# --- namespace: models-as-a-service --- apiVersion: v1 items: - apiVersion: maas.opendatahub.io/v1alpha1 kind: MaaSAuthPolicy metadata: annotations: kubectl.kubernetes.io/last-applied-configuration: | {"apiVersion":"maas.opendatahub.io/v1alpha1","kind":"MaaSAuthPolicy","metadata":{"annotations":{"openshift.io/description":"Grants premium-user group access to the premium simulator model","openshift.io/display-name":"Premium Simulator Access"},"name":"premium-simulator-access","namespace":"models-as-a-service"},"spec":{"modelRefs":[{"name":"premium-simulated-simulated-premium","namespace":"llm"}],"subjects":{"groups":[{"name":"premium-user"}],"users":[]}}} openshift.io/description: Grants premium-user group access to the premium simulator model openshift.io/display-name: Premium Simulator Access creationTimestamp: "2026-07-13T16:49:45Z" finalizers: - maas.opendatahub.io/authpolicy-cleanup generation: 3 name: premium-simulator-access namespace: models-as-a-service resourceVersion: "24524" uid: 72c3e1de-d26e-4225-847c-50c2a518a4cc spec: modelRefs: - name: premium-simulated-simulated-premium namespace: llm subjects: groups: - name: premium-user users: - system:serviceaccount:premium-users-namespace:premium-service-account status: conditions: - lastTransitionTime: "2026-07-13T16:49:45Z" message: No conflicting AuthPolicies detected on MaaS-managed HTTPRoutes observedGeneration: 3 reason: NoConflict status: "False" type: ConflictingAuthPolicy - lastTransitionTime: "2026-07-13T16:49:45Z" message: successfully reconciled observedGeneration: 3 reason: Reconciled status: "True" type: Ready phase: Active - apiVersion: maas.opendatahub.io/v1alpha1 kind: MaaSAuthPolicy metadata: annotations: kubectl.kubernetes.io/last-applied-configuration: | {"apiVersion":"maas.opendatahub.io/v1alpha1","kind":"MaaSAuthPolicy","metadata":{"annotations":{"openshift.io/description":"Grants all authenticated users access to the free-tier simulator model","openshift.io/display-name":"Simulator Access (Free)"},"name":"simulator-access","namespace":"models-as-a-service"},"spec":{"modelRefs":[{"name":"facebook-opt-125m-simulated","namespace":"llm"}],"subjects":{"groups":[{"name":"system:authenticated"}],"users":[]}}} openshift.io/description: Grants all authenticated users access to the free-tier simulator model openshift.io/display-name: Simulator Access (Free) creationTimestamp: "2026-07-13T16:49:45Z" finalizers: - maas.opendatahub.io/authpolicy-cleanup generation: 2 name: simulator-access namespace: models-as-a-service resourceVersion: "22042" uid: 8783f245-4b4b-4b46-ad37-92d187e1ffb4 spec: modelRefs: - name: facebook-opt-125m-simulated namespace: llm subjects: groups: - name: system:authenticated status: conditions: - lastTransitionTime: "2026-07-13T16:49:45Z" message: No conflicting AuthPolicies detected on MaaS-managed HTTPRoutes observedGeneration: 2 reason: NoConflict status: "False" type: ConflictingAuthPolicy - lastTransitionTime: "2026-07-13T16:49:45Z" message: successfully reconciled observedGeneration: 2 reason: Reconciled status: "True" type: Ready phase: Active kind: List metadata: resourceVersion: ""