apiVersion: maas.opendatahub.io/v1alpha1
kind: MaaSAuthPolicy
metadata:
  annotations:
    kubectl.kubernetes.io/last-applied-configuration: |
      {"apiVersion":"maas.opendatahub.io/v1alpha1","kind":"MaaSAuthPolicy","metadata":{"annotations":{"openshift.io/description":"Grants premium-user group access to the premium simulator model","openshift.io/display-name":"Premium Simulator Access"},"name":"premium-simulator-access","namespace":"models-as-a-service"},"spec":{"modelRefs":[{"name":"premium-simulated-simulated-premium","namespace":"llm"}],"subjects":{"groups":[{"name":"premium-user"}],"users":[]}}}
    openshift.io/description: Grants premium-user group access to the premium simulator
      model
    openshift.io/display-name: Premium Simulator Access
  creationTimestamp: "2026-10-29T22:49:10Z"
  finalizers:
  - maas.opendatahub.io/authpolicy-cleanup
  generation: 3
  managedFields:
  - apiVersion: maas.opendatahub.io/v1alpha1
    fieldsType: FieldsV1
    fieldsV1:
      f:metadata:
        f:annotations:
          .: {}
          f:kubectl.kubernetes.io/last-applied-configuration: {}
          f:openshift.io/description: {}
          f:openshift.io/display-name: {}
      f:spec:
        .: {}
        f:modelRefs: {}
        f:subjects:
          .: {}
          f:groups: {}
    manager: kubectl-client-side-apply
    operation: Update
    time: "2026-10-29T22:49:10Z"
  - apiVersion: maas.opendatahub.io/v1alpha1
    fieldsType: FieldsV1
    fieldsV1:
      f:metadata:
        f:finalizers:
          .: {}
          v:"maas.opendatahub.io/authpolicy-cleanup": {}
    manager: manager
    operation: Update
    time: "2026-10-29T22:49:11Z"
  - apiVersion: maas.opendatahub.io/v1alpha1
    fieldsType: FieldsV1
    fieldsV1:
      f:spec:
        f:subjects:
          f:users: {}
    manager: kubectl-patch
    operation: Update
    time: "2026-10-29T22:49:51Z"
  - apiVersion: maas.opendatahub.io/v1alpha1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        .: {}
        f:conditions: {}
        f:phase: {}
    manager: manager
    operation: Update
    subresource: status
    time: "2026-10-29T22:49:52Z"
  name: premium-simulator-access
  namespace: models-as-a-service
  resourceVersion: "22833"
  uid: b6564b26-c4ab-4ad1-8ed0-7a974a0f3d13
spec:
  modelRefs:
  - name: premium-simulated-simulated-premium
    namespace: llm
  subjects:
    groups:
    - name: premium-user
    users:
    - system:serviceaccount:premium-users-namespace:premium-service-account
status:
  conditions:
  - lastTransitionTime: "2026-10-29T22:49:11Z"
    message: No conflicting AuthPolicies detected on MaaS-managed HTTPRoutes
    observedGeneration: 3
    reason: NoConflict
    status: "False"
    type: ConflictingAuthPolicy
  - lastTransitionTime: "2026-10-29T22:49:11Z"
    message: successfully reconciled
    observedGeneration: 3
    reason: Reconciled
    status: "True"
    type: Ready
  phase: Active