: ConfigList plural: configs shortNames: - maasconfig singular: config conditions: - lastTransitionTime: "2026-07-16T12:54:22Z" message: no conflicts found reason: NoConflicts status: "True" type: NamesAccepted - lastTransitionTime: "2026-07-16T12:54:22Z" message: the initial names have been accepted reason: InitialNamesAccepted status: "True" type: Established storedVersions: - v1alpha1