/workspace/source/test/e2e/tests/test_namespace_scoping.py:212: test_namespace_scoping validates single-tenant dormant mode; skipped when ENABLE_TENANT_NAMESPACE_DISCOVERY=true/workspace/source/test/e2e/tests/test_namespace_scoping.py:245: test_namespace_scoping validates single-tenant dormant mode; skipped when ENABLE_TENANT_NAMESPACE_DISCOVERY=true/workspace/source/test/e2e/tests/test_namespace_scoping.py:283: test_namespace_scoping validates single-tenant dormant mode; skipped when ENABLE_TENANT_NAMESPACE_DISCOVERY=true/workspace/source/test/e2e/tests/test_namespace_scoping.py:320: test_namespace_scoping validates single-tenant dormant mode; skipped when ENABLE_TENANT_NAMESPACE_DISCOVERY=true/workspace/source/test/e2e/tests/test_namespace_scoping.py:377: test_namespace_scoping validates single-tenant dormant mode; skipped when ENABLE_TENANT_NAMESPACE_DISCOVERY=true/workspace/source/test/e2e/tests/test_namespace_scoping.py:453: test_namespace_scoping validates single-tenant dormant mode; skipped when ENABLE_TENANT_NAMESPACE_DISCOVERY=true/workspace/source/test/e2e/tests/test_subscription.py:1055: gateway-only mode: per-model AuthPolicy is not createdself = <test_aitenant_lifecycle.TestAITenantLifecycle object at 0x7f9a9fb63280> def test_aitenant_create_bootstrap_resources(self): case = _new_aitenant_case() try: _apply_gateway_fixture(case) _apply_aitenant(case) > _assert_aitenant_bootstrap_resources(case) test/e2e/tests/test_aitenant_lifecycle.py:423: _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ test/e2e/tests/test_aitenant_lifecycle.py:230: in _assert_aitenant_bootstrap_resources tenant_config = _wait_for_json( _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ kind = 'maastenantconfig', name = 'default-tenant' namespace = 'ai-tenant-e2e-ait-0dbe3ebb' def _wait_for_json(kind, name, namespace=None, *, predicate=None, timeout=180, interval=5): deadline = time.time() + timeout last_obj = None while time.time() < deadline: obj = _get_json_or_none(kind, name, namespace) if obj is not None: last_obj = obj if predicate is None or predicate(obj): return obj time.sleep(interval) > raise AssertionError(f"{kind}/{name} in {namespace or '<cluster>'} did not satisfy condition. Last object: {last_obj}") E AssertionError: maastenantconfig/default-tenant in ai-tenant-e2e-ait-0dbe3ebb did not satisfy condition. Last object: {'apiVersion': 'maas.opendatahub.io/v1alpha1', 'kind': 'MaasTenantConfig', 'metadata': {'annotations': {'maas.opendatahub.io/aitenant-name': 'e2e-ait-0dbe3ebb', 'maas.opendatahub.io/aitenant-namespace': 'ai-tenants'}, 'creationTimestamp': '2026-07-28T01:20:57Z', 'finalizers': ['maas.opendatahub.io/tenant-cleanup'], 'generation': 1, 'labels': {'ai-gateway.opendatahub.io/tenant': 'e2e-ait-0dbe3ebb', 'app.kubernetes.io/managed-by': 'maas-controller', 'app.kubernetes.io/part-of': 'modelsasservice', 'maas.opendatahub.io/managed-by-aitenant': 'true', 'maas.opendatahub.io/tenant-name': 'e2e-ait-0dbe3ebb', 'maas.opendatahub.io/tenant-namespace': 'ai-tenant-e2e-ait-0dbe3ebb'}, 'name': 'default-tenant', 'namespace': 'ai-tenant-e2e-ait-0dbe3ebb', 'resourceVersion': '49133', 'uid': 'c89187f9-e1ac-431a-8084-37a86bec3b42'}, 'spec': {}, 'status': {'conditions': [{'lastTransitionTime': '2026-07-28T01:20:57Z', 'message': 'AuthConfig CRD (Kuadrant) is available on the cluster', 'observedGeneration': 1, 'reason': 'DependenciesMet', 'status': 'True', 'type': 'DependenciesAvailable'}, {'lastTransitionTime': '2026-07-28T01:20:57Z', 'message': 'Prerequisites satisfied; see Degraded for warnings', 'observedGeneration': 1, 'reason': 'PrerequisitesMet', 'status': 'True', 'type': 'MaaSPrerequisitesAvailable'}, {'lastTransitionTime': '2026-07-28T01:25:58Z', 'message': '', 'observedGeneration': 1, 'reason': 'Resolved', 'status': 'False', 'type': 'Degraded'}, {'lastTransitionTime': '2026-07-28T01:20:58Z', 'message': 'EnvoyFilter openshift-ingress/payload-processing targetRefs[0].name="maas-default-gateway"; expected gateway "e2e-ait-0dbe3ebb"', 'observedGeneration': 1, 'reason': 'DeploymentsNotReady', 'status': 'False', 'type': 'DeploymentsAvailable'}, {'lastTransitionTime': '2026-07-28T01:20:58Z', 'message': 'EnvoyFilter openshift-ingress/payload-processing targetRefs[0].name="maas-default-gateway"; expected gateway "e2e-ait-0dbe3ebb"', 'observedGeneration': 1, 'reason': 'DeploymentsNotReady', 'status': 'False', 'type': 'Ready'}], 'infraNamespace': 'odh-ai-gateway-infra', 'phase': 'Pending'}} test/e2e/tests/test_aitenant_lifecycle.py:114: AssertionErrorself = <test_aitenant_lifecycle.TestAITenantLifecycle object at 0x7f9a9fb7b040> def test_aitenant_migrates_legacy_tenant_to_maas_tenant_config(self): if not _crd_exists(LEGACY_TENANT_CRD): pytest.skip(f"Missing CRD {LEGACY_TENANT_CRD}; legacy Tenant migration test is not applicable") suffix = uuid.uuid4().hex[:8] aitenant_name = f"e2e-migrate-{suffix}" tenant_ns = f"ai-tenant-{aitenant_name}" gateway_name = f"{aitenant_name}-gw" max_expiration_days = 37 try: _apply({"apiVersion": "v1", "kind": "Namespace", "metadata": {"name": tenant_ns}}) _apply_gateway_fixture({"gateway_name": gateway_name, "aitenant_name": aitenant_name}) _apply( { "apiVersion": "maas.opendatahub.io/v1alpha1", "kind": "Tenant", "metadata": { "name": TENANT_NAME, "namespace": tenant_ns, }, "spec": { "gatewayRef": { "namespace": GATEWAY_NAMESPACE, "name": gateway_name, }, "apiKeys": { "maxExpirationDays": max_expiration_days, }, "externalOIDC": { "issuerUrl": "https://issuer.example.com/realms/e2e", "clientId": "e2e-client", "ttl": 600, }, "telemetry": { "enabled": False, "metrics": { "captureOrganization": False, "captureUser": True, "captureGroup": True, "captureModelUsage": False, }, }, }, } ) _apply_aitenant( { "aitenant_name": aitenant_name, "tenant_ns": tenant_ns, "gateway_name": gateway_name, } ) aitenant = _wait_for_json( AITENANT_KIND, aitenant_name, AITENANT_NAMESPACE, predicate=_aitenant_ready, timeout=240, ) assert aitenant["spec"]["gateway"]["name"] == gateway_name assert aitenant["spec"]["oidc"]["issuerUrl"] == "https://issuer.example.com/realms/e2e" assert aitenant["spec"]["oidc"]["clientId"] == "e2e-client" assert aitenant["status"]["gatewayRef"] == { "namespace": GATEWAY_NAMESPACE, "name": gateway_name, } def migrated_config(obj): labels = obj.get("metadata", {}).get("labels") or {} annotations = obj.get("metadata", {}).get("annotations") or {} spec = obj.get("spec") or {} telemetry = spec.get("telemetry") or {} metrics = telemetry.get("metrics") or {} return ( _maas_tenant_config_ready(obj) and labels.get("maas.opendatahub.io/managed-by-aitenant") == "true" and labels.get("ai-gateway.opendatahub.io/tenant") == aitenant_name and labels.get("maas.opendatahub.io/tenant-name") == aitenant_name and labels.get("maas.opendatahub.io/tenant-namespace") == tenant_ns and annotations.get(ANNOTATION_AITENANT_NAME) == aitenant_name and annotations.get(ANNOTATION_AITENANT_NAMESPACE) == AITENANT_NAMESPACE and (spec.get("apiKeys") or {}).get("maxExpirationDays") == max_expiration_days and telemetry.get("enabled") is False and metrics.get("captureOrganization") is False and metrics.get("captureUser") is True and metrics.get("captureGroup") is True and metrics.get("captureModelUsage") is False ) > tenant_config = _wait_for_json( TENANT_CONFIG_KIND, TENANT_NAME, tenant_ns, predicate=migrated_config, timeout=180, ) test/e2e/tests/test_aitenant_lifecycle.py:518: _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ kind = 'maastenantconfig', name = 'default-tenant' namespace = 'ai-tenant-e2e-migrate-c08eabd1' def _wait_for_json(kind, name, namespace=None, *, predicate=None, timeout=180, interval=5): deadline = time.time() + timeout last_obj = None while time.time() < deadline: obj = _get_json_or_none(kind, name, namespace) if obj is not None: last_obj = obj if predicate is None or predicate(obj): return obj time.sleep(interval) > raise AssertionError(f"{kind}/{name} in {namespace or '<cluster>'} did not satisfy condition. Last object: {last_obj}") E AssertionError: maastenantconfig/default-tenant in ai-tenant-e2e-migrate-c08eabd1 did not satisfy condition. Last object: {'apiVersion': 'maas.opendatahub.io/v1alpha1', 'kind': 'MaasTenantConfig', 'metadata': {'annotations': {'maas.opendatahub.io/aitenant-name': 'e2e-migrate-c08eabd1', 'maas.opendatahub.io/aitenant-namespace': 'ai-tenants'}, 'creationTimestamp': '2026-07-28T01:26:23Z', 'finalizers': ['maas.opendatahub.io/tenant-cleanup'], 'generation': 1, 'labels': {'ai-gateway.opendatahub.io/tenant': 'e2e-migrate-c08eabd1', 'app.kubernetes.io/managed-by': 'maas-controller', 'app.kubernetes.io/part-of': 'modelsasservice', 'maas.opendatahub.io/managed-by-aitenant': 'true', 'maas.opendatahub.io/tenant-name': 'e2e-migrate-c08eabd1', 'maas.opendatahub.io/tenant-namespace': 'ai-tenant-e2e-migrate-c08eabd1'}, 'name': 'default-tenant', 'namespace': 'ai-tenant-e2e-migrate-c08eabd1', 'resourceVersion': '51943', 'uid': '9902f41a-060a-4069-a3ca-ba118228343f'}, 'spec': {'apiKeys': {'maxExpirationDays': 37}, 'telemetry': {'enabled': False, 'metrics': {'captureGroup': True, 'captureModelUsage': False, 'captureOrganization': False, 'captureUser': True}}}, 'status': {'conditions': [{'lastTransitionTime': '2026-07-28T01:26:23Z', 'message': 'AuthConfig CRD (Kuadrant) is available on the cluster', 'observedGeneration': 1, 'reason': 'DependenciesMet', 'status': 'True', 'type': 'DependenciesAvailable'}, {'lastTransitionTime': '2026-07-28T01:26:23Z', 'message': 'Prerequisites satisfied; see Degraded for warnings', 'observedGeneration': 1, 'reason': 'PrerequisitesMet', 'status': 'True', 'type': 'MaaSPrerequisitesAvailable'}, {'lastTransitionTime': '2026-07-28T01:29:12Z', 'message': '', 'observedGeneration': 1, 'reason': 'Resolved', 'status': 'False', 'type': 'Degraded'}, {'lastTransitionTime': '2026-07-28T01:26:24Z', 'message': 'EnvoyFilter openshift-ingress/payload-processing targetRefs[0].name="maas-default-gateway"; expected gateway "e2e-migrate-c08eabd1-gw"', 'observedGeneration': 1, 'reason': 'DeploymentsNotReady', 'status': 'False', 'type': 'DeploymentsAvailable'}, {'lastTransitionTime': '2026-07-28T01:26:24Z', 'message': 'EnvoyFilter openshift-ingress/payload-processing targetRefs[0].name="maas-default-gateway"; expected gateway "e2e-migrate-c08eabd1-gw"', 'observedGeneration': 1, 'reason': 'DeploymentsNotReady', 'status': 'False', 'type': 'Ready'}], 'infraNamespace': 'odh-ai-gateway-infra', 'phase': 'Pending'}} test/e2e/tests/test_aitenant_lifecycle.py:114: AssertionErrorself = <test_aitenant_lifecycle.TestAITenantLifecycle object at 0x7f9a9fb7b280> def test_aitenant_delete_cleans_maas_resources_and_preserves_user_objects(self): case = _new_aitenant_case() try: _apply_gateway_fixture(case) _apply_aitenant(case) > _assert_aitenant_bootstrap_resources(case) test/e2e/tests/test_aitenant_lifecycle.py:553: _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ test/e2e/tests/test_aitenant_lifecycle.py:230: in _assert_aitenant_bootstrap_resources tenant_config = _wait_for_json( _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ kind = 'maastenantconfig', name = 'default-tenant' namespace = 'ai-tenant-e2e-ait-e0fd3dac' def _wait_for_json(kind, name, namespace=None, *, predicate=None, timeout=180, interval=5): deadline = time.time() + timeout last_obj = None while time.time() < deadline: obj = _get_json_or_none(kind, name, namespace) if obj is not None: last_obj = obj if predicate is None or predicate(obj): return obj time.sleep(interval) > raise AssertionError(f"{kind}/{name} in {namespace or '<cluster>'} did not satisfy condition. Last object: {last_obj}") E AssertionError: maastenantconfig/default-tenant in ai-tenant-e2e-ait-e0fd3dac did not satisfy condition. Last object: {'apiVersion': 'maas.opendatahub.io/v1alpha1', 'kind': 'MaasTenantConfig', 'metadata': {'annotations': {'maas.opendatahub.io/aitenant-name': 'e2e-ait-e0fd3dac', 'maas.opendatahub.io/aitenant-namespace': 'ai-tenants'}, 'creationTimestamp': '2026-07-28T01:29:50Z', 'finalizers': ['maas.opendatahub.io/tenant-cleanup'], 'generation': 1, 'labels': {'ai-gateway.opendatahub.io/tenant': 'e2e-ait-e0fd3dac', 'app.kubernetes.io/managed-by': 'maas-controller', 'app.kubernetes.io/part-of': 'modelsasservice', 'maas.opendatahub.io/managed-by-aitenant': 'true', 'maas.opendatahub.io/tenant-name': 'e2e-ait-e0fd3dac', 'maas.opendatahub.io/tenant-namespace': 'ai-tenant-e2e-ait-e0fd3dac'}, 'name': 'default-tenant', 'namespace': 'ai-tenant-e2e-ait-e0fd3dac', 'resourceVersion': '55924', 'uid': '428bd61b-a1a5-4e4c-b254-2edbbbda9ea7'}, 'spec': {}, 'status': {'conditions': [{'lastTransitionTime': '2026-07-28T01:29:50Z', 'message': 'AuthConfig CRD (Kuadrant) is available on the cluster', 'observedGeneration': 1, 'reason': 'DependenciesMet', 'status': 'True', 'type': 'DependenciesAvailable'}, {'lastTransitionTime': '2026-07-28T01:29:50Z', 'message': 'Prerequisites satisfied; see Degraded for warnings', 'observedGeneration': 1, 'reason': 'PrerequisitesMet', 'status': 'True', 'type': 'MaaSPrerequisitesAvailable'}, {'lastTransitionTime': '2026-07-28T01:34:44Z', 'message': '', 'observedGeneration': 1, 'reason': 'Resolved', 'status': 'False', 'type': 'Degraded'}, {'lastTransitionTime': '2026-07-28T01:29:51Z', 'message': 'EnvoyFilter openshift-ingress/payload-processing targetRefs[0].name="maas-default-gateway"; expected gateway "e2e-ait-e0fd3dac"', 'observedGeneration': 1, 'reason': 'DeploymentsNotReady', 'status': 'False', 'type': 'DeploymentsAvailable'}, {'lastTransitionTime': '2026-07-28T01:29:51Z', 'message': 'EnvoyFilter openshift-ingress/payload-processing targetRefs[0].name="maas-default-gateway"; expected gateway "e2e-ait-e0fd3dac"', 'observedGeneration': 1, 'reason': 'DeploymentsNotReady', 'status': 'False', 'type': 'Ready'}], 'infraNamespace': 'odh-ai-gateway-infra', 'phase': 'Pending'}} test/e2e/tests/test_aitenant_lifecycle.py:114: AssertionErrorself = <test_aitenant_lifecycle.TestAITenantLifecycle object at 0x7f9a9fb7b910> def test_aitenant_derives_non_default_tenant_namespace(self): """RHOAIENG-66836: non-default AITenant must not use models-as-a-service tenant namespace.""" suffix = uuid.uuid4().hex[:8] aitenant_name = f"e2e-derive-{suffix}" reserved_ns = os.environ.get("MAAS_SUBSCRIPTION_NAMESPACE", "models-as-a-service") expected_ns = f"ai-tenant-{aitenant_name}" gateway_name = aitenant_name try: _apply_gateway_fixture({"gateway_name": gateway_name, "aitenant_name": aitenant_name}) _apply( { "apiVersion": "maas.opendatahub.io/v1alpha1", "kind": "AITenant", "metadata": {"name": aitenant_name, "namespace": AITENANT_NAMESPACE}, "spec": {}, } ) aitenant = _wait_for_json( AITENANT_KIND, aitenant_name, AITENANT_NAMESPACE, predicate=_aitenant_ready, timeout=120, ) assert aitenant["status"]["tenantNamespace"] == expected_ns assert aitenant["status"]["tenantNamespace"] != reserved_ns > _wait_for_json( TENANT_CONFIG_KIND, TENANT_NAME, expected_ns, predicate=_maas_tenant_config_ready, timeout=300, ) test/e2e/tests/test_aitenant_lifecycle.py:630: _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ kind = 'maastenantconfig', name = 'default-tenant' namespace = 'ai-tenant-e2e-derive-1a2510d6' def _wait_for_json(kind, name, namespace=None, *, predicate=None, timeout=180, interval=5): deadline = time.time() + timeout last_obj = None while time.time() < deadline: obj = _get_json_or_none(kind, name, namespace) if obj is not None: last_obj = obj if predicate is None or predicate(obj): return obj time.sleep(interval) > raise AssertionError(f"{kind}/{name} in {namespace or '<cluster>'} did not satisfy condition. Last object: {last_obj}") E AssertionError: maastenantconfig/default-tenant in ai-tenant-e2e-derive-1a2510d6 did not satisfy condition. Last object: {'apiVersion': 'maas.opendatahub.io/v1alpha1', 'kind': 'MaasTenantConfig', 'metadata': {'annotations': {'maas.opendatahub.io/aitenant-name': 'e2e-derive-1a2510d6', 'maas.opendatahub.io/aitenant-namespace': 'ai-tenants'}, 'creationTimestamp': '2026-07-28T01:35:16Z', 'finalizers': ['maas.opendatahub.io/tenant-cleanup'], 'generation': 1, 'labels': {'ai-gateway.opendatahub.io/tenant': 'e2e-derive-1a2510d6', 'app.kubernetes.io/managed-by': 'maas-controller', 'app.kubernetes.io/part-of': 'modelsasservice', 'maas.opendatahub.io/managed-by-aitenant': 'true', 'maas.opendatahub.io/tenant-name': 'e2e-derive-1a2510d6', 'maas.opendatahub.io/tenant-namespace': 'ai-tenant-e2e-derive-1a2510d6'}, 'name': 'default-tenant', 'namespace': 'ai-tenant-e2e-derive-1a2510d6', 'resourceVersion': '59700', 'uid': 'cc21eed7-7234-4c3f-bc26-de77c8b69fb8'}, 'spec': {}, 'status': {'conditions': [{'lastTransitionTime': '2026-07-28T01:35:16Z', 'message': 'AuthConfig CRD (Kuadrant) is available on the cluster', 'observedGeneration': 1, 'reason': 'DependenciesMet', 'status': 'True', 'type': 'DependenciesAvailable'}, {'lastTransitionTime': '2026-07-28T01:35:16Z', 'message': 'Prerequisites satisfied; see Degraded for warnings', 'observedGeneration': 1, 'reason': 'PrerequisitesMet', 'status': 'True', 'type': 'MaaSPrerequisitesAvailable'}, {'lastTransitionTime': '2026-07-28T01:40:06Z', 'message': '', 'observedGeneration': 1, 'reason': 'Resolved', 'status': 'False', 'type': 'Degraded'}, {'lastTransitionTime': '2026-07-28T01:35:17Z', 'message': 'EnvoyFilter openshift-ingress/payload-processing targetRefs[0].name="maas-default-gateway"; expected gateway "e2e-derive-1a2510d6"', 'observedGeneration': 1, 'reason': 'DeploymentsNotReady', 'status': 'False', 'type': 'DeploymentsAvailable'}, {'lastTransitionTime': '2026-07-28T01:35:17Z', 'message': 'EnvoyFilter openshift-ingress/payload-processing targetRefs[0].name="maas-default-gateway"; expected gateway "e2e-derive-1a2510d6"', 'observedGeneration': 1, 'reason': 'DeploymentsNotReady', 'status': 'False', 'type': 'Ready'}], 'infraNamespace': 'odh-ai-gateway-infra', 'phase': 'Pending'}} test/e2e/tests/test_aitenant_lifecycle.py:114: AssertionError/workspace/source/test/e2e/tests/test_tenant_namespace_discovery.py:186: OIDC_ISSUER_URL not set; per-tenant OIDC E2E requires external OIDC deploy/workspace/source/test/e2e/tests/test_tenant_namespace_discovery.py:353: Dormant-mode test mutates controller flags; set ENABLE_TENANT_DISCOVERY_DORMANT_E2E=true/workspace/source/test/e2e/tests/test_gateway_scoped_authpolicy.py:170: gateway-default-auth not present (maas-gateway-auth is active); scoping is validated by unit tests/workspace/source/test/e2e/tests/test_tenant_auth_isolation.py:212: Per-tenant OIDC tokens unavailable — set OIDC_TOKEN_URL (tenant-a) and OIDC_TOKEN_URL_TENANT_B (tenant-b), or OIDC_TOKEN_TENANT_A / OIDC_TOKEN_TENANT_Bself = <test_tenant_subscription_isolation.TestTenantSubscriptionIsolation object at 0x7f9a9fb45e80> tenant_subscriptions = {'auth_policy': 'e2e-sub-iso-auth-42f03f', 'shared': 'e2e-shared-sub-42f03f', 'tenant_a': {'base_url': 'https://e2e-sh...est-model-73e2fd', 'model_namespace': 'ai-tenant-e2e-shared-a-73e2fd', ...}, 'tenant_a_only': 'e2e-a-only-42f03f', ...} def test_subscription_list_scoped_to_tenant(self, tenant_subscriptions): """4.1: Subscription list contains current tenant subscriptions and excludes the other tenant.""" tenant_a = tenant_subscriptions["tenant_a"] tenant_b = tenant_subscriptions["tenant_b"] key_a = _create_key_for_subscription(tenant_a, tenant_subscriptions["tenant_a_only"]) key_b = _create_key_for_subscription(tenant_b, tenant_subscriptions["tenant_b_only"]) response_a = list_subscriptions_at(tenant_a["base_url"], key_a) assert response_a.status_code == 200, f"Tenant A list failed: {response_summary(response_a)}" ids_a = {item["subscription_id_header"] for item in response_a.json()} > assert tenant_subscriptions["tenant_a_only"] in ids_a E AssertionError: assert 'e2e-a-only-42f03f' in set() test/e2e/tests/test_tenant_subscription_isolation.py:171: AssertionError